last executing test programs:

1m15.796435753s ago: executing program 1 (id=772):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020066cc8fd848b179c713751c0709fb842e23000b", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

1m15.735700642s ago: executing program 1 (id=774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "c27393246ed537915ea41bc92957951f0ee6d70eb6b6603d5026b30f65658563d0e1c34e0692df5e7b69ed739e99e57ccc7ffbd89689898f531906cdb56b5bacf2"}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m15.666844256s ago: executing program 1 (id=776):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x21, &(0x7f0000000200), 0x10)

1m15.535764651s ago: executing program 1 (id=779):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x2, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xce, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x18)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9)
socketpair(0x28, 0x1, 0x28, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x6c}, {&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d8818253b001e679d26b392fe43082e83d84c3f8755b2d34a", 0x6c}], 0x2}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="2f0000001800000004000000", @ANYRES32, @ANYBLOB="8de34e5217f14ee71187dc65f6d4be1a", @ANYRES64=0x0], 0x20)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="612a6cbf36e8776d00"], 0x9)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m15.063496768s ago: executing program 2 (id=786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x8d, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x6, 0xec, 0x8, 0x3b, 0x8, 0x7fff, 0x1, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x4, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0x1, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x1, 0x9, 0x0, 0x10000, 0x2, 0x10, 0x48, 0xf0, 0x1c3, 0xac20, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x4, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x4, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x1, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0xfffffff8, 0x8, 0x1, 0xe3a5, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0xfffffffb, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0xf83f, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x3, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x4, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x457, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xa, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x0, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8002, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x4, 0x8, 0x0, {0x8, 0x0, 0x6, 0x1, 0x1, 0x5}, {0x1, 0x0, 0x1000, 0xde4e, 0x0, 0x6}, 0x1, 0x400, 0x6d}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m14.896405451s ago: executing program 2 (id=787):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0)

1m14.835939221s ago: executing program 2 (id=788):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m12.242472408s ago: executing program 2 (id=789):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
socket$kcm(0x2a, 0x2, 0x0)

1m12.242237373s ago: executing program 1 (id=790):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1a089, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x421e, 0x0, 0x0, 0x7, 0x1000, 0x4b26, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)

1m11.92632246s ago: executing program 2 (id=792):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

1m11.736434248s ago: executing program 1 (id=793):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d000000000000008300000000faffff44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

1m11.736083367s ago: executing program 2 (id=794):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x5, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080406038609e8fe55a10a0015400400142603600e122f00160006000600a800060b200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb50bb6d08034cb4cac034eb27a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2146b45465578151be43d55ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x80)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xd1}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1400000001080102"], 0x14}}, 0x600000c4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @random="07d9dfce0f35"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})

1m11.596453563s ago: executing program 32 (id=793):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d000000000000008300000000faffff44"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

1m11.555498404s ago: executing program 33 (id=794):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x5, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080406038609e8fe55a10a0015400400142603600e122f00160006000600a800060b200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb50bb6d08034cb4cac034eb27a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f2146b45465578151be43d55ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x80)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xd1}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x22, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001d80)=ANY=[@ANYBLOB="1400000001080102"], 0x14}}, 0x600000c4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @random="07d9dfce0f35"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})

1m0.370665353s ago: executing program 0 (id=910):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="a774384bd57221bc000000000000", 0x0, 0x43b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m0.245821546s ago: executing program 0 (id=911):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x14}, 0x108003, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)

1m0.186021229s ago: executing program 0 (id=912):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$kcm(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

59.744672334s ago: executing program 0 (id=913):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/12], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/85}, 0x20)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x8, 0x2}, 0x8018, 0x0, 0x3, 0x9, 0xe, 0x200000, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x11, 0x6, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@func={0x4, 0x0, 0x0, 0xc, 0x5}, @fwd={0xb}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x7, [{0xb, 0x2, 0x50}, {0x10, 0x3, 0x3}, {0x5, 0x4, 0x4}]}, @fwd={0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x30, 0x13e2f633397c53b1, 0x2e]}}, &(0x7f0000000140)=""/70, 0x80, 0x46, 0x0, 0x8}, 0x28)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x8c0}], 0x1}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

59.521619046s ago: executing program 0 (id=918):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

59.474847149s ago: executing program 0 (id=920):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

59.415706176s ago: executing program 3 (id=922):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

59.295540119s ago: executing program 3 (id=923):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29}, 0x28)
close(0x3)

59.243074038s ago: executing program 3 (id=924):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

59.242644835s ago: executing program 3 (id=925):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

59.173379312s ago: executing program 3 (id=926):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc}, 0x94)

59.173164799s ago: executing program 3 (id=927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)

59.033336166s ago: executing program 4 (id=928):
syz_open_procfs$namespace(0x0, 0xfffffffffffffffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)

58.934567106s ago: executing program 4 (id=929):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x7}]}]}, {0x0, [0x30, 0x30, 0x5f, 0x61]}}, 0x0, 0x32, 0x0, 0x1, 0x2}, 0x28)

58.934311593s ago: executing program 4 (id=930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710420000000000095"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000080)="5602d4", 0x0, 0x0, 0x0, 0x4, r1}, 0x38)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x80)

58.825196228s ago: executing program 4 (id=931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380080002400000000008000140000000014000"], 0xa8}}, 0x0)

58.774634979s ago: executing program 4 (id=932):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x2000007, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)

58.712505677s ago: executing program 4 (id=933):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x15, 0x5f, 0x9f, 0x4, 0x0, 0x100000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dc, 0x80000020, 0x6, 0x8000000000000001, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x2d}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
close(0x3)

43.780137869s ago: executing program 34 (id=920):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

43.734596613s ago: executing program 35 (id=927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)

43.513913592s ago: executing program 36 (id=933):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x15, 0x5f, 0x9f, 0x4, 0x0, 0x100000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dc, 0x80000020, 0x6, 0x8000000000000001, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x2d}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
close(0x3)

6.897248907s ago: executing program 7 (id=1306):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x114b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x7ff}, 0x19cb8, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fa, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001500)}, 0x8880)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
r8 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x6, 0x24, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000000640), 0x4)

4.324774929s ago: executing program 7 (id=1316):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r2)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000680)="d96bbdde5dd7e08639e42406d041e23cd2ff3f52cac442c8e0314dd0c69568f4fea58491e650fbb98aac8780b632d984ef7d9c2955a1213c0a86ee9e82fe22515b762d4a9fe4b8a405077363873fc8b731074f4e16497dc68ce4e7a7e069c75e77005cb8e48dc4402bd2b6ac493954c68d52aff397382e2ac929645862dd9064dee1321e5677ec4f6a22bff27049d13a3a99a43598a9d618619c1fa350966ec56cc85074d0d9d15ec494c80876f3b16d55059a39b2f94cecb81b92e0b089c88a03c650ba62a5a0f7c8fd188abb184e78ac9c18", &(0x7f0000002680)=""/4096, &(0x7f0000000780)="d9591350c0b58e3808c4ec7caabad17cfc9e94b865ffb8d2affc41e766727acabad19bcd09742529f70c8ffc7470ab23f8709aa6056ed17bec326c68cf3fdbc7ee9a3e5b20e074d690d0af63ef0a5e65c01487918def18a4b350fe0019688acaf1e73942d1cde4e25740de46d65652950c71f53375f6ed353abdfea4aba3bb8f86a02a697cb30d", &(0x7f0000000840)="f8869561203ec28e1e8e65d3deb162dfcb22d0d5338388cdecd6d39774202a5426d73e48f0f64a0a72782b5eca680e8a550d7822b333c5a9eed2804ec950a2662261a4b7813f52f970393d48ba57f0cf45719fc44b7f79929513f81c44a93ac8ffc937525c06d071ad91a25b3d3ec8e8cfcb072a9ba89901e7211ee7", 0xa0, r2, 0x4}, 0x38)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x4)
sendmsg(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="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", 0x10c}], 0x1}, 0x40)

