last executing test programs:

6.057412407s ago: executing program 1 (id=391):
r0 = socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="961ac873bcec455945f0ba6053aff50ae346fd8616dc8c3e7cba8f7e0afe06f52871d2869cd19fe98b74ec4becbab0ae1099faf3bf17581f1ea7ea75d449cd9e0a522730740d36af2fd552fa6dab469c02d891ad3ea8bab9986621af545c8c0390b4932d66aedb5eac3d3cf7a226579a6339c49810d7cb2ac28a39d89beb2c4bc57e5e077b3c99a1fba42f9f6a5b1c401c6b0d37736924395f5e79fa", 0x9c}, {&(0x7f0000000040)="5b3a3891780bbe5b1eac8674e5", 0xd}, {&(0x7f00000001c0)="2ba6db00dda0b113e7dc5640eada70b310197e30f34d49b23b262710d7035896955a67965788fd278210dd319bd3494c06b6234c97c2bdeadc67c313c5e5d3008aa21f79b11a2c5da096681b05004adad7853383d131036123a8e2cd3a1ed477b3e742e6f70c95275cf86e501d78413678587d855f7c", 0x76}, {&(0x7f0000000240)="e469eb67263eef396b4ec772ef257a75cba55c0d916e0c9b602d306a2d098b9fe9efd50732b3f7f39b8fcf5bc2fc0af1d7ca0ad53929c53323c400c641473b9cebdd35b74e8ed636f952bd652206a17ad0808791c290991cb033637052839a0913ed007255de44e1d6b7697be1b5c8642c39d1e432e8caa01a57e03171753df54216aac340f1927df7e7f617afd27e744aaa5095e721e2a7d201bf687e6e42a83e71ebf7dab0c4b0cc5b8693970a1628cdec438218b73ee9d1f3a07088abf9edb1db61262c80629286ae501e6d75ba11cdf5e818f913bfc6d79abac991ace593d2", 0xe1}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="20000000000000000000000007000000890f71e0000011ffff0300001414aa0014000000000000000000000001000000020000000000000011070000000000000000000001000000eb000000f8ff000054565b244ccb91ad99ca4c508d0d63028c48085550e2922a5e842f33a979204b16a2cd85b8567a5b3fb55484ffa8cbd95a36c1ef2defbdcb744c733fa9b6ab272388aaa3b8b0fe63d4bb"], 0x50}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)='%-5lx  \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000340)=0x3)

5.8755519s ago: executing program 1 (id=393):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x47aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33)
r5 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="550a0000000000006111e232"], 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfec9}], 0x4}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="a985"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

5.069328309s ago: executing program 1 (id=398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 6)

4.997720233s ago: executing program 0 (id=400):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="fc01", 0x2}], 0x1, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x10200, 0x9, 0x75}}], 0x20, 0x4000}, 0x4000)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8919, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x20, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20044000)

4.008841547s ago: executing program 1 (id=405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000000006007fffffff030005002b00000002000000ac1414aa0000000000000000170008007805"], 0x108}, 0x1, 0x7}, 0x0)
socket(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x800830b}, 0x2000, 0x2, 0x3a2d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$kcm(0xa, 0x1, 0x106)
recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4", 0x36}], 0x1}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc00e6d782b7af4e76e00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r7}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)

3.791698994s ago: executing program 4 (id=406):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x2000, 0x20001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc9"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000"], 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r8 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94)
close(r8)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)

3.73331359s ago: executing program 0 (id=407):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0xd26, <r3=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r3}, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)

2.835658132s ago: executing program 0 (id=408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000180000022abd7000fddbdf2500000000000000000000000000000000ffffffff0000000000000000000000004e2200064e230004020000a0d5000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000001000000000bb000004d53c000000ffffffff00000000000000000000000002985a51000000007f00000000000000ffffffffffffffff0d000000000000000000000000000080ba0000000000000007000000000000000e000000000000003f000000000000004d00000000000004000000000000000500000010000000d700000025bd7000003500000a00070908000000000000000d000000000000000c0015005a07350009000000"], 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0xcc, 0x20, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xf28, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888)

2.677402044s ago: executing program 3 (id=410):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket(0x840000000002, 0x3, 0xff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2.628959446s ago: executing program 0 (id=411):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x100600, 0x2, 0xfffffffe, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x11a}], 0x1}, 0x10049014)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000340)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000400"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f)

2.618677184s ago: executing program 2 (id=412):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x0, 0x0, 0x0, 0xc, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x48000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x9, 0x60000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.604929701s ago: executing program 4 (id=413):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203010300000000e0400000000000000800010001"], 0x1c}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8}, 0x4)

2.525285094s ago: executing program 1 (id=414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f}, 0x50)
r3 = socket$kcm(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0xc800)
r9 = socket$key(0xf, 0x3, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0xb}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xf8, 0x0, 0x1, [@generic="ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4d4dcf8115ddf"]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xac, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0xf5, 0x90, 0x0, 0x1, [@nested={0xdd, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @pid}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64bf88da83639f53a9b25264f438337448c8ad49b7c34940dd9", @typed={0x4, 0x13a}, @nested={0x25, 0x5b, 0x0, 0x1, [@generic="bc6dad2ec06ca4d4fe3dd7c279ab0ab97e40888491432f6bcceedf366490a5e0ca"]}]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31c"]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000deff00000000000000000800120002000200000000000000000030002b000303"], 0xa0}}, 0x0)
r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4000000000}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, r12, 0x0)

2.452324952s ago: executing program 3 (id=415):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fff98500000003000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000400000900030073797a3000000000a4000300dc7f29416a8dab79868959c0d0ba", @ANYRESOCT=r6], 0x118}, 0x1, 0x0, 0x0, 0x240041c4}, 0x240408d0)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0xffffff9d, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES8=r4], 0x9a)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0xfff, 0x5, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@newqdisc={0xe0, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x9, 0x1}, {0xa, 0xa}, {0x0, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9f16}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0xb, 0x5f75, 0x7, 0x0, 0xfffffffd, 0x3ff, 0x5}}, {0xe, 0x2, [0x0, 0x5, 0x4, 0x6, 0x35f]}}, {{0x1c, 0x1, {0xec, 0x80, 0x0, 0x2703371c, 0x1, 0x6b0, 0x5, 0x1}}, {0x6, 0x2, [0x7f]}}, {{0x1c, 0x1, {0x9, 0x4, 0x68a, 0x7, 0x0, 0x80, 0x9, 0x1}}, {0x6, 0x2, [0x7ff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3393}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x5, 0x3, 0x0, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

2.377439481s ago: executing program 2 (id=416):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.169233253s ago: executing program 3 (id=417):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.077659854s ago: executing program 4 (id=418):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0xb8}, {0x0, 0x80, 0x4, 0xe97}, {0x0, 0x20}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x184}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1.98885654s ago: executing program 3 (id=419):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000f100000004070000040000000c2b0400963ae3c9", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000a00"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r0, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f00000008c0), 0x0, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffc02, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xa, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000500)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
r8 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r8, r5, 0x0, 0x10, &(0x7f0000000200)='rcu_utilization\x00'}, 0x30)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xdffffffe, 0x9, 0x9, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000aff000000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031200048008000240000000120800014000000000140003006e657464657673696d3060fd"], 0xac}}, 0x0)

1.919391494s ago: executing program 4 (id=420):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0x0, 0x3000000}]}]}, {0x0, [0x30, 0x5f, 0x1e]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) (fail_nth: 10)

1.558998705s ago: executing program 1 (id=421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x16)

