last executing test programs:

6.202545978s ago: executing program 1 (id=2):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x821c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x2c50, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050)
recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10002)
recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002740)=""/4085, 0xff5}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/210, 0xd2}], 0x5}, 0x100)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x2b, 0x107, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@typed={0x8, 0x19, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @nested={0x4, 0x36}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x18b)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0)

6.114820469s ago: executing program 0 (id=1):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4020001}, 0x880)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xc0000000, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

5.740400807s ago: executing program 2 (id=3):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}}, 0x1844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000010000800000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b700000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="a8ea9a9e4f1f7868adbd3062ea06752a8636b4051f1d0df577b09c7dd37919e1e23baffd1c661eeefa52d7b817bf7771237f94fb1627d37aa142b7e3e01d1b55af046ea65ea8074f1b9dced3208cfc9df33a3c306f6710747bc6ab97543b4298fe4f3d18c9688176768fc7a0be7b8fc154d2c36aa1b25abc3385a96497a61c9ad059bd36560852fe5bb28ad1b9fe7ede3b02a235443e1ba7aa487c0a6f0a849cdfa3097ded7235e8b7490e05e7f142ea5af19ee126cd0db0cda9", 0xba}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xe990}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8919, &(0x7f0000000100))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x2c001)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

5.635025326s ago: executing program 0 (id=6):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}}, 0x1844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000010000800000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b700000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="a8ea9a9e4f1f7868adbd3062ea06752a8636b4051f1d0df577b09c7dd37919e1e23baffd1c661eeefa52d7b817bf7771237f94fb1627d37aa142b7e3e01d1b55af046ea65ea8074f1b9dced3208cfc9df33a3c306f6710747bc6ab97543b4298fe4f3d18c9688176768fc7a0be7b8fc154d2c36aa1b25abc3385a96497a61c9ad059bd36560852fe5bb28ad1b9fe7ede3b02a235443e1ba7aa487c0a6f0a849cdfa3097ded7235e8b7490e05e7f142ea5af19ee126cd0db0cda9", 0xba}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xe990}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8919, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x2c001)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

5.514723089s ago: executing program 1 (id=7):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000200), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='contention_begin\x00'}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x9}, 0x18)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)

5.460762637s ago: executing program 3 (id=4):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}}, 0x1844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000010000800000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b700000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="a8ea9a9e4f1f7868adbd3062ea06752a8636b4051f1d0df577b09c7dd37919e1e23baffd1c661eeefa52d7b817bf7771237f94fb1627d37aa142b7e3e01d1b55af046ea65ea8074f1b9dced3208cfc9df33a3c306f6710747bc6ab97543b4298fe4f3d18c9688176768fc7a0be7b8fc154d2c36aa1b25abc3385a96497a61c9ad059bd36560852fe5bb28ad1b9fe7ede3b02a235443e1ba7aa487c0a6f0a849cdfa3097ded7235e8b7490e05e7f142ea5af19ee126cd0db0cda9", 0xba}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x3)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xe990}, 0x828, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8919, &(0x7f0000000100))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x2c001)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

5.271779916s ago: executing program 1 (id=8):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0xc004}, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x77}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/188, 0x41000}, 0x70)
perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x5, 0x6, 0xf4, 0x4, 0x0, 0x8001, 0x100, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0xfff}, 0x100000, 0x1, 0xfff, 0x2, 0x7, 0x9, 0x401, 0x0, 0x81, 0x0, 0x40}, r3, 0xa, r2, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r5)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random='\b\x00'})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbb}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x10, 0xadd, 0x7, 0x998a, 0x1}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x200}, @TCA_NETEM_RATE64={0xc, 0x8, 0xfb1cba97b535fc2f}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000017007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10)
socket$kcm(0x11, 0x2, 0x0)

4.978102841s ago: executing program 2 (id=9):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3a000000}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4128, 0x1020}], 0x1}, 0x42)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0)

4.871098793s ago: executing program 0 (id=10):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000f78710de0000000000000000000000000900020073797a310000000005000400190000000c000300686173683a69700014000780080008400000009d080006400000000005000500020000000500010006000000"], 0x58}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c080001400000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048090}, 0x20000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0xff05, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r12, 0x4)

4.258413389s ago: executing program 3 (id=11):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e0000", 0xf}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200000000000000000008000440000000000900010073797a30000000000800034000000001"], 0x90}}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r1})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
socket$nl_sock_diag(0x10, 0x3, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r2}, 0x18)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x4d6, 0x2b}, @in6=@mcast2, {0x0, 0x0, 0x6}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@private=0xa010101}]}, 0x104}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r7 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xc00e, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e1d360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ccfccbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x22)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c0000000408050000000000000000000a000005060002400e9100000600024008050000050003002f00000014000480080001400000bd50080001400000000a2c00048008000140fffff497080002400000008108000240000009000800014000000056080007400000074a7c6b915c5935c9d1804f873e16c96c39a52cf79d86be29126c38549ed3d3d5f144cec3d93acadc71d76bfa95e702831e6cc72de90f9c80a13147aab53de504c92ab17a0cd8a5be8b68614283ce7a49db66bf11a954eb19e7c229851e8b3aac392459c5443873fe2460399dce75803258a20b7b81f60c0187ac8e05ae773ddad02ccb939ac61857bf55"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4)

4.18541781s ago: executing program 2 (id=12):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0xb2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x801c581f, &(0x7f0000000040)=0xff57000000000600)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=""/134, 0x86, 0x0, &(0x7f0000000200)=""/128, 0x80}}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48)
socket$rds(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
close(0x3)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xe00000}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

4.135573319s ago: executing program 1 (id=13):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r1, 0x0, 0x4000001)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x38)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffb1, 0x1ff, 0x3ff, 0x1, 0x8001}, 0x0, 0x0, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x1, {0x4, 0x521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000010)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x4000)
close(r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x9, 0x8, 0x9, 0x7, 0x0, 0xb, 0x548a0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xaa637cec22575b16}, 0x250, 0x3ff, 0x8, 0x9, 0xc, 0x7, 0xca7, 0x0, 0x8, 0x0, 0x89}, 0x0, 0x7, 0xffffffffffffffff, 0x3)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x18, 0x25, 0x101, 0x70bd25, 0xfefffffb, {0x8}, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)