4.267479312s ago: executing program 5 (id=1317):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000180), &(0x7f00000000c0)=r1}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102)

3.951772095s ago: executing program 5 (id=1320):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/210, 0xd2}], 0x2}, 0x0)

3.891673345s ago: executing program 5 (id=1321):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.038792933s ago: executing program 5 (id=1327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272696467", @ANYRESOCT=r0], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x240408d0)

1.99007868s ago: executing program 7 (id=1328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

1.928163684s ago: executing program 7 (id=1329):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x0)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)='blkio.bfq.sectors\x00'}, 0x30)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8948, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004800)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8)
setsockopt$sock_attach_bpf(r4, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"})

1.880105676s ago: executing program 5 (id=1331):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xe)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114301, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

591.590586ms ago: executing program 6 (id=1334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

536.869509ms ago: executing program 6 (id=1335):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

536.627405ms ago: executing program 6 (id=1336):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

348.758962ms ago: executing program 7 (id=1337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@local, @in=@private=0xa010100, @in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@private2, @in=@loopback, @in6=@empty, 0x0, 0x3}]}]}, 0xec}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040)

301.281014ms ago: executing program 7 (id=1338):
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000045}, 0x1080)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r6)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304000125bd7000fcdbdf251f2c0000dc2f5b7fd2c1"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

109.754299ms ago: executing program 6 (id=1339):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x10, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4)

109.268352ms ago: executing program 6 (id=1340):
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
close(r0)

428.329µs ago: executing program 5 (id=1341):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)