1.382461089s ago: executing program 4 (id=422):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x2000, 0x20001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c0000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYBLOB="7f000001ac141400000000011c0e000000000000"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000"], 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r8 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94)
close(r8)
r9 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
close(r9)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r12, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)

1.11055466s ago: executing program 3 (id=423):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x2000, 0x20001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc9"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05000000"], 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r8 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94)
close(r8)
r9 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
close(r9)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0)

1.08396384s ago: executing program 2 (id=424):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

504.811834ms ago: executing program 4 (id=425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x16) (fail_nth: 3)

404.735822ms ago: executing program 0 (id=426):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x0, 0x0, 0x0, 0xc, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x48000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x9, 0x60000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

364.580763ms ago: executing program 2 (id=427):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400190100000000000000022865d1519e"], 0x28}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x1c17, 0x30000, 0x523b, 0x20020, r1, 0x1, '\x00', r2, r3, 0x0, 0x0, 0x2}, 0x50)

155.660015ms ago: executing program 3 (id=428):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x18}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x5, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20)

81.384604ms ago: executing program 2 (id=429):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

7.638253ms ago: executing program 2 (id=430):
r0 = socket$kcm(0x10, 0x2, 0x4) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00'}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x2d, 'blkio'}]}, 0x7) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x541b, 0x20000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg(r0, 0x0, 0x40000020)