3.928454764s ago: executing program 4 (id=5):
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x2000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x44)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a000140", 0x38}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="f085", 0x2}], 0x5}, 0x200c8061)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4)
r3 = socket$kcm(0x2, 0x5, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000)=r4, 0x62)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x424, 0x3f3, 0x261a8b2a57eb4f6b, 0x70bd2b, 0x25dfdbfd, {0x3, 0x2, 0x17, [0x80000001, 0x6, 0xdc, 0xffffffff, 0x3ff, 0x7, 0x9, 0x2, 0x3, 0x9, 0x8, 0xb0000000, 0x2, 0x8000, 0x8001, 0x44e, 0x94, 0x4, 0x5, 0x7, 0x4, 0x1ff, 0x97, 0x8, 0x1f0362, 0xffffffb0, 0x6, 0x9, 0x8, 0x3, 0xf, 0x6, 0x2, 0x1, 0x9, 0x6, 0x4, 0x57, 0x5, 0xe9, 0xf8, 0xc, 0x2, 0x0, 0x9, 0x8, 0x17, 0x3, 0x6, 0x5, 0x4, 0x3, 0x5, 0x9, 0x4, 0x4, 0x5, 0x5, 0x3, 0xe2fc, 0x5, 0x6, 0xf, 0xffff], [0x5b08, 0xb, 0x3, 0x0, 0x4, 0x5, 0x5, 0x9, 0x1e24, 0xfffffff8, 0x6, 0x8, 0x462b48c1, 0x800, 0x7f, 0x83e9, 0x55, 0xf101, 0x7, 0x6, 0x81, 0x6, 0x0, 0x4, 0x400, 0x3, 0x101, 0x15, 0x1, 0x3, 0x8, 0x7f, 0x3, 0xa95, 0xd, 0x8, 0x10000, 0x0, 0x8, 0x400, 0x10, 0x9, 0x8, 0x9555, 0x4, 0x9c9, 0xd707, 0x9, 0x9, 0x3, 0x100, 0x4, 0xa72, 0x56f, 0x5, 0x9, 0x141, 0x8a6, 0xd929, 0x7f, 0x8, 0xffff, 0xfffffffe, 0x3], [0x7, 0x6, 0x0, 0x1ff, 0x4, 0x1, 0x1, 0x6136, 0xffff, 0x9, 0x8, 0x8, 0x6, 0x1000, 0x0, 0x4, 0xfffffff8, 0x8, 0x8, 0x59a, 0x6, 0x6, 0x0, 0x5, 0xac1, 0x1e78, 0x60, 0x2, 0x6, 0xe500, 0x800, 0xf3, 0x4, 0x100, 0x3ff, 0x8000, 0x7, 0xd, 0x8, 0x9768, 0x44f0, 0x3, 0x6, 0x8, 0x8, 0x4, 0x5, 0x10000, 0x7ff, 0x1, 0x5, 0x9, 0x7, 0x8001, 0x4, 0x3a6dc000, 0x1, 0x8, 0xa, 0xe0e, 0x6, 0x1, 0xfff, 0x3], [0x9, 0x2, 0x86, 0x8, 0x1, 0x2, 0x75ca, 0xf, 0x0, 0x80000000, 0x8, 0x6, 0xe, 0x8, 0x0, 0x7ff, 0xfff, 0x5, 0x8001, 0x7, 0xc, 0x7f, 0x7, 0x0, 0xfffffffd, 0xb9c, 0x6, 0x0, 0x7f, 0x80000001, 0x51, 0x1, 0x144, 0x1, 0x6, 0x4, 0x5, 0x401, 0x20000000, 0x7, 0x1, 0x8, 0x6, 0x10001, 0xa0000000, 0x8, 0x1, 0x0, 0xc, 0x4, 0x5, 0x400, 0x1, 0x0, 0x613b, 0x8001, 0x4, 0xfff, 0x9, 0xd49, 0x101, 0xfffff5a0, 0xff, 0x3], 0x4, ['\x00P\x00', '\x00']}, ["", "", "", "", ""]}, 0x424}}, 0x48010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.803774111s ago: executing program 4 (id=14):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1e, 0x80000, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084)

1.792580335s ago: executing program 1 (id=15):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000c0601010000000000000000020000040900020073797a30000000000500010007000000d9b132383661bbba008a27c928c7d373768e4fa73e8766940fd13c0e5580ee7b3f1616cb11c8ef275828044d22dffb23d4b6684102418d2a44a09923683e225fa35cc8e3a5079469081f019b350ed74105b0bc26a2ac640803fd7e4a1e1cdb9ef4fd10dc9c656d371c9724683b1e87fa2b6669ea95c2155de56be38700a751f83af53a4bb60af59641e60c132b4c1dda04b93967ba9e705422a585436582e286d98c"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2000c010)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000d29f82e528a9e4b3bd4ebc2a64223f39bd5527f97e0400000000ffffffe00001000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x14, 0x3, "7339f2f304fdd672bad09dfb04000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)}], 0x1}, 0x800)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
socket$key(0xf, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

926.937534ms ago: executing program 0 (id=16):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000c0601010000000000000000020000040900020073797a30000000000500010007000000d9b132383661bbba008a27c928c7d373768e4fa73e8766940fd13c0e5580ee7b3f1616cb11c8ef275828044d22dffb23d4b6684102418d2a44a09923683e225fa35cc8e3a5079469081f019b350ed74105b0bc26a2ac640803fd7e4a1e1cdb9ef4fd10dc9c656d371c9724683b1e87fa2b6669ea95c2155de56be38700a751f83af53a4bb60af59641e60c132b4c1dda04b93967ba9e705422a585436582e286d98c"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2000c010)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000d29f82e528a9e4b3bd4ebc2a64223f39bd5527f97e0400000000ffffffe00001000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x14, 0x3, "7339f2f304fdd672bad09dfb04000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x30000001)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)}], 0x1}, 0x800)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
socket$key(0xf, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