0s ago: executing program 6 (id=1342):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53996' (ED25519) to the list of known hosts.
syzkaller login: [   48.840532][ T5801] cgroup: Unknown subsys name 'net'
[   48.948087][ T5801] cgroup: Unknown subsys name 'cpuset'
[   48.952385][ T5801] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.701379][ T5801] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.343912][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.355465][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.358003][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.366350][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.368901][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.376275][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.380905][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.383781][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.387899][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.390738][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.393468][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.396793][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.403978][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.407663][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.415347][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.630448][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.636313][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   55.772164][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.776395][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.778789][ T5846] bridge_slave_0: entered allmulticast mode
[   55.781688][ T5846] bridge_slave_0: entered promiscuous mode
[   55.785624][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.790614][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.793496][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.796669][ T5846] bridge_slave_1: entered allmulticast mode
[   55.799348][ T5846] bridge_slave_1: entered promiscuous mode
[   55.802358][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.804661][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.807203][ T5842] bridge_slave_0: entered allmulticast mode
[   55.809886][ T5842] bridge_slave_0: entered promiscuous mode
[   55.813519][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.817893][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.820769][ T5842] bridge_slave_1: entered allmulticast mode
[   55.824013][ T5842] bridge_slave_1: entered promiscuous mode
[   55.855299][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.883064][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.888639][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.914463][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.933385][ T5846] team0: Port device team_slave_0 added
[   55.952311][ T5842] team0: Port device team_slave_0 added
[   55.956055][ T5846] team0: Port device team_slave_1 added
[   55.979393][ T5842] team0: Port device team_slave_1 added
[   55.998815][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.001106][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.003378][ T5850] bridge_slave_0: entered allmulticast mode
[   56.008160][ T5850] bridge_slave_0: entered promiscuous mode
[   56.030076][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.032698][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.042091][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.047142][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.049345][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.057178][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.060882][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.063824][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.067034][ T5850] bridge_slave_1: entered allmulticast mode
[   56.070915][ T5850] bridge_slave_1: entered promiscuous mode
[   56.074645][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.080980][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.089724][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.113164][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.115718][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.123513][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.150570][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.156156][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.203466][ T5842] hsr_slave_0: entered promiscuous mode
[   56.206462][ T5842] hsr_slave_1: entered promiscuous mode
[   56.213598][ T5846] hsr_slave_0: entered promiscuous mode
[   56.217230][ T5846] hsr_slave_1: entered promiscuous mode
[   56.220171][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.222610][ T5846] Cannot create hsr debugfs directory
[   56.226535][ T5850] team0: Port device team_slave_0 added
[   56.230050][ T5850] team0: Port device team_slave_1 added
[   56.266478][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.268655][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.276712][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.288631][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.290883][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.299181][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.360146][ T5850] hsr_slave_0: entered promiscuous mode
[   56.362418][ T5850] hsr_slave_1: entered promiscuous mode
[   56.364560][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   56.367623][ T5850] Cannot create hsr debugfs directory
[   56.539256][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.544992][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.551608][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.567224][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.604596][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.617320][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.622092][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.627722][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.717338][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.726357][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.732690][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.738991][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.782688][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.808953][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   56.823217][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.825645][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.832343][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.849536][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.851812][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.858430][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.877799][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.880056][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.890320][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.892550][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.928610][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.948029][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   56.972362][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.974652][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.991691][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.993991][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.019568][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.022774][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.101588][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.122991][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.157937][ T5842] veth0_vlan: entered promiscuous mode
[   57.168672][ T5842] veth1_vlan: entered promiscuous mode
[   57.182852][ T5846] veth0_vlan: entered promiscuous mode
[   57.192831][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.204533][ T5846] veth1_vlan: entered promiscuous mode
[   57.208963][ T5842] veth0_macvtap: entered promiscuous mode
[   57.223398][ T5842] veth1_macvtap: entered promiscuous mode
[   57.247343][ T5846] veth0_macvtap: entered promiscuous mode
[   57.253337][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.262669][ T5846] veth1_macvtap: entered promiscuous mode
[   57.268242][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.280553][ T5850] veth0_vlan: entered promiscuous mode
[   57.292078][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.302063][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.311329][ T5850] veth1_vlan: entered promiscuous mode
[   57.316625][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.321490][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.328289][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.334639][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.379199][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.388652][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.395378][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.397934][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.406040][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.412219][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.417072][   T54] Bluetooth: hci0: command tx timeout
[   57.425722][   T54] Bluetooth: hci1: command tx timeout
[   57.431348][ T5850] veth0_macvtap: entered promiscuous mode
[   57.438329][ T5850] veth1_macvtap: entered promiscuous mode
[   57.446981][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.450449][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.467483][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.480531][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.496417][   T54] Bluetooth: hci2: command tx timeout
[   57.529889][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.534916][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.543843][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.548349][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.566347][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.568799][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.600811][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.649078][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.653665][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.670008][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.673893][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.707218][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.710197][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.813552][ T5915] Zero length message leads to an empty skb
[   58.497712][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.501237][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.504641][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.738236][ T5932] syz.2.10 (5932) used greatest stack depth: 19368 bytes left
[   58.803922][    C0] hrtimer: interrupt took 33308 ns
[   59.495938][   T54] Bluetooth: hci1: command tx timeout
[   59.497838][   T54] Bluetooth: hci0: command tx timeout
[   59.575262][ T5849] Bluetooth: hci2: command tx timeout
[   59.688363][ T5965] netlink: 'syz.2.23': attribute type 13 has an invalid length.
[   59.690945][ T5965] netlink: 'syz.2.23': attribute type 17 has an invalid length.
[   59.762191][ T5965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.832749][ T5970] netlink: 'syz.2.25': attribute type 10 has an invalid length.
[   60.232760][ T5970] geneve0: entered promiscuous mode
[   60.430887][ T5973] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.26'.
[   60.567219][ T5970] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   60.675315][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.690335][ T5983] netlink: 'syz.1.31': attribute type 13 has an invalid length.
[   60.697040][ T5983] netlink: 'syz.1.31': attribute type 17 has an invalid length.
[   60.794238][ T5983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.224805][ T5995] delete_channel: no stack