0s ago: executing program 0 (id=431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0xc800}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts.
[   79.676488][ T5851] cgroup: Unknown subsys name 'net'
[   79.789181][ T5851] cgroup: Unknown subsys name 'cpuset'
[   79.799062][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.218526][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.703052][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.721793][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.723321][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.732654][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.738948][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.745714][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.753924][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.766290][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.767395][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.774387][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.782223][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.796142][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.796220][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.803462][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.812335][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.819189][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.827466][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.834142][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.840545][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.847718][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.857498][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.872766][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.880448][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.881947][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.900210][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.519489][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   84.607881][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   84.728783][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   84.793667][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   84.906534][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   84.962015][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.969900][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.978809][ T5864] bridge_slave_0: entered allmulticast mode
[   84.987681][ T5864] bridge_slave_0: entered promiscuous mode
[   85.036045][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.043278][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.051153][ T5862] bridge_slave_0: entered allmulticast mode
[   85.059032][ T5862] bridge_slave_0: entered promiscuous mode
[   85.068491][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.077212][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.085071][ T5864] bridge_slave_1: entered allmulticast mode
[   85.093255][ T5864] bridge_slave_1: entered promiscuous mode
[   85.111073][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.118610][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.127037][ T5861] bridge_slave_0: entered allmulticast mode
[   85.135116][ T5861] bridge_slave_0: entered promiscuous mode
[   85.156314][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.163640][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.171857][ T5862] bridge_slave_1: entered allmulticast mode
[   85.180138][ T5862] bridge_slave_1: entered promiscuous mode
[   85.213736][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.222664][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.231849][ T5861] bridge_slave_1: entered allmulticast mode
[   85.240095][ T5861] bridge_slave_1: entered promiscuous mode
[   85.358864][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.380666][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.394940][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.405549][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.413161][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.420810][ T5867] bridge_slave_0: entered allmulticast mode
[   85.428717][ T5867] bridge_slave_0: entered promiscuous mode
[   85.438127][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.445887][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.453986][ T5867] bridge_slave_1: entered allmulticast mode
[   85.462655][ T5867] bridge_slave_1: entered promiscuous mode
[   85.472515][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.487222][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.533106][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.646619][ T5864] team0: Port device team_slave_0 added
[   85.652963][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.660504][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.668441][ T5863] bridge_slave_0: entered allmulticast mode
[   85.677224][ T5863] bridge_slave_0: entered promiscuous mode
[   85.688067][ T5861] team0: Port device team_slave_0 added
[   85.697027][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.709168][ T5862] team0: Port device team_slave_0 added
[   85.719105][ T5862] team0: Port device team_slave_1 added
[   85.727160][ T5864] team0: Port device team_slave_1 added
[   85.761004][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.768347][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.776187][ T5863] bridge_slave_1: entered allmulticast mode
[   85.783289][ T5863] bridge_slave_1: entered promiscuous mode
[   85.792388][ T5861] team0: Port device team_slave_1 added
[   85.817283][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.856741][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.864537][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.897901][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.906607][ T5881] Bluetooth: hci1: command tx timeout
[   85.909648][ T5185] Bluetooth: hci3: command tx timeout
[   85.962984][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.970715][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.986458][ T5881] Bluetooth: hci2: command tx timeout
[   86.000482][ T5185] Bluetooth: hci4: command tx timeout
[   86.006581][ T5881] Bluetooth: hci0: command tx timeout
[   86.016144][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.033056][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.040911][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.067766][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.080738][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.088169][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.116263][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.141459][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.149674][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.177808][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.206080][ T5867] team0: Port device team_slave_0 added
[   86.231028][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.242962][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.251117][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.281225][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.295819][ T5867] team0: Port device team_slave_1 added
[   86.317472][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.430222][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.438157][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.467749][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.481878][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.490199][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.520131][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.534852][ T5863] team0: Port device team_slave_0 added
[   86.571314][ T5864] hsr_slave_0: entered promiscuous mode
[   86.578895][ T5864] hsr_slave_1: entered promiscuous mode
[   86.592806][ T5862] hsr_slave_0: entered promiscuous mode
[   86.599535][ T5862] hsr_slave_1: entered promiscuous mode
[   86.607142][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   86.613564][ T5862] Cannot create hsr debugfs directory
[   86.642858][ T5863] team0: Port device team_slave_1 added
[   86.729103][ T5861] hsr_slave_0: entered promiscuous mode
[   86.739096][ T5861] hsr_slave_1: entered promiscuous mode
[   86.746000][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   86.752188][ T5861] Cannot create hsr debugfs directory
[   86.778230][ T5867] hsr_slave_0: entered promiscuous mode
[   86.785053][ T5867] hsr_slave_1: entered promiscuous mode
[   86.792500][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   86.799027][ T5867] Cannot create hsr debugfs directory
[   86.816897][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.823936][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.850795][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.906242][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.913490][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.943679][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.161729][ T5863] hsr_slave_0: entered promiscuous mode
[   87.170441][ T5863] hsr_slave_1: entered promiscuous mode
[   87.178389][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[   87.185013][ T5863] Cannot create hsr debugfs directory
[   87.768981][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.782088][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.793440][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.812558][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.892366][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.910904][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.924482][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.941672][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.986003][ T5881] Bluetooth: hci1: command tx timeout
[   87.987868][ T5185] Bluetooth: hci3: command tx timeout
[   88.051322][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.066104][ T5185] Bluetooth: hci0: command tx timeout
[   88.066579][ T5881] Bluetooth: hci4: command tx timeout
[   88.072997][ T5877] Bluetooth: hci2: command tx timeout