923.271426ms ago: executing program 3 (id=17):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x37)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x7, 0x3fe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r5}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x3}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r6, &(0x7f0000000080), 0x0}, 0x20)

795.657101ms ago: executing program 1 (id=18):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e79, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c00000000040000}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)="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", 0x25f}], 0x1}, 0x20000044)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe1134f41038280c0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)}, 0x8001)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x14, 0x2e, 0x107, 0xfffffffc, 0x4, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x2400c080)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x52}]}, 0x2c}}, 0x20040000)

792.606483ms ago: executing program 2 (id=19):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = getpid()
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x7f, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x3bc7}}, @fwd={0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x30, 0x5f, 0x61, 0x61, 0x30, 0x30]}}, &(0x7f0000000700)=""/148, 0x54, 0x94, 0x0, 0x9, 0x10000}, 0x28)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8)
close(r8)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, r9, 0x0, 0x1}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="dbdf367a688e65fcbad63a9cc91b", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r10, 0x3, '\x00', 0x0, r9, 0x3, 0x80}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)

0s ago: executing program 4 (id=20):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0x9}, 0x18)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   45.536312][ T5493] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.559385][ T5493] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts.
syzkaller login: [   65.195423][ T5811] cgroup: Unknown subsys name 'net'
[   65.367374][ T5811] cgroup: Unknown subsys name 'cpuset'
[   65.376492][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.770434][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.408829][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.445617][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.455226][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.461011][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.462718][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.470783][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.477536][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.492012][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.499686][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.499774][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.514582][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.522342][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.531017][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.534199][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.547446][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.551061][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.555558][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.563676][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.569734][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.576415][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.583799][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.590718][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.599875][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.604956][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.619679][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.132869][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   71.278044][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   71.300140][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.306628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[   71.411144][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   71.467552][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.474819][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.482203][ T5832] bridge_slave_0: entered allmulticast mode
[   71.489877][ T5832] bridge_slave_0: entered promiscuous mode
[   71.548701][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.555912][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.563022][ T5832] bridge_slave_1: entered allmulticast mode
[   71.570157][ T5832] bridge_slave_1: entered promiscuous mode
[   71.590338][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   71.615183][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.622799][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.630020][ T5834] bridge_slave_0: entered allmulticast mode
[   71.636944][ T5834] bridge_slave_0: entered promiscuous mode
[   71.675277][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.682496][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.690284][ T5834] bridge_slave_1: entered allmulticast mode
[   71.697567][ T5834] bridge_slave_1: entered promiscuous mode
[   71.758695][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.809713][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.821758][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.834959][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.844646][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   71.859138][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.866463][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.873712][ T5821] bridge_slave_0: entered allmulticast mode
[   71.881490][ T5821] bridge_slave_0: entered promiscuous mode
[   71.920154][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.927421][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.934849][ T5821] bridge_slave_1: entered allmulticast mode
[   71.941738][ T5821] bridge_slave_1: entered promiscuous mode
[   72.000242][ T5832] team0: Port device team_slave_0 added
[   72.007965][ T5834] team0: Port device team_slave_0 added
[   72.015588][ T5832] team0: Port device team_slave_1 added
[   72.067203][ T5834] team0: Port device team_slave_1 added
[   72.091842][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.099413][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.107408][ T5822] bridge_slave_0: entered allmulticast mode
[   72.114567][ T5822] bridge_slave_0: entered promiscuous mode
[   72.125053][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.146127][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.153066][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.179786][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.201925][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.209291][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.216595][ T5822] bridge_slave_1: entered allmulticast mode
[   72.223510][ T5822] bridge_slave_1: entered promiscuous mode