[   61.575958][ T5849] Bluetooth: hci0: command tx timeout
[   61.577753][   T54] Bluetooth: hci1: command tx timeout
[   61.656672][   T54] Bluetooth: hci2: command tx timeout
[   61.740390][ T6023] =======================================================
[   61.740390][ T6023] WARNING: The mand mount option has been deprecated and
[   61.740390][ T6023]          and is ignored by this kernel. Remove the mand
[   61.740390][ T6023]          option from the mount to silence this warning.
[   61.740390][ T6023] =======================================================
[   63.655310][ T5849] Bluetooth: hci0: command tx timeout
[   63.657524][   T54] Bluetooth: hci1: command tx timeout
[   63.745305][ T5849] Bluetooth: hci2: command tx timeout
[   64.932822][ T6064] syz.1.65 (6064) used greatest stack depth: 18680 bytes left
[   65.076860][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   65.330139][ T6099] Illegal XDP return value 4294967262 on prog  (id 43) dev N/A, expect packet loss!
[   65.509740][ T6110] netlink: 830 bytes leftover after parsing attributes in process `syz.1.87'.
[   65.543416][ T6112] netlink: 'syz.2.88': attribute type 10 has an invalid length.
[   65.550020][ T6112] netlink: 55 bytes leftover after parsing attributes in process `syz.2.88'.
[   66.425865][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'.
[   67.197248][ T6156] netlink: 156 bytes leftover after parsing attributes in process `syz.1.104'.
[   67.968284][ T6157] C: renamed from team_slave_0 (while UP)
[   67.973294][ T6157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.104'.
[   68.181187][ T6171] syzkaller1: tun_chr_ioctl cmd 1074025677
[   68.183708][ T6171] syzkaller1: linktype set to 823
[   68.397461][ T6179] netlink: 'syz.0.114': attribute type 17 has an invalid length.
[   68.402422][ T6179] netlink: 148 bytes leftover after parsing attributes in process `syz.0.114'.
[   68.660703][ T5849] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[   69.173504][ T6188] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   69.244389][ T6190] xt_HMARK: proto mask must be zero with L3 mode
[   69.702167][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   69.716149][ T6218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.995954][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.999238][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.003046][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.005854][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.028791][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.031388][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.054157][ T6269] netlink: 'syz.1.151': attribute type 4 has an invalid length.
[   71.061064][ T6269] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.151'.
[   71.237848][ T6288] macvlan0: entered promiscuous mode
[   71.240196][ T6288] macvlan0: entered allmulticast mode
[   71.242410][ T6288] veth1_vlan: entered allmulticast mode
[   71.442659][ T6306] warning: `syz.2.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.506737][ T6306] netlink: 'syz.2.167': attribute type 4 has an invalid length.
[   71.510068][ T6306] netlink: 152 bytes leftover after parsing attributes in process `syz.2.167'.
[   71.515595][ T6306] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   72.067902][ T6331] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.178'.
[   72.097381][ T6333] debugfs: '!' already exists in 'ieee80211'
[   72.216412][ T6335] netlink: 'syz.1.180': attribute type 3 has an invalid length.
[   72.220900][ T6335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.180'.
[   72.371149][ T6350] netlink: 14 bytes leftover after parsing attributes in process `syz.0.186'.
[   72.696386][ T5849] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   72.699701][ T5849] Bluetooth: hci2: Injecting HCI hardware error event
[   72.702717][ T5849] Bluetooth: hci2: hardware error 0x00
[   72.708391][   T54] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   72.796961][ T6373] netlink: 'syz.2.195': attribute type 39 has an invalid length.
[   72.848861][ T6375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.195'.
[   73.362299][ T6398] netlink: 'syz.2.205': attribute type 11 has an invalid length.
[   73.364758][ T6398] netlink: 140 bytes leftover after parsing attributes in process `syz.2.205'.
[   73.432790][ T6404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.097663][ T6407] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   74.237624][ T6420] veth1_macvtap: left promiscuous mode
[   74.277308][ T6423] veth1_macvtap: entered promiscuous mode
[   74.279665][ T6423] macsec0: entered promiscuous mode
[   74.281399][ T6423] macsec0: entered allmulticast mode
[   74.284649][ T6423] veth1_macvtap: entered allmulticast mode
[   74.386840][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 0
[   74.390045][   T54] Bluetooth: hci1: Received unexpected HCI Event 0x00
[   74.786456][ T5849] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   74.821934][ T6446] netlink: 'syz.2.224': attribute type 29 has an invalid length.
[   74.833940][ T6446] netlink: 'syz.2.224': attribute type 29 has an invalid length.
[   74.839618][ T6446] netlink: 'syz.2.224': attribute type 29 has an invalid length.
[   74.971428][ T6456] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   75.330650][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'.
[   75.360821][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'.
[   75.368895][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.238'.
[   76.081057][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.506165][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'.
[   76.568634][ T6568] netlink: 'syz.1.261': attribute type 2 has an invalid length.
[   77.076956][ T6634] netlink: 'syz.1.271': attribute type 27 has an invalid length.
[   77.079426][ T6634] netlink: 'syz.1.271': attribute type 4 has an invalid length.
[   77.082060][ T6634] netlink: 152 bytes leftover after parsing attributes in process `syz.1.271'.
[   77.130407][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.272'.
[   77.209741][ T6638] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   77.212553][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.273'.
[   77.294787][ T6648] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.278'.
[   77.340110][ T6652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'.
[   77.476215][ T6660] netlink: 'syz.1.283': attribute type 2 has an invalid length.
[   77.478700][ T6660] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.283'.
[   77.587810][ T6666] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.286'.
[   77.647337][ T6670] netlink: 328 bytes leftover after parsing attributes in process `syz.1.288'.
[   78.329018][ T6705] netlink: 'syz.1.303': attribute type 10 has an invalid length.
[   78.476355][ T6711] netlink: 'syz.1.305': attribute type 3 has an invalid length.
[   78.480752][ T6711] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.305'.
[   79.059637][   T24] cfg80211: failed to load regulatory.db
[   79.415757][ T6744] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   79.561521][ T6749] netlink: 'syz.0.321': attribute type 10 has an invalid length.
[   79.570080][ T6749] veth1_vlan: entered allmulticast mode
[   79.577248][ T6749] team0: Device veth1_vlan failed to register rx_handler
[   80.026706][ T6778] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.030738][ T6778] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.997925][ T6802] bridge: RTM_NEWNEIGH with invalid state 0x1
[   81.631977][ T6816] netlink: 'syz.0.351': attribute type 39 has an invalid length.
[   82.416533][ T6845] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   82.593544][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.828898][ T6870] __nla_validate_parse: 2 callbacks suppressed
[   82.828909][ T6870] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.376'.
[   82.834992][ T6870] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.376'.
[   82.847426][ T6868] netlink: 92 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.850315][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.853616][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.911010][ T6868] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.947649][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[   82.970589][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'.
[   83.915767][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[   84.362788][ T6887] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.383'.
[   85.146295][ T6896] hsr0: entered promiscuous mode
[   85.667984][ T6925] netlink: 'syz.1.402': attribute type 21 has an invalid length.
[   86.359679][ T6859] Set syz1 is full, maxelem 65536 reached
[   86.644570][ T6954] netlink: 'syz.2.415': attribute type 10 has an invalid length.
[   86.650699][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.662814][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.723296][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.725779][ T6954] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.729268][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.731728][ T6954] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.749285][ T6954] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   89.579911][ T7001] __nla_validate_parse: 6 callbacks suppressed
[   89.579926][ T7001] netlink: 104 bytes leftover after parsing attributes in process `syz.2.436'.
[   89.771924][ T7011] netlink: 160 bytes leftover after parsing attributes in process `syz.1.441'.
[   89.853283][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.857466][ T7011] netlink: 'syz.1.441': attribute type 10 has an invalid length.
[   89.860345][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.871757][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.874331][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.936784][ T7011] batman_adv: batadv0: Adding interface: netdevsim0
[   89.939152][ T7011] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.948687][ T7011] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   90.178283][ T7030] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.448'.
[   91.049582][ T7055] syzkaller0: entered promiscuous mode
[   91.051273][ T7055] syzkaller0: entered allmulticast mode
[   92.040094][ T7075] netlink: 'syz.0.466': attribute type 39 has an invalid length.
[   92.782674][ T7087] netlink: 22 bytes leftover after parsing attributes in process `syz.2.473'.
[   92.862645][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'.
[   92.866286][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'.
[   92.869591][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.0.474'.
[   93.027766][ T7099] sctp: [Deprecated]: syz.1.478 (pid 7099) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.027766][ T7099] Use struct sctp_sack_info instead
[   93.903720][ T7113] netlink: 180 bytes leftover after parsing attributes in process `syz.0.483'.
[   94.020604][ T7123] netlink: 'syz.2.488': attribute type 3 has an invalid length.
[   94.023559][ T7123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.488'.
[   94.997022][ T7130] delete_channel: no stack
[   94.999137][ T7130] delete_channel: no stack
[   95.114376][ T7141] netlink: 'syz.2.495': attribute type 10 has an invalid length.
[   95.124933][ T7141] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   95.152025][ T7141] team0: Port device wlan1 added
[   95.159635][ T7121] syz.1.484 (7121) used greatest stack depth: 18384 bytes left
[   95.164012][ T7141] netlink: 'syz.2.495': attribute type 11 has an invalid length.
[   95.167250][ T7141] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.495'.