[   88.099622][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.112185][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.144791][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.250797][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.277260][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.290421][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.304681][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.433005][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.472857][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.510209][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   88.518003][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.533363][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.552849][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.564378][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.599624][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.607219][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.644678][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.651857][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.662504][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   88.711075][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.718290][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.758400][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.790887][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.798292][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.814639][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.874189][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   88.969206][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.977208][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.000104][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   89.040171][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.047753][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.078243][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.085493][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.133391][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.140862][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.268891][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.310786][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.341076][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   89.393748][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.401481][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.488818][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.496579][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.639918][ T5864] veth0_vlan: entered promiscuous mode
[   89.718992][ T5864] veth1_vlan: entered promiscuous mode
[   89.742525][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.944250][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.973781][ T5864] veth0_macvtap: entered promiscuous mode
[   90.014220][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.023203][ T5864] veth1_macvtap: entered promiscuous mode
[   90.069117][ T5881] Bluetooth: hci1: command tx timeout
[   90.069127][ T5877] Bluetooth: hci3: command tx timeout
[   90.139269][ T5861] veth0_vlan: entered promiscuous mode
[   90.151521][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.159263][ T5881] Bluetooth: hci2: command tx timeout
[   90.159284][ T5877] Bluetooth: hci0: command tx timeout
[   90.164711][ T5881] Bluetooth: hci4: command tx timeout
[   90.232186][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.261979][ T5862] veth0_vlan: entered promiscuous mode
[   90.280747][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.293794][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.309355][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.320866][ T5861] veth1_vlan: entered promiscuous mode
[   90.335260][ T5862] veth1_vlan: entered promiscuous mode
[   90.363389][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.429279][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.511413][ T5861] veth0_macvtap: entered promiscuous mode
[   90.526983][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.539527][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.552684][ T5861] veth1_macvtap: entered promiscuous mode
[   90.599907][ T5867] veth0_vlan: entered promiscuous mode
[   90.630314][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.639067][ T5862] veth0_macvtap: entered promiscuous mode
[   90.668407][ T5862] veth1_macvtap: entered promiscuous mode
[   90.677787][ T5867] veth1_vlan: entered promiscuous mode
[   90.688698][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.690365][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.711315][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.750716][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.792047][ T5863] veth0_vlan: entered promiscuous mode
[   90.805248][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.821583][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.850220][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.858348][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.883362][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.894561][ T5863] veth1_vlan: entered promiscuous mode
[   90.927581][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.014364][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.024004][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.063586][    C0] hrtimer: interrupt took 185737 ns
[   91.080858][ T5867] veth0_macvtap: entered promiscuous mode
[   91.091351][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.140185][ T5867] veth1_macvtap: entered promiscuous mode
[   91.154341][ T1017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.188547][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   91.237448][ T5863] veth0_macvtap: entered promiscuous mode
[   91.339677][ T5863] veth1_macvtap: entered promiscuous mode
[   91.349483][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.358493][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.400946][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.412355][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.421203][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.458156][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.472458][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.482751][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.514955][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.515545][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.532995][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.541651][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.553913][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.577615][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.587197][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.621609][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.708739][ T1158] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.738057][ T1158] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.838216][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   91.951562][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.020717][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.029072][ T5993] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2'.
[   92.110079][ T1158] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.156080][ T5881] Bluetooth: hci3: command tx timeout
[   92.162586][ T5877] Bluetooth: hci1: command tx timeout
[   92.178341][ T1158] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.226811][ T5877] Bluetooth: hci0: command tx timeout
[   92.232356][ T5881] Bluetooth: hci2: command tx timeout
[   92.237914][ T5185] Bluetooth: hci4: command tx timeout
[   92.261578][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   92.438601][  T980] cfg80211: failed to load regulatory.db
[   92.448522][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.523652][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.602250][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'.
[   92.622550][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.659321][ T5995] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6'.
[   92.670380][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.875171][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.902652][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.638347][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   93.649248][ T6013] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5'.
[   93.669538][ T6017] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10'.
[   94.062698][ T6025] wg2: entered allmulticast mode
[   94.134495][ T6027] netlink: 13 bytes leftover after parsing attributes in process `syz.1.13'.
[   94.144036][ T6028] wg2: entered promiscuous mode
[   94.564744][ T6037] netlink: 'syz.4.17': attribute type 9 has an invalid length.
[   94.612102][ T6039] Zero length message leads to an empty skb
[   94.694931][ T6039] netlink: 'syz.3.15': attribute type 29 has an invalid length.
[   94.915088][ T6048] netlink: 'syz.4.19': attribute type 29 has an invalid length.
[   96.422662][ T6055] __nla_validate_parse: 6 callbacks suppressed
[   96.422684][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   96.807396][ T6068] wg2: entered allmulticast mode
[   96.834204][ T6071] wg2: entered promiscuous mode
[   96.878589][ T6068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.25'.
[   96.901939][ T6075] wg2: left promiscuous mode
[   96.942453][ T6075] wg2: entered promiscuous mode
[   97.305110][ T6085] netlink: 'syz.3.29': attribute type 29 has an invalid length.
[   98.935885][ T6120] netlink: 277 bytes leftover after parsing attributes in process `syz.4.40'.
[   98.969385][ T6123] netlink: 'syz.2.42': attribute type 10 has an invalid length.
[   98.977692][ T6123] netlink: 55 bytes leftover after parsing attributes in process `syz.2.42'.
[   98.989508][ T6115] wg2: entered allmulticast mode
[   99.009830][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40'.
[   99.015102][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41'.
[   99.088289][ T6122] wg2: entered promiscuous mode
[   99.794484][ T6132] netlink: 13 bytes leftover after parsing attributes in process `syz.1.44'.
[  100.481588][ T6147] netlink: 'syz.4.47': attribute type 29 has an invalid length.
[  101.278479][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.53'.
[  101.355243][ T6176] netlink: 13 bytes leftover after parsing attributes in process `syz.2.55'.
[  101.374496][ T6172] netlink: 'syz.4.53': attribute type 7 has an invalid length.
[  101.422389][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'.
[  101.558988][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'.
[  101.633196][ T6179] wg2: entered allmulticast mode
[  101.643410][ T6182] wg2: entered promiscuous mode