[   72.232282][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.252392][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.259487][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.285897][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.332120][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.339279][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.365415][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.418124][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.425263][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.451385][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.472207][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.479436][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.486694][ T5827] bridge_slave_0: entered allmulticast mode
[   72.493593][ T5827] bridge_slave_0: entered promiscuous mode
[   72.503318][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.514320][ T5821] team0: Port device team_slave_0 added
[   72.522716][ T5821] team0: Port device team_slave_1 added
[   72.543948][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.551335][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.558686][ T5827] bridge_slave_1: entered allmulticast mode
[   72.565657][ T5827] bridge_slave_1: entered promiscuous mode
[   72.574968][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.655263][ T5830] Bluetooth: hci3: command tx timeout
[   72.660256][ T5841] Bluetooth: hci0: command tx timeout
[   72.667978][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.675633][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.701629][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.734302][ T5841] Bluetooth: hci4: command tx timeout
[   72.734312][   T52] Bluetooth: hci1: command tx timeout
[   72.734631][ T5830] Bluetooth: hci2: command tx timeout
[   72.759949][ T5834] hsr_slave_0: entered promiscuous mode
[   72.766274][ T5834] hsr_slave_1: entered promiscuous mode
[   72.776771][ T5832] hsr_slave_0: entered promiscuous mode
[   72.783152][ T5832] hsr_slave_1: entered promiscuous mode
[   72.789486][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   72.795412][ T5832] Cannot create hsr debugfs directory
[   72.801532][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.808621][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.834599][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.848460][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.859720][ T5822] team0: Port device team_slave_0 added
[   72.868119][ T5822] team0: Port device team_slave_1 added
[   72.897918][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.937853][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.944940][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.971928][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.985752][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.992715][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.018664][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.100413][ T5827] team0: Port device team_slave_0 added
[   73.136031][ T5827] team0: Port device team_slave_1 added
[   73.152659][ T5821] hsr_slave_0: entered promiscuous mode
[   73.159146][ T5821] hsr_slave_1: entered promiscuous mode
[   73.166025][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   73.171745][ T5821] Cannot create hsr debugfs directory
[   73.274595][ T5822] hsr_slave_0: entered promiscuous mode
[   73.280808][ T5822] hsr_slave_1: entered promiscuous mode
[   73.287112][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   73.292833][ T5822] Cannot create hsr debugfs directory
[   73.305603][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.312585][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.338762][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.367844][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.375141][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.402678][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.607058][ T5827] hsr_slave_0: entered promiscuous mode
[   73.613245][ T5827] hsr_slave_1: entered promiscuous mode
[   73.620058][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   73.625817][ T5827] Cannot create hsr debugfs directory
[   73.813968][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.847390][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.869068][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.895797][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.961922][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.972062][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.982881][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.993155][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.079470][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.091823][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.113448][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.124421][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.217890][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.247917][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.259031][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.270136][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.300175][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.373146][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   74.400475][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.426130][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   74.446640][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.453878][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.462846][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   74.472756][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   74.489160][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   74.515939][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   74.535140][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.542225][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.550954][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.558060][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.583825][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.590994][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.692010][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.715715][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.734411][ T5830] Bluetooth: hci3: command tx timeout
[   74.743806][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   74.746687][ T5830] Bluetooth: hci0: command tx timeout
[   74.765499][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.772600][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.782240][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.789399][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.814414][ T5830] Bluetooth: hci2: command tx timeout
[   74.819852][ T5830] Bluetooth: hci4: command tx timeout
[   74.827021][ T5841] Bluetooth: hci1: command tx timeout
[   74.899069][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   74.959584][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.966784][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.982198][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.989390][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.100855][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.122572][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.192546][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.260507][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   75.326810][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.333973][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.360600][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.385400][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.392564][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.441710][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.505600][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.536340][ T5821] veth0_vlan: entered promiscuous mode