[   95.170701][ T7140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.160271][ T7168] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[   96.542609][ T7209] netlink: 'syz.1.523': attribute type 2 has an invalid length.
[   96.545197][ T7209] netlink: 'syz.1.523': attribute type 1 has an invalid length.
[   96.548436][ T7209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.523'.
[   96.609396][ T7211] sock: sock_set_timeout: `syz.2.525' (pid 7211) tries to set negative timeout
[   96.962429][ T7236] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.536'.
[   97.058122][ T7243] netlink: 'syz.1.538': attribute type 10 has an invalid length.
[   97.060989][ T7243] hsr0: left promiscuous mode
[   97.067751][ T7243] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   97.250429][ T7254] netlink: 'syz.1.545': attribute type 1 has an invalid length.
[   97.307623][ T7258] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.547'.
[   97.311125][ T7258] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.547'.
[   97.460728][ T7270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.552'.
[   97.537696][ T7273] netlink: 'syz.1.553': attribute type 25 has an invalid length.
[   97.579176][ T7280] netlink: 144 bytes leftover after parsing attributes in process `syz.2.557'.
[   97.674848][ T7291] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.563'.
[   97.921647][ T7305] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.569'.
[   97.973129][ T7309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'.
[   98.012380][ T7311] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   98.086558][ T7313] netlink: 'syz.0.573': attribute type 10 has an invalid length.
[   98.963136][ T7373] syz.1.596 uses obsolete (PF_INET,SOCK_PACKET)
[   99.070825][ T7367] syz.1.596 (7367) used obsolete PPPIOCDETACH ioctl
[  100.192778][ T7393] veth0_vlan: entered allmulticast mode
[  100.444562][ T7404] __nla_validate_parse: 4 callbacks suppressed
[  100.444577][ T7404] netlink: 264 bytes leftover after parsing attributes in process `syz.2.612'.
[  100.452036][ T7404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.612'.
[  100.490354][ T7407] netlink: 'syz.1.613': attribute type 2 has an invalid length.
[  100.797842][ T7414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.615'.
[  104.493959][ T7457] netlink: 'syz.1.632': attribute type 4 has an invalid length.
[  104.567376][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  104.571176][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  104.575983][ T7459] netlink: 2 bytes leftover after parsing attributes in process `syz.2.633'.
[  104.580168][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  104.583896][ T7459] netlink: 2 bytes leftover after parsing attributes in process `syz.2.633'.
[  104.864014][ T7471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.642'.
[  105.131809][ T7479] netlink: 18316 bytes leftover after parsing attributes in process `syz.1.639'.
[  105.861720][ T7499] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.647'.
[  106.257619][ T7519] netlink: 'syz.2.656': attribute type 10 has an invalid length.
[  106.267028][ T7519] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  106.394982][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'.
[  106.966190][ T7554] netlink: 'syz.1.672': attribute type 1 has an invalid length.
[  107.038459][ T7558] netlink: 'syz.1.674': attribute type 21 has an invalid length.
[  107.041280][ T7558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.674'.
[  107.045642][ T7558] netlink: 'syz.1.674': attribute type 4 has an invalid length.
[  107.049060][ T7558] netlink: 'syz.1.674': attribute type 5 has an invalid length.
[  107.052500][ T7558] netlink: 3 bytes leftover after parsing attributes in process `syz.1.674'.
[  107.254098][ T7572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'.
[  107.289943][ T7575] netlink: 'syz.0.682': attribute type 2 has an invalid length.
[  107.909983][ T7601] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.692'.
[  108.171827][ T7616] netlink: 'syz.1.699': attribute type 29 has an invalid length.
[  108.176721][ T7616] netlink: 'syz.1.699': attribute type 29 has an invalid length.
[  108.356117][ T7628] netlink: 809 bytes leftover after parsing attributes in process `syz.1.703'.
[  108.359166][ T7628] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.703'.
[  110.152869][ T7648] netlink: 'syz.1.712': attribute type 10 has an invalid length.
[  110.155775][ T7648] batman_adv: batadv0: Removing interface: netdevsim0
[  110.169120][ T7648] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  112.263984][ T7703] netlink: 13 bytes leftover after parsing attributes in process `syz.2.736'.
[  112.361833][ T7710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'.
[  112.432193][ T7714] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  112.441531][ T7714] netlink: 'syz.0.741': attribute type 4 has an invalid length.
[  112.444420][ T7714] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.741'.
[  112.454134][ T7714] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  112.463485][ T7714] netlink: 'syz.0.741': attribute type 4 has an invalid length.
[  112.467161][ T7714] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.741'.
[  112.505685][ T7721] netlink: 'syz.2.744': attribute type 1 has an invalid length.
[  112.518159][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  112.582558][ T7725] netlink: 14 bytes leftover after parsing attributes in process `syz.2.746'.
[  112.660037][ T7725] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.746'.
[  113.368384][ T7765] option changes via remount are deprecated (pid=7764 comm=syz.1.764)
[  113.645387][ T7784] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.772'.
[  114.062727][ T7803] netlink: 'syz.1.779': attribute type 16 has an invalid length.
[  114.081324][ T7803] netlink: 'syz.1.779': attribute type 3 has an invalid length.
[  114.084222][ T7803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.779'.
[  114.273044][ T7816] netlink: 188 bytes leftover after parsing attributes in process `syz.2.785'.
[  118.441392][ T7849] netlink: 'syz.0.797': attribute type 2 has an invalid length.
[  118.444301][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.797'.
[  118.647206][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.650868][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.654041][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.659381][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.662627][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.812578][ T7850] chnl_net:caif_netlink_parms(): no params data found
[  118.860726][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.863049][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.865978][ T7850] bridge_slave_0: entered allmulticast mode
[  118.868790][ T7850] bridge_slave_0: entered promiscuous mode
[  118.872093][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.874436][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.877554][ T7850] bridge_slave_1: entered allmulticast mode
[  118.880327][ T7850] bridge_slave_1: entered promiscuous mode
[  118.901656][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.906495][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.926182][ T7850] team0: Port device team_slave_0 added
[  118.929612][ T7850] team0: Port device team_slave_1 added
[  118.965325][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.967658][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.975697][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.979979][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.982064][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.990788][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.028262][ T7850] hsr_slave_0: entered promiscuous mode
[  119.030584][ T7850] hsr_slave_1: entered promiscuous mode
[  119.032715][ T7850] debugfs: 'hsr0' already exists in 'hsr'
[  119.052882][ T7850] Cannot create hsr debugfs directory
[  119.198844][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.202774][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.206600][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.212086][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.218965][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.231547][ T7850] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.238431][ T7850] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.244365][ T7850] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.267009][ T7850] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.358818][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.361162][ T7850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.363638][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.366727][ T7850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.470054][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.478647][ T7865] chnl_net:caif_netlink_parms(): no params data found
[  119.490687][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.494101][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.525429][ T7850] 8021q: adding VLAN 0 to HW filter on device team0
[  119.537317][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.539998][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.560041][ T2178] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.562298][ T2178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.597198][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.599658][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.602054][ T7865] bridge_slave_0: entered allmulticast mode
[  119.606517][ T7865] bridge_slave_0: entered promiscuous mode
[  119.617062][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.620077][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.622833][ T7865] bridge_slave_1: entered allmulticast mode
[  119.636516][ T7865] bridge_slave_1: entered promiscuous mode
[  119.669789][ T7850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  119.673572][ T7850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.707665][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.719163][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.777154][ T7865] team0: Port device team_slave_0 added
[  119.782204][ T7865] team0: Port device team_slave_1 added
[  119.791785][ T7893] netlink: 'syz.0.804': attribute type 6 has an invalid length.
[  119.794357][ T7893] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.804'.
[  119.822865][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.826314][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.837014][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.841792][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.844151][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.856397][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.929327][ T7865] hsr_slave_0: entered promiscuous mode
[  119.931919][ T7865] hsr_slave_1: entered promiscuous mode
[  119.934731][ T7865] debugfs: 'hsr0' already exists in 'hsr'
[  119.938641][ T7865] Cannot create hsr debugfs directory
[  119.998365][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.189408][ T7865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  120.199375][ T7865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  120.208510][ T7865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  120.214961][ T7865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  120.349754][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.358210][ T7850] veth0_vlan: entered promiscuous mode
[  120.368526][ T7850] veth1_vlan: entered promiscuous mode
[  120.382833][ T7865] 8021q: adding VLAN 0 to HW filter on device team0
[  120.392570][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.395500][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.402665][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.405587][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.429117][ T7850] veth0_macvtap: entered promiscuous mode