[  101.911268][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[  102.031315][ T6187] netlink: 6 bytes leftover after parsing attributes in process `syz.0.58'.
[  102.167331][ T6191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'.
[  102.213195][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'.
[  102.492241][ T6199] netlink: 13 bytes leftover after parsing attributes in process `syz.3.62'.
[  102.658345][ T6201] netlink: 'syz.1.64': attribute type 10 has an invalid length.
[  102.689223][ T6201] netlink: 55 bytes leftover after parsing attributes in process `syz.1.64'.
[  103.559127][ T6221] wg2: left promiscuous mode
[  103.578932][ T6222] wg2: entered promiscuous mode
[  103.821195][ T6232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.70'.
[  103.881409][ T6228] wg2: left promiscuous mode
[  103.890351][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'.
[  103.901015][ T6231] wg2: entered promiscuous mode
[  104.296510][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'.
[  105.127394][ T6253] wg2: entered allmulticast mode
[  105.153694][ T6254] wg2: entered promiscuous mode
[  105.183078][ T6260] wg2: left promiscuous mode
[  105.241028][ T6262] wg2: entered promiscuous mode
[  105.485122][ T6271] netlink: 'syz.1.82': attribute type 7 has an invalid length.
[  105.717872][ T6279] netlink: 'syz.4.84': attribute type 10 has an invalid length.
[  106.809477][ T6296] __nla_validate_parse: 12 callbacks suppressed
[  106.809501][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[  106.845656][ T6296] netlink: 6 bytes leftover after parsing attributes in process `syz.2.86'.
[  107.028708][ T6293] wg2: left promiscuous mode
[  107.055978][ T6295] wg2: entered promiscuous mode
[  107.208234][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[  107.240560][ T6301] netlink: 'syz.1.90': attribute type 7 has an invalid length.
[  107.253357][ T6301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.90'.
[  107.386184][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'.
[  107.416129][ T6307] netlink: 6 bytes leftover after parsing attributes in process `syz.2.92'.
[  107.583436][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[  107.593815][ T6311] netlink: 6 bytes leftover after parsing attributes in process `syz.0.94'.
[  108.251456][ T6332] wg2: left promiscuous mode
[  108.311313][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'.
[  108.336699][ T6332] wg2: entered promiscuous mode
[  108.370620][ T6335] netlink: 'syz.0.101': attribute type 7 has an invalid length.
[  108.420254][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.101'.
[  108.781292][ T6353] netlink: 'syz.1.107': attribute type 10 has an invalid length.
[  108.847297][ T6354] netlink: 'syz.4.106': attribute type 29 has an invalid length.
[  112.404465][ T6408] __nla_validate_parse: 6 callbacks suppressed
[  112.404517][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'.
[  112.532935][ T6408] netlink: 6 bytes leftover after parsing attributes in process `syz.2.123'.
[  112.934928][ T6418] netlink: 'syz.3.126': attribute type 29 has an invalid length.
[  113.241928][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'.
[  113.273066][ T6428] netlink: 6 bytes leftover after parsing attributes in process `syz.4.130'.
[  113.286116][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'.
[  113.835126][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'.
[  113.857106][ T6436] netlink: 6 bytes leftover after parsing attributes in process `syz.3.133'.
[  114.302891][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'.
[  114.886585][ T6470] netlink: 277 bytes leftover after parsing attributes in process `syz.0.142'.
[  115.345277][ T6484] wg2: left promiscuous mode
[  115.402086][ T6484] wg2: entered promiscuous mode
[  115.424142][ T6484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'.
[  115.547016][ T6489] wg2: left promiscuous mode
[  115.572415][ T6489] wg2: entered promiscuous mode
[  116.242005][ T6509] netlink: 'syz.3.151': attribute type 29 has an invalid length.
[  116.468446][ T6514] netlink: 'syz.1.155': attribute type 29 has an invalid length.
[  117.791749][ T6547] wg2: left promiscuous mode
[  117.886474][ T6547] __nla_validate_parse: 3 callbacks suppressed
[  117.886495][ T6547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.163'.
[  118.023345][ T6550] wg2: entered promiscuous mode
[  118.331655][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[  118.634536][ T6571] netlink: 'syz.4.171': attribute type 29 has an invalid length.
[  119.162317][ T6580] netlink: 'syz.2.173': attribute type 29 has an invalid length.
[  119.822189][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'.
[  119.869525][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'.
[  119.896671][ T6589] wg2: left promiscuous mode
[  119.922686][ T6590] wg2: entered promiscuous mode
[  120.177749][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[  120.711772][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[  121.212517][ T6616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.181'.
[  121.734498][ T6612] wg2: left promiscuous mode
[  121.845192][ T6615] wg2: entered promiscuous mode
[  122.148242][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[  122.869413][ T6631] netlink: 'syz.4.186': attribute type 29 has an invalid length.
[  122.909255][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[  123.054688][ T6643] netlink: 277 bytes leftover after parsing attributes in process `syz.0.188'.
[  123.421580][ T6653] netlink: 'syz.3.190': attribute type 29 has an invalid length.
[  123.688312][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'.
[  124.347273][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[  125.573171][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[  126.065818][ T6693] netlink: 'syz.4.201': attribute type 29 has an invalid length.
[  126.210863][ T6704] wg2: left promiscuous mode
[  126.441442][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'.
[  126.514242][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[  126.529150][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'.
[  126.783116][ T6706] wg2: entered promiscuous mode
[  127.091054][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  127.198819][ T6713] netlink: 6 bytes leftover after parsing attributes in process `syz.1.206'.
[  127.949476][ T6733] __nla_validate_parse: 4 callbacks suppressed
[  127.949496][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'.
[  129.252623][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[  129.683835][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[  130.537369][ T6770] netlink: 'syz.0.224': attribute type 10 has an invalid length.
[  130.545688][ T6770] netlink: 55 bytes leftover after parsing attributes in process `syz.0.224'.
[  130.700591][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'.
[  131.408838][ T6785] netlink: 'syz.4.227': attribute type 10 has an invalid length.
[  131.453639][ T6785] netlink: 55 bytes leftover after parsing attributes in process `syz.4.227'.
[  132.090586][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.228'.
[  132.159732][ T6789] wg2: left promiscuous mode
[  132.177940][ T6793] wg2: entered promiscuous mode
[  132.918082][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[  133.181696][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'.
[  133.229542][ T6812] netlink: 'syz.4.234': attribute type 7 has an invalid length.
[  133.264196][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'.
[  133.304864][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  133.312069][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  133.502634][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'.
[  133.576300][ T6822] netlink: 13 bytes leftover after parsing attributes in process `syz.1.237'.
[  134.660136][ T6847] wg2: left promiscuous mode
[  134.784047][ T6851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.246'.
[  134.808794][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[  134.827499][ T6852] netlink: 6 bytes leftover after parsing attributes in process `syz.1.245'.
[  134.857314][ T6847] wg2: entered promiscuous mode
[  135.054360][ T6859] netlink: 'syz.3.250': attribute type 10 has an invalid length.
[  135.066954][ T6859] netlink: 55 bytes leftover after parsing attributes in process `syz.3.250'.
[  135.151233][ T6865] netlink: 13 bytes leftover after parsing attributes in process `syz.0.251'.
[  136.779073][ T6886] netlink: 'syz.3.256': attribute type 29 has an invalid length.
[  137.469010][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'.
[  138.001934][ T6907] wg2: left promiscuous mode
[  138.040677][ T6909] wg2: entered promiscuous mode
[  138.552162][ T6923] __nla_validate_parse: 3 callbacks suppressed
[  138.552184][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'.
[  138.647205][ T6920] netlink: 'syz.4.264': attribute type 29 has an invalid length.
[  139.232348][ T6927] netlink: 'syz.0.268': attribute type 29 has an invalid length.
[  140.343489][ T6942] wg2: left promiscuous mode
[  140.409816][ T6942] wg2: entered promiscuous mode
[  140.449695][ T6942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[  140.474251][ T6946] wg2: left promiscuous mode
[  140.520970][ T6947] wg2: entered promiscuous mode
[  140.567764][ T6946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.276'.
[  141.643028][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'.
[  142.002925][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[  142.466302][ T6974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.285'.
[  142.496103][ T6968] wg2: left promiscuous mode
[  142.535733][ T6971] wg2: entered promiscuous mode
[  142.678564][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'.
[  143.319236][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[  143.329041][ T6993] netlink: 6 bytes leftover after parsing attributes in process `syz.1.292'.
[  145.273984][ T7035] netlink: 277 bytes leftover after parsing attributes in process `syz.4.300'.
[  145.463111][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'.
[  145.814639][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[  145.829651][ T7050] netlink: 6 bytes leftover after parsing attributes in process `syz.1.303'.
[  146.310700][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  146.910778][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'.