[   75.546315][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.593896][ T5821] veth1_vlan: entered promiscuous mode
[   75.670534][ T5834] veth0_vlan: entered promiscuous mode
[   75.686670][ T5832] veth0_vlan: entered promiscuous mode
[   75.760747][ T5832] veth1_vlan: entered promiscuous mode
[   75.769849][ T5821] veth0_macvtap: entered promiscuous mode
[   75.782346][ T5827] veth0_vlan: entered promiscuous mode
[   75.791556][ T5834] veth1_vlan: entered promiscuous mode
[   75.818550][ T5827] veth1_vlan: entered promiscuous mode
[   75.827868][ T5821] veth1_macvtap: entered promiscuous mode
[   75.850722][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.882165][ T5832] veth0_macvtap: entered promiscuous mode
[   75.892513][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.905925][ T5832] veth1_macvtap: entered promiscuous mode
[   75.934886][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.950742][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.976662][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.986752][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.001849][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.015331][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.028764][ T5827] veth0_macvtap: entered promiscuous mode
[   76.057884][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.069468][ T5834] veth0_macvtap: entered promiscuous mode
[   76.083480][ T5827] veth1_macvtap: entered promiscuous mode
[   76.107254][ T5834] veth1_macvtap: entered promiscuous mode
[   76.123301][   T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.139273][   T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.156639][   T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.183317][   T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.208434][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.263691][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.284894][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.333116][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.343080][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.357511][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.368528][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.377448][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.409346][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.420759][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.446818][   T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.456121][   T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.479293][   T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.488487][   T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.511066][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.519986][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.595622][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.604133][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.622060][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.631683][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.683928][ T5822] veth0_vlan: entered promiscuous mode
[   76.717773][ T5822] veth1_vlan: entered promiscuous mode
[   76.728850][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.801127][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.814405][ T5830] Bluetooth: hci0: command tx timeout
[   76.819829][ T5830] Bluetooth: hci3: command tx timeout
[   76.838973][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.894212][ T5830] Bluetooth: hci4: command tx timeout
[   76.899669][ T5841] Bluetooth: hci1: command tx timeout
[   76.900094][   T52] Bluetooth: hci2: command tx timeout
[   76.913913][ T5944] Zero length message leads to an empty skb
[   76.921181][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.938464][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.964592][ T5822] veth0_macvtap: entered promiscuous mode
[   77.004046][ T5822] veth1_macvtap: entered promiscuous mode
[   77.014999][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.024067][    C0] hrtimer: interrupt took 66867 ns
[   77.028459][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.093206][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.110802][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.143727][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.188826][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.326258][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.363360][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.388231][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.426195][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.090934][ T5963] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.363989][ T5972] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10'.
[   78.622540][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.670534][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.748014][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.774143][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.894518][   T52] Bluetooth: hci3: command tx timeout
[   78.896224][ T5841] Bluetooth: hci0: command tx timeout
[   78.977247][ T5841] Bluetooth: hci2: command tx timeout
[   78.977321][   T52] Bluetooth: hci1: command tx timeout
[   78.982697][ T5830] Bluetooth: hci4: command tx timeout
[   79.006420][ T5977] netlink: 'syz.3.11': attribute type 13 has an invalid length.
[   79.479122][ T5984] netlink: 'syz.1.13': attribute type 3 has an invalid length.
[   81.290187][ T5993] netlink: 'syz.4.14': attribute type 21 has an invalid length.
[   81.313472][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'.
[   82.992862][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.525208][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  158.531581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  165.044051][    C0] sched: DL replenish lagged too much
[  165.094492][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.111110][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  218.126710][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  222.202993][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.1.18:6009]
[  222.203016][    C1] Modules linked in:
[  222.203051][    C1] irq event stamp: 13742317
[  222.203057][    C1] hardirqs last  enabled at (13742316): [<ffffffff8b465c14>] irqentry_exit+0x74/0x90
[  222.203095][    C1] hardirqs last disabled at (13742317): [<ffffffff8b46484e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  222.203118][    C1] softirqs last  enabled at (9966856): [<ffffffff8184dc8a>] __irq_exit_rcu+0xca/0x1f0
[  222.203139][    C1] softirqs last disabled at (9966859): [<ffffffff8184dc8a>] __irq_exit_rcu+0xca/0x1f0
[  222.203190][    C1] CPU: 1 UID: 0 PID: 6009 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) 
[  222.203208][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.203222][    C1] RIP: 0010:memset_orig+0x15/0xb0
[  222.203244][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84
[  222.203261][    C1] RSP: 0018:ffffc90000a08010 EFLAGS: 00000206