[  120.437751][ T7850] veth1_macvtap: entered promiscuous mode
[  120.466036][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.474599][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.487737][ T5873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.495527][ T5873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.498927][ T5873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.512550][ T5873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.591735][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.594796][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.633008][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.636566][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.648471][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.701786][ T7865] veth0_vlan: entered promiscuous mode
[  120.705842][ T5849] Bluetooth: hci0: command tx timeout
[  120.717107][ T7865] veth1_vlan: entered promiscuous mode
[  120.753879][ T7865] veth0_macvtap: entered promiscuous mode
[  120.758620][ T7865] veth1_macvtap: entered promiscuous mode
[  120.772314][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.784153][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.801801][ T5907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.811299][ T5907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.840522][ T5907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.846968][ T5907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.919347][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.807'.
[  120.976685][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.980863][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.056086][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.058678][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.325263][ T5849] Bluetooth: hci1: command tx timeout
[  121.692902][ T7942] netlink: 260 bytes leftover after parsing attributes in process `syz.3.817'.
[  121.696452][ T7942] netlink: 260 bytes leftover after parsing attributes in process `syz.3.817'.
[  121.742654][ T7945] netlink: 'syz.4.818': attribute type 13 has an invalid length.
[  121.761252][ T7945] netlink: 'syz.4.818': attribute type 17 has an invalid length.
[  121.782207][ T7942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.788301][ T7942] IPv6: NLM_F_CREATE should be set when creating new route
[  121.791207][ T7942] IPv6: NLM_F_CREATE should be set when creating new route
[  121.887907][ T7951] netlink: 'syz.3.820': attribute type 10 has an invalid length.
[  121.951174][ T7945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.974726][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.991991][ T7951] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.010078][ T7951] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  122.087020][ T7958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.823'.
[  122.204621][ T7969] netlink: 'syz.0.828': attribute type 10 has an invalid length.
[  122.785463][ T5849] Bluetooth: hci0: command tx timeout
[  123.197172][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'.
[  123.204944][ T8012] netlink: 200 bytes leftover after parsing attributes in process `syz.4.848'.
[  123.343908][ T5849] Bluetooth: hci1: command tx timeout
[  123.889832][ T8040] netlink: 68 bytes leftover after parsing attributes in process `syz.4.860'.
[  124.024064][ T8052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'.
[  124.040797][ T8052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'.
[  124.199897][ T8065] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.874'.
[  124.294253][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  124.298255][ T8069] netlink: 6 bytes leftover after parsing attributes in process `syz.0.876'.
[  124.913894][ T5849] Bluetooth: hci0: command tx timeout
[  125.344085][ T8093] lo speed is unknown, defaulting to 1000
[  125.348257][ T8093] lo speed is unknown, defaulting to 1000
[  125.380161][ T8093] lo speed is unknown, defaulting to 1000
[  125.422457][ T5849] Bluetooth: hci1: command tx timeout
[  125.441134][ T8093] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  125.623877][ T8093] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  125.841589][ T8093] lo speed is unknown, defaulting to 1000
[  125.872005][ T8093] lo speed is unknown, defaulting to 1000
[  125.902194][ T8093] lo speed is unknown, defaulting to 1000
[  125.973227][ T8098] syzkaller0: entered promiscuous mode
[  125.975955][ T8098] syzkaller0: entered allmulticast mode
[  125.978405][ T8093] lo speed is unknown, defaulting to 1000
[  126.935679][ T5849] Bluetooth: hci0: command tx timeout
[  127.508505][ T5849] Bluetooth: hci1: command tx timeout
[  127.541750][ T8093] lo speed is unknown, defaulting to 1000
[  127.680844][ T8113] netlink: 144 bytes leftover after parsing attributes in process `syz.0.887'.
[  128.639624][ T8128] netlink: 'syz.0.896': attribute type 9 has an invalid length.
[  128.642144][ T8128] netlink: 146452 bytes leftover after parsing attributes in process `syz.0.896'.
[  129.148140][ T8156] lo speed is unknown, defaulting to 1000
[  129.848129][ T8170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.042666][ T8186] netlink: 'syz.3.922': attribute type 3 has an invalid length.
[  130.055381][ T8186] netlink: 'syz.3.922': attribute type 6 has an invalid length.
[  130.058067][ T8186] netlink: 'syz.3.922': attribute type 8 has an invalid length.
[  130.065391][ T8186] netlink: 'syz.3.922': attribute type 10 has an invalid length.
[  130.068238][ T8186] netlink: 'syz.3.922': attribute type 11 has an invalid length.
[  130.074990][ T8186] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.922'.
[  130.652492][ T8222] netlink: 'syz.4.932': attribute type 2 has an invalid length.
[  132.870455][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873210][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  134.505210][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1059652820 wd_nsec: 1059652723
[  141.388644][ T5880] sched: DL replenish lagged too much
[  145.852458][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.855750][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.858320][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.861543][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.864531][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.151946][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.157942][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.160852][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.163756][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.171013][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.352686][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.356689][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.359397][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.362562][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.370130][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  148.015264][   T54] Bluetooth: hci3: command tx timeout
[  148.318229][   T54] Bluetooth: hci4: command tx timeout
[  148.444360][ T8243] lo speed is unknown, defaulting to 1000
[  148.457971][   T54] Bluetooth: hci5: command tx timeout
[  148.521394][ T8245] lo speed is unknown, defaulting to 1000
[  148.552252][ T8238] lo speed is unknown, defaulting to 1000
[  148.972069][ T5716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.008051][ T8243] chnl_net:caif_netlink_parms(): no params data found
[  149.052835][ T8245] chnl_net:caif_netlink_parms(): no params data found
[  149.100455][ T5716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.133720][ T8238] chnl_net:caif_netlink_parms(): no params data found
[  149.171452][ T5716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.299111][ T5716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.321854][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.324952][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.328521][ T8243] bridge_slave_0: entered allmulticast mode
[  149.332516][ T8243] bridge_slave_0: entered promiscuous mode
[  149.366577][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.369596][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.371924][ T8243] bridge_slave_1: entered allmulticast mode
[  149.374854][ T8243] bridge_slave_1: entered promiscuous mode
[  149.433304][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.436798][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.439987][ T8245] bridge_slave_0: entered allmulticast mode
[  149.444130][ T8245] bridge_slave_0: entered promiscuous mode
[  149.454334][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.471947][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.474862][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.478739][ T8245] bridge_slave_1: entered allmulticast mode
[  149.482574][ T8245] bridge_slave_1: entered promiscuous mode
[  149.503345][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.523736][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.527216][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.530256][ T8238] bridge_slave_0: entered allmulticast mode
[  149.534432][ T8238] bridge_slave_0: entered promiscuous mode
[  149.556157][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.573438][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.577567][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.580573][ T8238] bridge_slave_1: entered allmulticast mode
[  149.584656][ T8238] bridge_slave_1: entered promiscuous mode
[  149.624032][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.647953][ T8243] team0: Port device team_slave_0 added
[  149.686551][ T8243] team0: Port device team_slave_1 added
[  149.720809][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.728167][ T8245] team0: Port device team_slave_0 added
[  149.764737][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.768213][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.778511][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.785394][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.808745][ T8245] team0: Port device team_slave_1 added
[  149.813720][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.817649][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.830730][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.913183][ T8238] team0: Port device team_slave_0 added
[  149.916954][ T5716] bridge_slave_1: left allmulticast mode
[  149.919435][ T5716] bridge_slave_1: left promiscuous mode
[  149.922705][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.931572][ T5716] bridge_slave_0: left allmulticast mode
[  149.933813][ T5716] bridge_slave_0: left promiscuous mode
[  149.938064][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.055505][   T54] Bluetooth: hci3: command tx timeout
[  150.268427][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.273501][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.278848][ T5716] bond0 (unregistering): Released all slaves
[  150.303521][ T8238] team0: Port device team_slave_1 added
[  150.367594][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.369810][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.382468][   T54] Bluetooth: hci4: command tx timeout
[  150.384826][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.389829][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.392026][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.400203][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.421222][ T8243] hsr_slave_0: entered promiscuous mode
[  150.423681][ T8243] hsr_slave_1: entered promiscuous mode
[  150.427629][ T8243] debugfs: 'hsr0' already exists in 'hsr'
[  150.429545][ T8243] Cannot create hsr debugfs directory