[  147.681347][ T7078] wg2: left promiscuous mode
[  147.715676][ T7079] wg2: entered promiscuous mode
[  147.756376][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'.
[  148.011979][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'.
[  148.037013][ T7081] netlink: 6 bytes leftover after parsing attributes in process `syz.4.317'.
[  149.172109][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'.
[  150.081548][ T7120] netlink: 'syz.1.328': attribute type 3 has an invalid length.
[  150.984625][ T7133] __nla_validate_parse: 1 callbacks suppressed
[  150.984645][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'.
[  151.211373][ T7137] netlink: 'syz.0.332': attribute type 29 has an invalid length.
[  151.524980][ T7141] =======================================================
[  151.524980][ T7141] WARNING: The mand mount option has been deprecated and
[  151.524980][ T7141]          and is ignored by this kernel. Remove the mand
[  151.524980][ T7141]          option from the mount to silence this warning.
[  151.524980][ T7141] =======================================================
[  151.596280][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'.
[  151.606236][ T7145] netlink: 6 bytes leftover after parsing attributes in process `syz.3.335'.
[  151.783830][ T7149] netlink: 'syz.4.337': attribute type 2 has an invalid length.
[  151.819440][ T7149] netlink: 'syz.4.337': attribute type 8 has an invalid length.
[  151.859277][ T7149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.337'.
[  152.029440][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'.
[  153.164360][ T7181] netlink: 'syz.4.348': attribute type 10 has an invalid length.
[  153.294487][ T7186] netlink: 'syz.1.345': attribute type 10 has an invalid length.
[  153.437440][ T7186] team0: Port device wlan1 added
[  153.469155][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[  153.479212][ T7184] netlink: 6 bytes leftover after parsing attributes in process `syz.0.350'.
[  153.859626][ T7200] netlink: 'syz.2.356': attribute type 29 has an invalid length.
[  153.880493][ T7202] netlink: 'syz.2.356': attribute type 29 has an invalid length.
[  153.920338][ T7200] netlink: 'syz.2.356': attribute type 29 has an invalid length.
[  153.974085][ T7200] netlink: 'syz.2.356': attribute type 29 has an invalid length.
[  154.231699][ T7217] FAULT_INJECTION: forcing a failure.
[  154.231699][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  154.249827][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.4.360 Not tainted syzkaller #0 PREEMPT(full) 
[  154.249854][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  154.249873][ T7217] Call Trace:
[  154.249887][ T7217]  <TASK>
[  154.249895][ T7217]  dump_stack_lvl+0x189/0x250
[  154.249924][ T7217]  ? __pfx____ratelimit+0x10/0x10
[  154.249945][ T7217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.249963][ T7217]  ? __pfx__printk+0x10/0x10
[  154.249988][ T7217]  ? __might_fault+0xb0/0x130
[  154.250026][ T7217]  should_fail_ex+0x414/0x560
[  154.250059][ T7217]  _copy_from_user+0x2d/0xb0
[  154.250085][ T7217]  ___sys_sendmsg+0x158/0x2a0
[  154.250112][ T7217]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.250171][ T7217]  ? __fget_files+0x2a/0x420
[  154.250188][ T7217]  ? __fget_files+0x3a0/0x420
[  154.250215][ T7217]  __x64_sys_sendmsg+0x19b/0x260
[  154.250242][ T7217]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.250276][ T7217]  ? __pfx_ksys_write+0x10/0x10
[  154.250299][ T7217]  ? rcu_is_watching+0x15/0xb0
[  154.250323][ T7217]  ? do_syscall_64+0xbe/0x3b0
[  154.250347][ T7217]  do_syscall_64+0xfa/0x3b0
[  154.250366][ T7217]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.250384][ T7217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.250403][ T7217]  ? clear_bhb_loop+0x60/0xb0
[  154.250426][ T7217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.250444][ T7217] RIP: 0033:0x7f69dd78eba9
[  154.250466][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.250481][ T7217] RSP: 002b:00007f69db9b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.250505][ T7217] RAX: ffffffffffffffda RBX: 00007f69dd9d6180 RCX: 00007f69dd78eba9
[  154.250519][ T7217] RDX: 00000000000480c0 RSI: 0000200000000040 RDI: 000000000000000a
[  154.250531][ T7217] RBP: 00007f69db9b4090 R08: 0000000000000000 R09: 0000000000000000
[  154.250543][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.250554][ T7217] R13: 00007f69dd9d6218 R14: 00007f69dd9d6180 R15: 00007fff0dc61078
[  154.250584][ T7217]  </TASK>
[  154.813687][ T7223] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.365'.
[  154.869849][ T7223] netlink: 52 bytes leftover after parsing attributes in process `syz.0.365'.
[  155.089079][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'.
[  155.678491][ T7254] Driver unsupported XDP return value 0 on prog  (id 369) dev N/A, expect packet loss!
[  155.931932][ T7265] unsupported nla_type 52263
[  156.804420][ T7282] validate_nla: 2 callbacks suppressed
[  156.804440][ T7282] netlink: 'syz.0.385': attribute type 10 has an invalid length.
[  156.820675][ T7280] syz.4.384 uses obsolete (PF_INET,SOCK_PACKET)
[  156.889583][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.900028][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.081503][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.089768][ T7282] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.098678][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.106849][ T7282] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.215885][ T7282] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  158.142114][ T7314] __nla_validate_parse: 3 callbacks suppressed
[  158.142136][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  158.182763][ T7315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.814733][ T7328] FAULT_INJECTION: forcing a failure.
[  158.814733][ T7328] name failslab, interval 1, probability 0, space 0, times 1
[  158.839562][ T7328] CPU: 1 UID: 0 PID: 7328 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(full) 
[  158.839589][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  158.839600][ T7328] Call Trace:
[  158.839608][ T7328]  <TASK>
[  158.839616][ T7328]  dump_stack_lvl+0x189/0x250
[  158.839643][ T7328]  ? __pfx____ratelimit+0x10/0x10
[  158.839663][ T7328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.839685][ T7328]  ? __pfx__printk+0x10/0x10
[  158.839715][ T7328]  ? __pfx___might_resched+0x10/0x10
[  158.839740][ T7328]  should_fail_ex+0x414/0x560
[  158.839771][ T7328]  should_failslab+0xa8/0x100
[  158.839800][ T7328]  __kmalloc_cache_noprof+0x70/0x3d0
[  158.839825][ T7328]  ? ip_set_create+0x348/0x1940
[  158.839856][ T7328]  ip_set_create+0x348/0x1940
[  158.839887][ T7328]  ? perf_trace_preemptirq_template+0x280/0x340
[  158.839914][ T7328]  ? irqentry_enter+0x3d/0x60
[  158.839938][ T7328]  ? __pfx_ip_set_create+0x10/0x10
[  158.839986][ T7328]  ? __pfx_ip_set_create+0x10/0x10
[  158.840013][ T7328]  ? nfnetlink_rcv_msg+0xb1f/0x1130
[  158.840048][ T7328]  nfnetlink_rcv_msg+0xb4d/0x1130
[  158.840076][ T7328]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  158.840122][ T7328]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  158.840176][ T7328]  ? perf_trace_preemptirq_template+0x280/0x340
[  158.840203][ T7328]  ? irqentry_enter+0x3d/0x60
[  158.840228][ T7328]  ? perf_trace_run_bpf_submit+0xee/0x170
[  158.840253][ T7328]  netlink_rcv_skb+0x205/0x470
[  158.840273][ T7328]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  158.840301][ T7328]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.840329][ T7328]  ? security_capable+0x7e/0x2e0
[  158.840364][ T7328]  nfnetlink_rcv+0x26a/0x2520
[  158.840394][ T7328]  ? __dev_queue_xmit+0x1d79/0x3b50
[  158.840428][ T7328]  ? __dev_queue_xmit+0x27b/0x3b50
[  158.840472][ T7328]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  158.840498][ T7328]  ? __pfx___dev_queue_xmit+0x10/0x10
[  158.840535][ T7328]  ? ref_tracker_free+0x63a/0x7d0
[  158.840552][ T7328]  ? __asan_memcpy+0x40/0x70
[  158.840572][ T7328]  ? __pfx_ref_tracker_free+0x10/0x10
[  158.840586][ T7328]  ? __skb_clone+0x63/0x7a0
[  158.840615][ T7328]  ? __skb_clone+0x483/0x7a0
[  158.840646][ T7328]  ? skb_clone+0x246/0x3a0
[  158.840673][ T7328]  ? __netlink_deliver_tap+0x807/0x850
[  158.840690][ T7328]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.840715][ T7328]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.840740][ T7328]  netlink_unicast+0x82c/0x9e0
[  158.840776][ T7328]  ? __pfx_netlink_unicast+0x10/0x10
[  158.840800][ T7328]  ? security_netlink_send+0x30/0x290
[  158.840823][ T7328]  ? __sanitizer_cov_trace_pc+0x37/0x70
[  158.840849][ T7328]  netlink_sendmsg+0x805/0xb30
[  158.840879][ T7328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.840908][ T7328]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.840930][ T7328]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.840950][ T7328]  __sock_sendmsg+0x21c/0x270
[  158.840979][ T7328]  ____sys_sendmsg+0x505/0x830
[  158.841008][ T7328]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.841041][ T7328]  ? import_iovec+0x74/0xa0
[  158.841068][ T7328]  ___sys_sendmsg+0x21f/0x2a0
[  158.841091][ T7328]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.841150][ T7328]  ? __fget_files+0x2a/0x420
[  158.841165][ T7328]  ? __fget_files+0x3a0/0x420
[  158.841192][ T7328]  __x64_sys_sendmsg+0x19b/0x260
[  158.841218][ T7328]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.841265][ T7328]  do_syscall_64+0xfa/0x3b0
[  158.841286][ T7328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.841303][ T7328]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  158.841319][ T7328]  ? clear_bhb_loop+0x60/0xb0
[  158.841340][ T7328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.841358][ T7328] RIP: 0033:0x7f7af0d8eba9
[  158.841375][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.841391][ T7328] RSP: 002b:00007f7af1c70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.841412][ T7328] RAX: ffffffffffffffda RBX: 00007f7af0fd5fa0 RCX: 00007f7af0d8eba9
[  158.841425][ T7328] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  158.841445][ T7328] RBP: 00007f7af1c70090 R08: 0000000000000000 R09: 0000000000000000
[  158.841457][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.841468][ T7328] R13: 00007f7af0fd6038 R14: 00007f7af0fd5fa0 R15: 00007ffcef09c5f8
[  158.841499][ T7328]  </TASK>
[  159.308498][ T7332] FAULT_INJECTION: forcing a failure.