[  222.203275][    C1] RAX: 0000000000000000 RBX: ffffc90000a08120 RCX: 0000000000000000
[  222.203285][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a08138
[  222.203296][    C1] RBP: dffffc0000000000 R08: ffffc90000a08147 R09: 1ffff92000141028
[  222.203307][    C1] R10: ffffc90000a08138 R11: fffff52000141029 R12: ffffc900057e7d70
[  222.203319][    C1] R13: ffffc90000a08138 R14: ffffc90000a080e8 R15: ffffc90000a08130
[  222.203331][    C1] FS:  00007efd0c9f16c0(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000
[  222.203345][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.203356][    C1] CR2: 00007f0dc75b3f98 CR3: 00000000295c6000 CR4: 00000000003526f0
[  222.203370][    C1] Call Trace:
[  222.203378][    C1]  <IRQ>
[  222.203384][    C1]  unwind_next_frame+0xc98/0x2390
[  222.203423][    C1]  ? unwind_next_frame+0xa5/0x2390
[  222.203447][    C1]  ? _printk+0xcf/0x120
[  222.203478][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  222.203503][    C1]  arch_stack_walk+0x11c/0x150
[  222.203546][    C1]  ? udplitev6_sk_init+0x44/0x50
[  222.203584][    C1]  stack_trace_save+0x9c/0xe0
[  222.203607][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  222.203642][    C1]  ? trace_call_bpf+0xc7/0xb50
[  222.203663][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  222.203692][    C1]  kasan_save_track+0x3e/0x80
[  222.203714][    C1]  ? kasan_save_track+0x3e/0x80
[  222.203733][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  222.203754][    C1]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  222.203774][    C1]  ? ref_tracker_alloc+0x133/0x460
[  222.203789][    C1]  ? ___neigh_create+0xc9e/0x2260
[  222.203809][    C1]  ? ip6_finish_output2+0x1175/0x1480
[  222.203830][    C1]  ? ip6_output+0x340/0x550
[  222.203848][    C1]  ? ndisc_send_skb+0xbce/0x1510
[  222.203863][    C1]  ? addrconf_rs_timer+0x369/0x670
[  222.203884][    C1]  ? call_timer_fn+0x17e/0x5f0
[  222.203898][    C1]  ? __run_timer_base+0x61a/0x860
[  222.203917][    C1]  ? run_timer_softirq+0xb7/0x180
[  222.203937][    C1]  ? handle_softirqs+0x286/0x870
[  222.203952][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  222.203966][    C1]  ? irq_exit_rcu+0x9/0x30
[  222.203980][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  222.203998][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.204014][    C1]  ? __wake_up_klogd+0xb6/0x110
[  222.204034][    C1]  ? vprintk_emit+0x4fc/0x590
[  222.204050][    C1]  ? _printk+0xcf/0x120
[  222.204168][    C1]  __kasan_kmalloc+0x93/0xb0
[  222.204198][    C1]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  222.204224][    C1]  ? ref_tracker_alloc+0x133/0x460
[  222.204259][    C1]  ref_tracker_alloc+0x133/0x460
[  222.204285][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  222.204299][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  222.204324][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  222.204346][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.204412][    C1]  ___neigh_create+0xc9e/0x2260
[  222.204459][    C1]  ? __ipv6_neigh_lookup_noref+0x531/0x710
[  222.204518][    C1]  ip6_finish_output2+0x1175/0x1480
[  222.204582][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[  222.204612][    C1]  ? ip6_mtu+0x7d/0x490
[  222.204632][    C1]  ? ip6_mtu+0x38c/0x490
[  222.204660][    C1]  ? ip6_finish_output+0x2ef/0x4e0
[  222.204685][    C1]  ? ip6_output+0x126/0x550
[  222.204711][    C1]  ip6_output+0x340/0x550
[  222.204750][    C1]  ndisc_send_skb+0xbce/0x1510
[  222.204775][    C1]  ? ndisc_send_skb+0x1e4/0x1510
[  222.204817][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  222.204845][    C1]  ? __pfx_dst_output+0x10/0x10
[  222.204928][    C1]  addrconf_rs_timer+0x369/0x670
[  222.204970][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.204991][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.205017][    C1]  ? call_timer_fn+0x155/0x5f0
[  222.205055][    C1]  call_timer_fn+0x17e/0x5f0
[  222.205072][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.205092][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  222.205109][    C1]  ? call_timer_fn+0xbe/0x5f0
[  222.205126][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  222.205169][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.205191][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.205209][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.205239][    C1]  __run_timer_base+0x61a/0x860
[  222.205264][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  222.205319][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  222.205364][    C1]  ? __pfx_run_timer_softirq+0x10/0x10
[  222.205407][    C1]  run_timer_softirq+0xb7/0x180
[  222.205435][    C1]  handle_softirqs+0x286/0x870
[  222.205466][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  222.205502][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  222.205541][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  222.205572][    C1]  __irq_exit_rcu+0xca/0x1f0
[  222.205592][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  222.205637][    C1]  irq_exit_rcu+0x9/0x30
[  222.205653][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  222.205675][    C1]  </IRQ>
[  222.205680][    C1]  <TASK>
[  222.205690][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.205707][    C1] RIP: 0010:__wake_up_klogd+0xb6/0x110
[  222.205727][    C1] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 29 27 85 00 48 c7 c7 88 72 6e 92 48 03 3b e8 da 31 2e 00 <bf> 01 00 00 00 e8 00 5d ef ff 65 8b 1d 79 8b cd 10 31 ff 89 de e8
[  222.205740][    C1] RSP: 0018:ffffc900057e7b28 EFLAGS: 00010246
[  222.205753][    C1] RAX: ffffffff81ced701 RBX: ffffffff8d92cdd8 RCX: 0000000000080000
[  222.205764][    C1] RDX: ffffc90004d12000 RSI: 00000000000085a9 RDI: 00000000000085aa
[  222.205775][    C1] RBP: 0000000000000001 R08: ffffc900057e7a87 R09: 1ffff92000afcf50
[  222.205786][    C1] R10: dffffc0000000000 R11: fffff52000afcf51 R12: 0000000000000000
[  222.205796][    C1] R13: 000000000000006c R14: 0000000000000000 R15: 1ffff92000afcf6c
[  222.205828][    C1]  ? irq_work_queue+0x81/0x140
[  222.205862][    C1]  ? __wake_up_klogd+0xb6/0x110
[  222.205885][    C1]  vprintk_emit+0x4fc/0x590
[  222.205916][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  222.205966][    C1]  ? vprintk+0x12/0x20
[  222.206001][    C1]  _printk+0xcf/0x120
[  222.206037][    C1]  ? __pfx__printk+0x10/0x10
[  222.206075][    C1]  ? udpv6_init_sock+0x2f3/0x3b0
[  222.206111][    C1]  udplitev6_sk_init+0x44/0x50
[  222.206135][    C1]  inet6_create+0xef4/0x1260
[  222.206180][    C1]  __sock_create+0x4b3/0x9f0
[  222.206232][    C1]  __sys_socket+0xd7/0x1b0
[  222.206268][    C1]  __x64_sys_socket+0x7a/0x90
[  222.206297][    C1]  do_syscall_64+0xfa/0xfa0
[  222.206323][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.206338][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.206354][    C1]  ? clear_bhb_loop+0x60/0xb0
[  222.206381][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.206398][    C1] RIP: 0033:0x7efd0bb8f6c9
[  222.206423][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.206435][    C1] RSP: 002b:00007efd0c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  222.206450][    C1] RAX: ffffffffffffffda RBX: 00007efd0bde5fa0 RCX: 00007efd0bb8f6c9
[  222.206461][    C1] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a