[  150.462767][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.467502][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.477119][ T8238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.526682][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.529466][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.539938][ T8238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.545935][   T54] Bluetooth: hci5: command tx timeout
[  150.591203][ T8245] hsr_slave_0: entered promiscuous mode
[  150.594415][ T8245] hsr_slave_1: entered promiscuous mode
[  150.597635][ T8245] debugfs: 'hsr0' already exists in 'hsr'
[  150.599958][ T8245] Cannot create hsr debugfs directory
[  150.783256][ T8238] hsr_slave_0: entered promiscuous mode
[  150.787836][ T8238] hsr_slave_1: entered promiscuous mode
[  150.791087][ T8238] debugfs: 'hsr0' already exists in 'hsr'
[  150.793499][ T8238] Cannot create hsr debugfs directory
[  150.966639][ T5716] hsr_slave_0: left promiscuous mode
[  150.969511][ T5716] hsr_slave_1: left promiscuous mode
[  150.980068][ T5716] veth1_macvtap: left promiscuous mode
[  150.981851][ T5716] veth0_macvtap: left promiscuous mode
[  151.230145][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  151.252373][ T5716] team0 (unregistering): Port device team_slave_0 removed
[  151.543062][ T5893] lo speed is unknown, defaulting to 1000
[  151.552404][ T5893] infiniband syz2: ib_query_port failed (-19)
[  151.668431][ T8243] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  151.681586][ T8243] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  151.690613][ T8243] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  151.701594][ T8243] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  151.771499][ T8238] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.784217][ T8238] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.801931][ T8238] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.810676][ T8238] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.878672][ T8245] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  151.884219][ T8245] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  151.924105][ T5716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.932905][ T8245] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  151.948809][ T8245] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  151.988427][ T5716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.046488][ T5716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.080594][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.099960][ T5716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.123226][ T8243] 8021q: adding VLAN 0 to HW filter on device team0
[  152.135574][   T54] Bluetooth: hci3: command tx timeout
[  152.140486][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.142775][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.151970][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.154242][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.164792][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.203670][ T8238] 8021q: adding VLAN 0 to HW filter on device team0
[  152.229018][ T8243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  152.236103][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.238844][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.270577][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.318507][ T5716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.330367][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.333095][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.351246][ T8245] 8021q: adding VLAN 0 to HW filter on device team0
[  152.384821][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.387217][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.409271][ T5716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.419372][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.422687][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.454108][ T5716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.461775][   T54] Bluetooth: hci4: command tx timeout
[  152.503968][ T8243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.557412][ T5716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.615667][   T54] Bluetooth: hci5: command tx timeout
[  152.753398][ T8238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.830479][ T5716] bridge_slave_1: left allmulticast mode
[  152.833247][ T5716] bridge_slave_1: left promiscuous mode
[  152.845278][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.865889][ T5716] bridge_slave_0: left allmulticast mode
[  152.868196][ T5716] bridge_slave_0: left promiscuous mode
[  152.870518][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.880604][ T5716] bridge_slave_1: left allmulticast mode
[  152.882886][ T5716] bridge_slave_1: left promiscuous mode
[  152.886784][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.893758][ T5716] bridge_slave_0: left allmulticast mode
[  152.898815][ T5716] bridge_slave_0: left promiscuous mode
[  152.901849][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.189483][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.194148][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.200082][ T5716] bond0 (unregistering): Released all slaves
[  153.394316][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.401498][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.406196][ T5716] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  153.410848][ T5716] bond0 (unregistering): Released all slaves
[  153.447305][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.543786][ T8243] veth0_vlan: entered promiscuous mode
[  153.584296][ T8243] veth1_vlan: entered promiscuous mode
[  153.778016][ T8243] veth0_macvtap: entered promiscuous mode
[  153.796268][ T8243] veth1_macvtap: entered promiscuous mode
[  153.867936][ T8238] veth0_vlan: entered promiscuous mode
[  153.887614][ T8245] veth0_vlan: entered promiscuous mode
[  153.894289][ T8245] veth1_vlan: entered promiscuous mode
[  153.923997][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.949436][ T8238] veth1_vlan: entered promiscuous mode
[  153.961650][ T8243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.990867][ T5907] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.995881][ T5907] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.003073][ T8245] veth0_macvtap: entered promiscuous mode
[  154.018073][ T5716] hsr_slave_0: left promiscuous mode
[  154.020384][ T5716] hsr_slave_1: left promiscuous mode
[  154.022362][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.024533][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.028256][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.030571][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.035643][ T5716] hsr_slave_0: left promiscuous mode
[  154.037856][ T5716] hsr_slave_1: left promiscuous mode
[  154.040276][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.043214][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.059883][ T5716] veth1_macvtap: left promiscuous mode
[  154.061680][ T5716] veth0_macvtap: left promiscuous mode
[  154.063486][ T5716] veth1_vlan: left promiscuous mode
[  154.065608][ T5716] veth0_vlan: left promiscuous mode
[  154.068263][ T5716] veth1_macvtap: left promiscuous mode
[  154.070006][ T5716] veth0_macvtap: left promiscuous mode
[  154.071797][ T5716] veth1_vlan: left promiscuous mode
[  154.073589][ T5716] veth0_vlan: left promiscuous mode
[  154.225277][   T54] Bluetooth: hci3: command tx timeout
[  154.408393][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  154.434003][ T5716] team0 (unregistering): Port device team_slave_0 removed
[  154.535319][   T54] Bluetooth: hci4: command tx timeout
[  154.698821][   T54] Bluetooth: hci5: command tx timeout
[  154.946415][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  154.971127][ T5716] team0 (unregistering): Port device team_slave_0 removed
[  155.208925][ T5907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.212597][ T5907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.227129][ T8245] veth1_macvtap: entered promiscuous mode
[  155.249698][ T8238] veth0_macvtap: entered promiscuous mode
[  155.273707][ T8238] veth1_macvtap: entered promiscuous mode
[  155.293020][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.324338][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.348393][ T5907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.353290][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.358111][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.362213][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.394567][ T5907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.401241][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.419894][ T5907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.422713][ T5907] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.439070][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.441543][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.449266][ T5907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.490652][ T5907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.520351][ T5907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.541878][ T5907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.603326][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.615810][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.626655][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.629054][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.689618][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.698274][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.740884][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.756646][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.789197][   T54] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  156.090580][ T8398] netlink: 'syz.6.944': attribute type 3 has an invalid length.
[  156.113163][ T8398] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.944'.
[  156.149064][ T8406] netlink: 'syz.7.946': attribute type 1 has an invalid length.
[  156.154176][ T8398] netlink: 14 bytes leftover after parsing attributes in process `syz.6.944'.
[  156.411179][ T8416] veth0_vlan: entered allmulticast mode
[  156.614332][ T8416] veth0_vlan: left promiscuous mode
[  156.753068][ T8416] veth0_vlan: entered promiscuous mode
[  157.972330][ T8441] netlink: 'syz.6.955': attribute type 25 has an invalid length.
[  157.993043][ T8441] netlink: 'syz.6.955': attribute type 16 has an invalid length.
[  158.011279][ T8441] netlink: 48 bytes leftover after parsing attributes in process `syz.6.955'.
[  158.019871][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.338302][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.6.968'.
[  158.341005][ T8478] netlink: 356 bytes leftover after parsing attributes in process `syz.6.968'.
[  159.950089][ T8614] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1009'.
[  160.043964][ T8616] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1011'.
[  160.064166][ T8616] netlink: zone id is out of range
[  160.067874][ T8616] netlink: zone id is out of range
[  160.069533][ T8616] netlink: zone id is out of range
[  160.071242][ T8616] netlink: zone id is out of range
[  160.073282][ T8616] netlink: zone id is out of range
[  160.091095][ T8616] netlink: zone id is out of range
[  160.099964][ T8616] netlink: zone id is out of range
[  160.107176][ T8616] netlink: zone id is out of range
[  160.109444][ T8616] netlink: zone id is out of range
[  160.111749][ T8616] netlink: zone id is out of range
[  160.366752][ T8645] netlink: 'syz.7.1020': attribute type 21 has an invalid length.
[  160.406717][ T8649] netlink: 34 bytes leftover after parsing attributes in process `syz.5.1022'.
[  161.354142][ T8694] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  161.359140][ T8694] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  161.484284][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1034'.