[  159.308498][ T7332] name failslab, interval 1, probability 0, space 0, times 0
[  159.321365][ T7332] CPU: 1 UID: 0 PID: 7332 Comm: syz.4.403 Not tainted syzkaller #0 PREEMPT(full) 
[  159.321396][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  159.321408][ T7332] Call Trace:
[  159.321417][ T7332]  <TASK>
[  159.321426][ T7332]  dump_stack_lvl+0x189/0x250
[  159.321455][ T7332]  ? __pfx____ratelimit+0x10/0x10
[  159.321475][ T7332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.321498][ T7332]  ? __pfx__printk+0x10/0x10
[  159.321532][ T7332]  ? __pfx___might_resched+0x10/0x10
[  159.321556][ T7332]  should_fail_ex+0x414/0x560
[  159.321590][ T7332]  should_failslab+0xa8/0x100
[  159.321620][ T7332]  __kmalloc_noprof+0xcb/0x4f0
[  159.321646][ T7332]  ? tracepoint_add_func+0x35e/0xa10
[  159.321676][ T7332]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  159.321701][ T7332]  tracepoint_add_func+0x35e/0xa10
[  159.321737][ T7332]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  159.321762][ T7332]  tracepoint_probe_register_prio_may_exist+0x5f/0xa0
[  159.321788][ T7332]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  159.321818][ T7332]  bpf_raw_tp_link_attach+0x4f0/0x6c0
[  159.321844][ T7332]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  159.321876][ T7332]  ? __fget_files+0x2a/0x420
[  159.321904][ T7332]  bpf_raw_tracepoint_open+0x1b2/0x220
[  159.321936][ T7332]  __sys_bpf+0x75a/0x870
[  159.321963][ T7332]  ? __pfx___sys_bpf+0x10/0x10
[  159.322003][ T7332]  ? ksys_write+0x22a/0x250
[  159.322032][ T7332]  ? __pfx_ksys_write+0x10/0x10
[  159.322054][ T7332]  ? rcu_is_watching+0x15/0xb0
[  159.322078][ T7332]  __x64_sys_bpf+0x7c/0x90
[  159.322098][ T7332]  do_syscall_64+0xfa/0x3b0
[  159.322115][ T7332]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.322128][ T7332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.322141][ T7332]  ? clear_bhb_loop+0x60/0xb0
[  159.322159][ T7332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.322173][ T7332] RIP: 0033:0x7f69dd78eba9
[  159.322187][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.322199][ T7332] RSP: 002b:00007f69db9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  159.322214][ T7332] RAX: ffffffffffffffda RBX: 00007f69dd9d5fa0 RCX: 00007f69dd78eba9
[  159.322225][ T7332] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011
[  159.322233][ T7332] RBP: 00007f69db9f6090 R08: 0000000000000000 R09: 0000000000000000
[  159.322241][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.322249][ T7332] R13: 00007f69dd9d6038 R14: 00007f69dd9d5fa0 R15: 00007fff0dc61078
[  159.322272][ T7332]  </TASK>
[  159.823197][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'.
[  159.911023][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'.
[  159.921914][ T7342] netlink: 6 bytes leftover after parsing attributes in process `syz.3.402'.
[  160.736670][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'.
[  161.926685][ T7391] FAULT_INJECTION: forcing a failure.
[  161.926685][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.940177][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.4.420 Not tainted syzkaller #0 PREEMPT(full) 
[  161.940204][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  161.940216][ T7391] Call Trace:
[  161.940224][ T7391]  <TASK>
[  161.940232][ T7391]  dump_stack_lvl+0x189/0x250
[  161.940262][ T7391]  ? __pfx____ratelimit+0x10/0x10
[  161.940283][ T7391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.940307][ T7391]  ? __pfx__printk+0x10/0x10
[  161.940351][ T7391]  should_fail_ex+0x414/0x560
[  161.940384][ T7391]  _copy_to_user+0x31/0xb0
[  161.940413][ T7391]  btf_new_fd+0x562/0xc90
[  161.940434][ T7391]  ? apparmor_capable+0x137/0x1b0
[  161.940469][ T7391]  ? __pfx_btf_new_fd+0x10/0x10
[  161.940493][ T7391]  ? bpf_token_put+0x143/0x160
[  161.940521][ T7391]  ? bpf_btf_load+0x126/0x190
[  161.940551][ T7391]  __sys_bpf+0x406/0x870
[  161.940580][ T7391]  ? __pfx___sys_bpf+0x10/0x10
[  161.940626][ T7391]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  161.940655][ T7391]  ? __pfx_ksys_write+0x10/0x10
[  161.940691][ T7391]  __x64_sys_bpf+0x7c/0x90
[  161.940715][ T7391]  do_syscall_64+0xfa/0x3b0
[  161.940734][ T7391]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.940753][ T7391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.940772][ T7391]  ? clear_bhb_loop+0x60/0xb0
[  161.940796][ T7391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.940814][ T7391] RIP: 0033:0x7f69dd78eba9
[  161.940832][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.940848][ T7391] RSP: 002b:00007f69db9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  161.940868][ T7391] RAX: ffffffffffffffda RBX: 00007f69dd9d5fa0 RCX: 00007f69dd78eba9
[  161.940882][ T7391] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[  161.940895][ T7391] RBP: 00007f69db9f6090 R08: 0000000000000000 R09: 0000000000000000
[  161.940906][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  161.940917][ T7391] R13: 00007f69dd9d6038 R14: 00007f69dd9d5fa0 R15: 00007fff0dc61078
[  161.940949][ T7391]  </TASK>
[  162.358429][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  162.446567][ T7392] netlink: 6 bytes leftover after parsing attributes in process `syz.3.419'.
[  162.481136][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'.
[  162.985663][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'.
[  164.006487][ T7422] netlink: 'syz.0.431': attribute type 39 has an invalid length.
[  310.879079][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.3.428:7417]
[  310.879105][    C1] Modules linked in:
[  310.879168][    C1] irq event stamp: 166570
[  310.879175][    C1] hardirqs last  enabled at (166569): [<ffffffff8b7a4234>] irqentry_exit+0x74/0x90
[  310.879203][    C1] hardirqs last disabled at (166570): [<ffffffff8b7a2e6e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  310.879235][    C1] softirqs last  enabled at (166564): [<ffffffff8185050a>] __irq_exit_rcu+0xca/0x1f0
[  310.879257][    C1] softirqs last disabled at (166559): [<ffffffff8185050a>] __irq_exit_rcu+0xca/0x1f0
[  310.879291][    C1] CPU: 1 UID: 0 PID: 7417 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(full) 
[  310.879331][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  310.879343][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  310.879375][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e
[  310.879390][    C1] RSP: 0018:ffffc9001b347940 EFLAGS: 00000293
[  310.879406][    C1] RAX: ffffffff81b4601b RBX: 1ffff110170c8341 RCX: ffff888025b39e00
[  310.879420][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  310.879430][    C1] RBP: ffffc9001b347ac0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486
[  310.879444][    C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffff8880b8641a08
[  310.879458][    C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000
[  310.879470][    C1] FS:  0000555558f34500(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  310.879486][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.879498][    C1] CR2: 0000001b33320ff8 CR3: 0000000076af0000 CR4: 00000000003526f0
[  310.879514][    C1] Call Trace:
[  310.879523][    C1]  <TASK>
[  310.879540][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  310.879578][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  310.879596][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  310.879621][    C1]  ? free_unref_folios+0x11a0/0x1520
[  310.879648][    C1]  ? __pfx___text_poke+0x10/0x10
[  310.879669][    C1]  ? rcu_is_watching+0x15/0xb0
[  310.879689][    C1]  ? trace_contention_end+0x39/0x120
[  310.879719][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  310.879750][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  310.879774][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  310.879800][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  310.879834][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  310.879855][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  310.879887][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  310.879929][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  310.879956][    C1]  static_key_disable_cpuslocked+0xc5/0x1b0
[  310.879988][    C1]  static_key_disable+0x1a/0x20
[  310.880013][    C1]  tracepoint_probe_unregister+0x80e/0x9b0
[  310.880040][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  310.880062][    C1]  ? __pfx_bpf_link_release+0x10/0x10
[  310.880087][    C1]  bpf_raw_tp_link_release+0x43/0x70
[  310.880109][    C1]  bpf_link_free+0xea/0x330
[  310.880151][    C1]  ? __pfx_bpf_link_release+0x10/0x10
[  310.880175][    C1]  bpf_link_release+0x6b/0x80
[  310.880199][    C1]  __fput+0x449/0xa70
[  310.880234][    C1]  task_work_run+0x1d1/0x260
[  310.880264][    C1]  ? __pfx_task_work_run+0x10/0x10
[  310.880296][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  310.880328][    C1]  exit_to_user_mode_loop+0xec/0x110
[  310.880361][    C1]  do_syscall_64+0x2bd/0x3b0
[  310.880380][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.880398][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.880417][    C1]  ? clear_bhb_loop+0x60/0xb0
[  310.880441][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.880458][    C1] RIP: 0033:0x7f5401d8eba9
[  310.880477][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.880491][    C1] RSP: 002b:00007fff6b7d1948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  310.880509][    C1] RAX: 0000000000000000 RBX: 00007f5401fd7da0 RCX: 00007f5401d8eba9
[  310.880521][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  310.880532][    C1] RBP: 00007f5401fd7da0 R08: 000000000000335c R09: 000000136b7d1c3f
[  310.880544][    C1] R10: 00000000003fca80 R11: 0000000000000246 R12: 0000000000028286
[  310.880556][    C1] R13: 00007fff6b7d1a40 R14: ffffffffffffffff R15: 00007fff6b7d1a60
[  310.880590][    C1]  </TASK>
[  310.880606][    C1] Sending NMI from CPU 1 to CPUs 0:
[  311.318443][    C0] NMI backtrace for cpu 0
[  311.318462][    C0] CPU: 0 UID: 0 PID: 7424 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT(full) 
[  311.318481][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  311.318491][    C0] RIP: 0010:kasan_check_range+0x6f/0x2c0
[  311.318521][    C0] Code: 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 <48> bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83
[  311.318536][    C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000806