[  222.206471][    C1] RBP: 00007efd0bc11f91 R08: 0000000000000000 R09: 0000000000000000
[  222.206480][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.206490][    C1] R13: 00007efd0bde6038 R14: 00007efd0bde5fa0 R15: 00007ffcd18db1f8
[  222.206554][    C1]  </TASK>
[  222.206564][    C1] Sending NMI from CPU 1 to CPUs 0:
[  222.793715][ T5824] Bluetooth: hci3: command 0x0406 tx timeout
[  222.807936][    C0] NMI backtrace for cpu 0
[  222.807953][    C0] CPU: 0 UID: 0 PID: 5824 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  222.807988][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.808007][    C0] Workqueue: hci3 hci_cmd_timeout
[  222.808031][    C0] RIP: 0010:validate_chain+0xa4/0x2140
[  222.808050][    C0] Code: c6 ca c8 7e 8d e8 3c 87 e5 ff 90 0f 0b 90 90 90 48 bb eb 83 b5 80 46 86 c8 61 49 0f af df 48 c1 eb 2d 48 8b 04 dd 60 e3 31 93 <48> 85 c0 0f 94 c1 48 83 c0 f8 0f 94 c2 08 ca 0f 84 24 01 00 00 e8
[  222.808062][    C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00000006
[  222.808074][    C0] RAX: ffffffff93768878 RBX: 00000000000171dd RCX: 0000000000040000
[  222.808085][    C0] RDX: 0000000000000000 RSI: ffff888025204828 RDI: ffff888025203c80
[  222.808095][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8492ea1a
[  222.808105][    C0] R10: ffffc90000007cb0 R11: fffff52000000f98 R12: 0000000000000000
[  222.808115][    C0] R13: ffff8880252047b0 R14: ffff888025204828 R15: 07b24d8723fa41a2
[  222.808126][    C0] FS:  0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  222.808138][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.808148][    C0] CR2: 00007fcf7f3e87d8 CR3: 00000000284cc000 CR4: 00000000003526f0
[  222.808162][    C0] Call Trace:
[  222.808169][    C0]  <IRQ>
[  222.808183][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  222.808201][    C0]  ? trace_call_bpf+0xc7/0xb50
[  222.808224][    C0]  ? trace_call_bpf+0xc7/0xb50
[  222.808243][    C0]  __lock_acquire+0xab9/0xd20
[  222.808263][    C0]  ? debug_object_deactivate+0x9a/0x250
[  222.808282][    C0]  lock_acquire+0x120/0x360
[  222.808295][    C0]  ? debug_object_deactivate+0x9a/0x250
[  222.808320][    C0]  ? random_recv_done+0x115/0x170
[  222.808338][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  222.808356][    C0]  ? debug_object_deactivate+0x9a/0x250
[  222.808375][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  222.808407][    C0]  debug_object_deactivate+0x9a/0x250
[  222.808432][    C0]  debug_deactivate+0x1d/0x200
[  222.808450][    C0]  __hrtimer_run_queues+0x2b0/0xc60
[  222.808465][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  222.808497][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  222.808512][    C0]  ? read_tsc+0x9/0x20
[  222.808539][    C0]  hrtimer_interrupt+0x45b/0xaa0
[  222.808572][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  222.808592][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  222.808611][    C0]  </IRQ>
[  222.808616][    C0]  <TASK>
[  222.808622][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.808637][    C0] RIP: 0010:vprintk_emit+0x49d/0x590
[  222.808655][    C0] Code: 0f 84 34 ff ff ff e8 d2 ed 1f 00 fb eb 44 e8 ca ed 1f 00 e8 45 29 a6 09 4d 85 f6 74 94 e8 bb ed 1f 00 fb 48 c7 c7 00 16 f3 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 0b 39
[  222.808666][    C0] RSP: 0000:ffffc900041cf700 EFLAGS: 00000293
[  222.808678][    C0] RAX: ffffffff81a028d5 RBX: ffffffff81a0272e RCX: ffff888025203c80
[  222.808689][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df31600
[  222.808698][    C0] RBP: ffffc900041cf810 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e
[  222.808709][    C0] R10: dffffc0000000000 R11: fffffbfff1ef9b8f R12: 0000000000000000
[  222.808719][    C0] R13: 000000000000002a R14: 0000000000000200 R15: 1ffff92000839ee4
[  222.808732][    C0]  ? vprintk_emit+0x2ee/0x590
[  222.808749][    C0]  ? vprintk_emit+0x495/0x590
[  222.808773][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  222.808792][    C0]  ? trace_call_bpf+0xc7/0xb50
[  222.808811][    C0]  ? trace_call_bpf+0x7af/0xb50
[  222.808831][    C0]  _printk+0xcf/0x120
[  222.808850][    C0]  ? __pfx__printk+0x10/0x10
[  222.808865][    C0]  ? look_up_lock_class+0x74/0x170
[  222.808889][    C0]  bt_err+0x10b/0x160
[  222.808906][    C0]  ? __lock_acquire+0xab9/0xd20
[  222.808923][    C0]  ? __pfx_bt_err+0x10/0x10
[  222.808949][    C0]  hci_cmd_timeout+0xd8/0x1e0
[  222.808964][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  222.808982][    C0]  process_scheduled_works+0xae1/0x17b0
[  222.809016][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  222.809043][    C0]  worker_thread+0x8a0/0xda0
[  222.809076][    C0]  kthread+0x711/0x8a0
[  222.809097][    C0]  ? __pfx_worker_thread+0x10/0x10
[  222.809112][    C0]  ? __pfx_kthread+0x10/0x10
[  222.809131][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.809148][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.809165][    C0]  ? __pfx_kthread+0x10/0x10
[  222.809183][    C0]  ret_from_fork+0x4bc/0x870
[  222.809200][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  222.809225][    C0]  ? __switch_to_asm+0x39/0x70
[  222.809237][    C0]  ? __switch_to_asm+0x33/0x70
[  222.809249][    C0]  ? __pfx_kthread+0x10/0x10
[  222.809268][    C0]  ret_from_fork_asm+0x1a/0x30
[  222.809292][    C0]  </TASK>
[  222.809932][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  222.809948][    C1] CPU: 1 UID: 0 PID: 6009 Comm: syz.1.18 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  222.809970][    C1] Tainted: [L]=SOFTLOCKUP
[  222.809977][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.809987][    C1] Call Trace:
[  222.809996][    C1]  <IRQ>
[  222.810006][    C1]  dump_stack_lvl+0x99/0x250
[  222.810032][    C1]  ? __asan_memcpy+0x40/0x70
[  222.810058][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.810084][    C1]  ? __pfx__printk+0x10/0x10
[  222.810138][    C1]  vpanic+0x237/0x6d0
[  222.810163][    C1]  ? __pfx_vpanic+0x10/0x10
[  222.810183][    C1]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  222.810234][    C1]  panic+0xb9/0xc0
[  222.810258][    C1]  ? __pfx_panic+0x10/0x10
[  222.810277][    C1]  ? nmi_backtrace_stall_check+0x433/0x440
[  222.810311][    C1]  ? irq_work_queue+0xc3/0x140
[  222.810354][    C1]  watchdog_timer_fn+0x832/0x840
[  222.810385][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  222.810409][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  222.810432][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.810475][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  222.810497][    C1]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  222.810519][    C1]  __hrtimer_run_queues+0x4e0/0xc60
[  222.810537][    C1]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  222.810608][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  222.810625][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  222.810675][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  222.810765][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  222.810792][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  222.810817][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.810835][    C1] RIP: 0010:memset_orig+0x15/0xb0
[  222.810857][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84
[  222.810870][    C1] RSP: 0018:ffffc90000a08010 EFLAGS: 00000206
[  222.810886][    C1] RAX: 0000000000000000 RBX: ffffc90000a08120 RCX: 0000000000000000
[  222.810897][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a08138
[  222.810909][    C1] RBP: dffffc0000000000 R08: ffffc90000a08147 R09: 1ffff92000141028
[  222.810922][    C1] R10: ffffc90000a08138 R11: fffff52000141029 R12: ffffc900057e7d70
[  222.810935][    C1] R13: ffffc90000a08138 R14: ffffc90000a080e8 R15: ffffc90000a08130
[  222.810989][    C1]  unwind_next_frame+0xc98/0x2390
[  222.811027][    C1]  ? unwind_next_frame+0xa5/0x2390
[  222.811050][    C1]  ? _printk+0xcf/0x120
[  222.811080][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  222.811105][    C1]  arch_stack_walk+0x11c/0x150
[  222.811142][    C1]  ? udplitev6_sk_init+0x44/0x50
[  222.811179][    C1]  stack_trace_save+0x9c/0xe0
[  222.811203][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  222.811238][    C1]  ? trace_call_bpf+0xc7/0xb50
[  222.811259][    C1]  ? __pfx_trace_call_bpf+0x10/0x10
[  222.811288][    C1]  kasan_save_track+0x3e/0x80
[  222.811310][    C1]  ? kasan_save_track+0x3e/0x80
[  222.811330][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  222.811351][    C1]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  222.811373][    C1]  ? ref_tracker_alloc+0x133/0x460
[  222.811389][    C1]  ? ___neigh_create+0xc9e/0x2260
[  222.811409][    C1]  ? ip6_finish_output2+0x1175/0x1480
[  222.811432][    C1]  ? ip6_output+0x340/0x550
[  222.811450][    C1]  ? ndisc_send_skb+0xbce/0x1510
[  222.811471][    C1]  ? addrconf_rs_timer+0x369/0x670
[  222.811493][    C1]  ? call_timer_fn+0x17e/0x5f0
[  222.811508][    C1]  ? __run_timer_base+0x61a/0x860
[  222.811528][    C1]  ? run_timer_softirq+0xb7/0x180
[  222.811550][    C1]  ? handle_softirqs+0x286/0x870
[  222.811566][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  222.811582][    C1]  ? irq_exit_rcu+0x9/0x30
[  222.811598][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  222.811617][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.811634][    C1]  ? __wake_up_klogd+0xb6/0x110
[  222.811654][    C1]  ? vprintk_emit+0x4fc/0x590
[  222.811671][    C1]  ? _printk+0xcf/0x120
[  222.811784][    C1]  __kasan_kmalloc+0x93/0xb0
[  222.811814][    C1]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  222.811841][    C1]  ? ref_tracker_alloc+0x133/0x460
[  222.811875][    C1]  ref_tracker_alloc+0x133/0x460
[  222.811903][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  222.811918][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  222.811943][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  222.811965][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.812030][    C1]  ___neigh_create+0xc9e/0x2260
[  222.812076][    C1]  ? __ipv6_neigh_lookup_noref+0x531/0x710
[  222.812134][    C1]  ip6_finish_output2+0x1175/0x1480
[  222.812208][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[  222.812238][    C1]  ? ip6_mtu+0x7d/0x490
[  222.812258][    C1]  ? ip6_mtu+0x38c/0x490
[  222.812287][    C1]  ? ip6_finish_output+0x2ef/0x4e0
[  222.812312][    C1]  ? ip6_output+0x126/0x550
[  222.812338][    C1]  ip6_output+0x340/0x550
[  222.812377][    C1]  ndisc_send_skb+0xbce/0x1510
[  222.812402][    C1]  ? ndisc_send_skb+0x1e4/0x1510
[  222.812444][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  222.812477][    C1]  ? __pfx_dst_output+0x10/0x10
[  222.812558][    C1]  addrconf_rs_timer+0x369/0x670
[  222.812600][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.812622][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.812649][    C1]  ? call_timer_fn+0x155/0x5f0
[  222.812685][    C1]  call_timer_fn+0x17e/0x5f0
[  222.812703][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.812725][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  222.812742][    C1]  ? call_timer_fn+0xbe/0x5f0
[  222.812760][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  222.812802][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.812825][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.812844][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  222.812875][    C1]  __run_timer_base+0x61a/0x860
[  222.812902][    C1]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  222.812955][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  222.813000][    C1]  ? __pfx_run_timer_softirq+0x10/0x10
[  222.813042][    C1]  run_timer_softirq+0xb7/0x180
[  222.813070][    C1]  handle_softirqs+0x286/0x870
[  222.813102][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  222.813138][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  222.813172][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  222.813205][    C1]  __irq_exit_rcu+0xca/0x1f0
[  222.813226][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  222.813269][    C1]  irq_exit_rcu+0x9/0x30
[  222.813286][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  222.813309][    C1]  </IRQ>
[  222.813316][    C1]  <TASK>
[  222.813327][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.813344][    C1] RIP: 0010:__wake_up_klogd+0xb6/0x110
[  222.813365][    C1] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 29 27 85 00 48 c7 c7 88 72 6e 92 48 03 3b e8 da 31 2e 00 <bf> 01 00 00 00 e8 00 5d ef ff 65 8b 1d 79 8b cd 10 31 ff 89 de e8
[  222.813378][    C1] RSP: 0018:ffffc900057e7b28 EFLAGS: 00010246
[  222.813394][    C1] RAX: ffffffff81ced701 RBX: ffffffff8d92cdd8 RCX: 0000000000080000
[  222.813406][    C1] RDX: ffffc90004d12000 RSI: 00000000000085a9 RDI: 00000000000085aa
[  222.813418][    C1] RBP: 0000000000000001 R08: ffffc900057e7a87 R09: 1ffff92000afcf50
[  222.813430][    C1] R10: dffffc0000000000 R11: fffff52000afcf51 R12: 0000000000000000
[  222.813442][    C1] R13: 000000000000006c R14: 0000000000000000 R15: 1ffff92000afcf6c
[  222.813479][    C1]  ? irq_work_queue+0x81/0x140
[  222.813514][    C1]  ? __wake_up_klogd+0xb6/0x110
[  222.813538][    C1]  vprintk_emit+0x4fc/0x590
[  222.813568][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  222.813618][    C1]  ? vprintk+0x12/0x20
[  222.813652][    C1]  _printk+0xcf/0x120
[  222.813688][    C1]  ? __pfx__printk+0x10/0x10
[  222.813726][    C1]  ? udpv6_init_sock+0x2f3/0x3b0
[  222.813762][    C1]  udplitev6_sk_init+0x44/0x50
[  222.813787][    C1]  inet6_create+0xef4/0x1260
[  222.813830][    C1]  __sock_create+0x4b3/0x9f0
[  222.813881][    C1]  __sys_socket+0xd7/0x1b0
[  222.813918][    C1]  __x64_sys_socket+0x7a/0x90
[  222.813947][    C1]  do_syscall_64+0xfa/0xfa0
[  222.813974][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.813990][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.814008][    C1]  ? clear_bhb_loop+0x60/0xb0
[  222.814035][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.814052][    C1] RIP: 0033:0x7efd0bb8f6c9
[  222.814071][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.814084][    C1] RSP: 002b:00007efd0c9f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  222.814102][    C1] RAX: ffffffffffffffda RBX: 00007efd0bde5fa0 RCX: 00007efd0bb8f6c9
[  222.814115][    C1] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a
[  222.814125][    C1] RBP: 00007efd0bc11f91 R08: 0000000000000000 R09: 0000000000000000
[  222.814136][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.814146][    C1] R13: 00007efd0bde6038 R14: 00007efd0bde5fa0 R15: 00007ffcd18db1f8
[  222.814204][    C1]  </TASK>
[  222.815695][    C1] Kernel Offset: disabled