[  311.318552][    C0] RAX: 00000000ffffff01 RBX: ffff8880b8627a80 RCX: ffffffff819e12a2
[  311.318565][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8627a80
[  311.318576][    C0] RBP: ffffc90000007870 R08: ffff8880b8627a83 R09: 1ffff110170c4f50
[  311.318589][    C0] R10: dffffc0000000000 R11: ffffed10170c4f50 R12: ffff8880b8627a90
[  311.318602][    C0] R13: ffff8880b8627a88 R14: 1ffff110170c4f52 R15: 1ffff110170c4f50
[  311.318615][    C0] FS:  00007f81be4946c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  311.318630][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  311.318641][    C0] CR2: 0000000100000000 CR3: 000000007fdd4000 CR4: 00000000003526f0
[  311.318657][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  311.318667][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  311.318678][    C0] Call Trace:
[  311.318687][    C0]  <IRQ>
[  311.318700][    C0]  do_raw_spin_lock+0x112/0x290
[  311.318746][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  311.318775][    C0]  _raw_spin_lock_irqsave+0xb3/0xf0
[  311.318802][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  311.318828][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  311.318854][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.318878][    C0]  ? __irq_work_queue_local+0x1d7/0x550
[  311.318906][    C0]  hrtimer_try_to_cancel+0x22b/0x420
[  311.318929][    C0]  hrtimer_cancel+0x3b/0x50
[  311.318944][    C0]  cpu_clock_event_stop+0xd9/0x130
[  311.318970][    C0]  __perf_event_overflow+0x57d/0xe40
[  311.318995][    C0]  ? __pfx___perf_event_overflow+0x10/0x10
[  311.319013][    C0]  ? __pfx_cpu_clock_event_update+0x10/0x10
[  311.319034][    C0]  ? perf_trace_lock+0xec/0x3b0
[  311.319058][    C0]  perf_swevent_hrtimer+0x3c5/0x550
[  311.319086][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  311.319131][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  311.319157][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.319187][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  311.319210][    C0]  ? __pfx_perf_swevent_hrtimer+0x10/0x10
[  311.319232][    C0]  __hrtimer_run_queues+0x4dd/0xc60
[  311.319264][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  311.319285][    C0]  ? read_tsc+0x9/0x20
[  311.319317][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  311.319355][    C0]  __sysvec_apic_timer_interrupt+0x108/0x410
[  311.319377][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  311.319405][    C0]  </IRQ>
[  311.319411][    C0]  <TASK>
[  311.319417][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.319436][    C0] RIP: 0010:__futex_unqueue+0x4/0x160
[  311.319455][    C0] Code: 03 00 00 00 5b 41 5e 5d e9 09 5d 15 03 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 41 57 41 56 41 55 41 54 53 48 89 fb 48 bd 00 00 00 00 00 fc ff
[  311.319469][    C0] RSP: 0018:ffffc9001b7b7ba0 EFLAGS: 00000293
[  311.319483][    C0] RAX: ffffffff81b3e90a RBX: ffff8880788d5a00 RCX: ffff8880222fda00
[  311.319496][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc9001b77faa0
[  311.319506][    C0] RBP: ffff8880788d5a28 R08: ffff8880788d5a2b R09: 1ffff1100f11ab45
[  311.319519][    C0] R10: dffffc0000000000 R11: ffffed100f11ab46 R12: ffffc9001b77faa0
[  311.319532][    C0] R13: ffffc9001b77fb08 R14: dffffc0000000000 R15: ffffc9001b7b7c80
[  311.319551][    C0]  ? futex_wake_mark+0xda/0x200
[  311.319580][    C0]  futex_wake_mark+0xe2/0x200
[  311.319606][    C0]  futex_wake+0x3b8/0x560
[  311.319635][    C0]  ? __pfx_futex_wake+0x10/0x10
[  311.319662][    C0]  ? ktime_get+0x3e/0x1f0
[  311.319684][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  311.319708][    C0]  do_futex+0x395/0x420
[  311.319734][    C0]  ? __pfx_do_futex+0x10/0x10
[  311.319753][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  311.319769][    C0]  ? sched_clock_cpu+0x74/0x430
[  311.319789][    C0]  __se_sys_futex+0x36f/0x400
[  311.319810][    C0]  ? hrtimer_interrupt+0x889/0xaa0
[  311.319830][    C0]  ? __pfx___se_sys_futex+0x10/0x10
[  311.319858][    C0]  ? __x64_sys_futex+0x21/0xf0
[  311.319882][    C0]  do_syscall_64+0xfa/0x3b0
[  311.319900][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.319916][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  311.319934][    C0]  ? clear_bhb_loop+0x60/0xb0
[  311.319954][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.319970][    C0] RIP: 0033:0x7f81bd58eba9
[  311.319986][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.320000][    C0] RSP: 002b:00007f81be4940e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  311.320016][    C0] RAX: ffffffffffffffda RBX: 00007f81bd7d5fa8 RCX: 00007f81bd58eba9
[  311.320027][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81bd7d5fac
[  311.320039][    C0] RBP: 00007f81bd7d5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  311.320050][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  311.320060][    C0] R13: 00007f81bd7d6038 R14: 00007ffff0853850 R15: 00007ffff0853938
[  311.320085][    C0]  </TASK>
[  311.320442][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  311.862224][    C1] CPU: 1 UID: 0 PID: 7417 Comm: syz.3.428 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.872998][    C1] Tainted: [L]=SOFTLOCKUP
[  311.877330][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  311.887386][    C1] Call Trace:
[  311.890666][    C1]  <IRQ>
[  311.893507][    C1]  dump_stack_lvl+0x99/0x250
[  311.898103][    C1]  ? __asan_memcpy+0x40/0x70
[  311.902700][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.908007][    C1]  ? __pfx__printk+0x10/0x10
[  311.912744][    C1]  vpanic+0x281/0x750
[  311.916752][    C1]  ? __pfx__printk+0x10/0x10
[  311.921473][    C1]  ? __pfx_vpanic+0x10/0x10
[  311.926880][    C1]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  311.932909][    C1]  panic+0xb9/0xc0
[  311.936753][    C1]  ? __pfx_panic+0x10/0x10
[  311.941621][    C1]  ? nmi_backtrace_stall_check+0x433/0x440
[  311.947474][    C1]  ? irq_work_queue+0xc3/0x140
[  311.952414][    C1]  watchdog_timer_fn+0x862/0x870
[  311.957392][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  311.962904][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  311.969120][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  311.975483][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  311.980952][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  311.986417][    C1]  __hrtimer_run_queues+0x4dd/0xc60
[  311.991645][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  311.997533][    C1]  ? read_tsc+0x9/0x20
[  312.001625][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  312.006623][    C1]  __sysvec_apic_timer_interrupt+0x108/0x410
[  312.012606][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  312.018336][    C1]  </IRQ>
[  312.021270][    C1]  <TASK>
[  312.024207][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  312.030187][    C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0
[  312.036862][    C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e
[  312.057013][    C1] RSP: 0018:ffffc9001b347940 EFLAGS: 00000293
[  312.063100][    C1] RAX: ffffffff81b4601b RBX: 1ffff110170c8341 RCX: ffff888025b39e00
[  312.071185][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  312.079169][    C1] RBP: ffffc9001b347ac0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486
[  312.087147][    C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffff8880b8641a08
[  312.095118][    C1] R13: dffffc0000000000 R14: ffff8880b873b1c0 R15: 0000000000000000
[  312.103193][    C1]  ? smp_call_function_many_cond+0xd4b/0x12d0
[  312.109291][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  312.114338][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  312.120666][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  312.126049][    C1]  ? free_unref_folios+0x11a0/0x1520
[  312.131345][    C1]  ? __pfx___text_poke+0x10/0x10
[  312.136347][    C1]  ? rcu_is_watching+0x15/0xb0
[  312.141156][    C1]  ? trace_contention_end+0x39/0x120
[  312.146468][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  312.151499][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  312.156638][    C1]  smp_text_poke_batch_finish+0x5f9/0x1130
[  312.162475][    C1]  ? arch_jump_label_transform_apply+0x17/0x30
[  312.168736][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  312.173769][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  312.180031][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  312.186318][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  312.192308][    C1]  static_key_disable_cpuslocked+0xc5/0x1b0
[  312.198227][    C1]  static_key_disable+0x1a/0x20
[  312.203085][    C1]  tracepoint_probe_unregister+0x80e/0x9b0
[  312.208896][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  312.214619][    C1]  ? __pfx_bpf_link_release+0x10/0x10
[  312.220003][    C1]  bpf_raw_tp_link_release+0x43/0x70
[  312.225316][    C1]  bpf_link_free+0xea/0x330
[  312.229825][    C1]  ? __pfx_bpf_link_release+0x10/0x10
[  312.235286][    C1]  bpf_link_release+0x6b/0x80
[  312.240001][    C1]  __fput+0x449/0xa70
[  312.244006][    C1]  task_work_run+0x1d1/0x260
[  312.248641][    C1]  ? __pfx_task_work_run+0x10/0x10
[  312.253913][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  312.259395][    C1]  exit_to_user_mode_loop+0xec/0x110
[  312.264692][    C1]  do_syscall_64+0x2bd/0x3b0
[  312.269313][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.274730][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.280801][    C1]  ? clear_bhb_loop+0x60/0xb0
[  312.285578][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.291472][    C1] RIP: 0033:0x7f5401d8eba9
[  312.295887][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.315505][    C1] RSP: 002b:00007fff6b7d1948 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  312.324012][    C1] RAX: 0000000000000000 RBX: 00007f5401fd7da0 RCX: 00007f5401d8eba9
[  312.332005][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  312.339993][    C1] RBP: 00007f5401fd7da0 R08: 000000000000335c R09: 000000136b7d1c3f
[  312.347986][    C1] R10: 00000000003fca80 R11: 0000000000000246 R12: 0000000000028286
[  312.355977][    C1] R13: 00007fff6b7d1a40 R14: ffffffffffffffff R15: 00007fff6b7d1a60
[  312.364089][    C1]  </TASK>
[  313.503988][    C1] Shutting down cpus with NMI
[  313.509004][    C1] Kernel Offset: disabled
[  313.513319][    C1] Rebooting in 86400 seconds..