[  161.896465][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  162.002725][ T8749] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1050'.
[  162.006192][ T8749] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1050'.
[  163.057805][ T8784] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1059'.
[  163.632477][ T8826] tap0: tun_chr_ioctl cmd 1074025677
[  163.642714][ T8826] tap0: linktype set to 0
[  163.726672][ T8836] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1078'.
[  163.835781][ T8845] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1083'.
[  163.924838][ T8841] netlink: 'syz.7.1081': attribute type 25 has an invalid length.
[  163.953828][ T8841] netlink: 'syz.7.1081': attribute type 39 has an invalid length.
[  164.910337][ T8871] netlink: 'syz.5.1092': attribute type 29 has an invalid length.
[  164.926686][ T8871] netlink: 'syz.5.1092': attribute type 29 has an invalid length.
[  164.933124][ T8871] netlink: 'syz.5.1092': attribute type 29 has an invalid length.
[  165.006951][ T8871] netlink: 'syz.5.1092': attribute type 29 has an invalid length.
[  165.044285][ T8885] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1096'.
[  165.094557][ T8889] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1099'.
[  165.099675][ T8889] unsupported nlmsg_type 40
[  165.158682][ T8891] net_ratelimit: 161 callbacks suppressed
[  165.158695][ T8891] openvswitch: netlink: Missing valid actions attribute.
[  165.165432][ T8891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.440361][ T8911] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1106'.
[  166.383613][ T8937] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  166.401525][ T8937] syzkaller0: entered promiscuous mode
[  166.404309][ T8937] syzkaller0: entered allmulticast mode
[  167.194704][ T8964] netlink: 'syz.6.1126': attribute type 21 has an invalid length.
[  167.199890][ T8964] netlink: 'syz.6.1126': attribute type 15 has an invalid length.
[  167.203504][ T8964] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1126'.
[  167.210969][ T8964] IPv6: NLM_F_CREATE should be specified when creating new route
[  167.234486][ T8964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.238022][ T8964] IPv6: NLM_F_CREATE should be set when creating new route
[  167.241695][ T8964] IPv6: NLM_F_CREATE should be set when creating new route
[  167.244936][ T8964] IPv6: NLM_F_CREATE should be set when creating new route
[  168.097681][ T8977] netlink: 8153 bytes leftover after parsing attributes in process `syz.7.1130'.
[  168.101416][ T8977] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.313214][ T8996] netlink: 'syz.6.1137': attribute type 1 has an invalid length.
[  168.805974][ T9023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.273734][ T9045] netlink: 'syz.6.1150': attribute type 29 has an invalid length.
[  169.291575][ T9045] netlink: 'syz.6.1150': attribute type 29 has an invalid length.
[  169.322679][ T9045] netlink: 'syz.6.1150': attribute type 29 has an invalid length.
[  169.493963][ T9055] netlink: 'syz.6.1150': attribute type 29 has an invalid length.
[  169.508364][ T9059] netlink: 872 bytes leftover after parsing attributes in process `syz.7.1152'.
[  169.535623][ T9059] netlink: 872 bytes leftover after parsing attributes in process `syz.7.1152'.
[  169.858633][ T9080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1162'.
[  170.179836][ T9102] netlink: 'syz.5.1172': attribute type 3 has an invalid length.
[  170.182378][ T9102] netlink: 'syz.5.1172': attribute type 16 has an invalid length.
[  170.195129][ T9102] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1172'.
[  170.282337][ T9104] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.1175'.
[  170.310546][   T54] Bluetooth: hci5: unexpected event 0x03 length: 151 > 11
[  170.310940][ T9108] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1174'.
[  170.699330][ T9130] netlink: 'syz.5.1184': attribute type 1 has an invalid length.
[  172.230403][   T54] Bluetooth: hci3: unexpected event 0x18 length: 151 > 23
[  172.566971][   T54] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3
[  172.574073][ T9202] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  172.888496][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1215'.
[  173.151367][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'.
[  173.158715][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'.
[  173.371796][ T9242] netlink: 'syz.5.1222': attribute type 1 has an invalid length.
[  174.299932][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1233'.
[  174.408556][ T9285] syzkaller0: entered promiscuous mode
[  174.410840][ T9285] syzkaller0: entered allmulticast mode
[  176.608808][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1236'.
[  176.612757][ T9299] netlink: 46 bytes leftover after parsing attributes in process `syz.6.1236'.
[  176.623911][ T9299] netlink: 46 bytes leftover after parsing attributes in process `syz.6.1236'.
[  176.742752][   T54] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  178.036462][ T9388] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.1257'.
[  178.197886][ T9401] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1263'.
[  178.269839][ T9407] netlink: 'syz.5.1264': attribute type 2 has an invalid length.
[  178.317623][ T9411] raw_sendmsg: syz.5.1266 forgot to set AF_INET. Fix it!
[  178.439399][ T9416] netlink: 340 bytes leftover after parsing attributes in process `syz.5.1268'.
[  178.444683][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1268'.
[  178.523474][ T9423] : renamed from hsr0 (while UP)
[  178.711553][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  178.970789][ T5907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.091665][ T5907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.272093][ T5907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.418327][ T5907] bond0: (slave netdevsim0): Releasing backup interface
[  179.439089][ T5907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.497861][ T9457] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1279'.
[  179.617503][ T5907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.672359][ T9470] netlink: 'syz.7.1284': attribute type 2 has an invalid length.
[  179.719495][ T5907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.742055][ T9474] netlink: 'syz.7.1285': attribute type 10 has an invalid length.
[  179.752695][ T9474] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1285'.
[  179.756898][ T9474] bond0: entered promiscuous mode
[  179.758766][ T9474] bond_slave_0: entered promiscuous mode
[  179.761387][ T9474] bond_slave_1: entered promiscuous mode
[  179.768909][ T9474] bridge0: port 3(bond0) entered blocking state
[  179.774296][ T9474] bridge0: port 3(bond0) entered disabled state
[  179.792538][ T9474] bond0: entered allmulticast mode
[  179.794554][ T9474] bond_slave_0: entered allmulticast mode
[  179.807110][ T9474] bond_slave_1: entered allmulticast mode
[  179.874499][ T9474] bridge0: port 3(bond0) entered blocking state
[  179.876980][ T9474] bridge0: port 3(bond0) entered forwarding state
[  179.892536][ T9483] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1287'.
[  180.407211][ T5907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.544372][ T9493] netlink: 'syz.5.1289': attribute type 28 has an invalid length.
[  180.549294][ T9493] netlink: 'syz.5.1289': attribute type 29 has an invalid length.
[  180.552717][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1289'.
[  180.562133][ T5907] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.734575][ T5907] bridge_slave_1: left allmulticast mode
[  180.743815][ T5907] bridge_slave_1: left promiscuous mode
[  180.748874][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.819902][ T5907] bridge_slave_0: left allmulticast mode
[  180.829205][ T5907] bridge_slave_0: left promiscuous mode
[  180.840219][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.871192][ T5845] Bluetooth: hci4: unexpected event 0x3b length: 15 > 10
[  181.233679][ T5907] bridge_slave_1: left allmulticast mode
[  181.252503][ T5907] bridge_slave_1: left promiscuous mode
[  181.255106][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.585736][ T5907] bridge_slave_0: left promiscuous mode
[  181.596538][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.299613][ T9523] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  183.280715][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.295835][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.303471][ T5907] bond0 (unregistering): Released all slaves
[  183.513612][ T5907] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  183.531283][ T5907] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  183.670212][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.676334][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.682795][ T5907] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  183.697403][ T5907] bond0 (unregistering): Released all slaves
[  183.942108][ T9533] bond0: left allmulticast mode
[  183.944221][ T9533] bond_slave_0: left allmulticast mode
[  183.947146][ T9533] bond_slave_1: left allmulticast mode
[  183.950170][ T9533] bridge0: port 3(bond0) entered disabled state
[  184.018076][ T9533] bridge_slave_1: left allmulticast mode
[  184.020354][ T9533] bridge_slave_1: left promiscuous mode
[  184.034664][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.626101][ T9533] bridge_slave_0: left allmulticast mode
[  184.630607][ T9533] bridge_slave_0: left promiscuous mode
[  184.633087][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.029290][ T9550] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1311'.
[  185.034024][ T9550] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1311'.
[  185.056921][ T9556] C: renamed from team_slave_0 (while UP)
[  185.067398][ T9556] netlink: 'syz.5.1314': attribute type 1 has an invalid length.
[  185.070331][ T9556] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1314'.
[  185.466646][ T5845] Bluetooth: hci5: ISO packet for unknown connection handle 0
[  185.573505][ T5907] team0: Port device wlan1 removed
[  185.728537][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1316'.
[  187.251449][ T9588] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1323'.
[  187.439513][ T5907] hsr_slave_0: left promiscuous mode
[  187.445300][ T5907] hsr_slave_1: left promiscuous mode
[  187.448829][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.451501][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.461644][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.474929][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.568364][ T5907] hsr_slave_0: left promiscuous mode
[  187.589188][ T5907] hsr_slave_1: left promiscuous mode
[  187.671723][ T5907] veth1_macvtap: left promiscuous mode
[  187.674193][ T5907] veth0_macvtap: left promiscuous mode
[  187.677646][ T5907] veth1_vlan: left allmulticast mode
[  187.680056][ T5907] veth1_vlan: left promiscuous mode
[  187.682346][ T5907] veth0_vlan: left promiscuous mode
[  187.707986][ T5907] veth1_macvtap: left allmulticast mode
[  187.710480][ T5907] veth1_macvtap: left promiscuous mode
[  187.715977][ T5907] veth0_macvtap: left promiscuous mode
[  187.806949][ T9602] netlink: 'syz.6.1330': attribute type 1 has an invalid length.
[  187.810745][ T9602] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1330'.
[  188.218381][ T5907] team0 (unregistering): Port device team_slave_1 removed
[  188.243250][ T5907] team0 (unregistering): Port device C removed
[  188.757274][ T5907] team0 (unregistering): Port device team_slave_1 removed
[  188.781339][ T5907] team0 (unregistering): Port device team_slave_0 removed
[  189.072249][ T9621] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1337'.
[  189.488999][ T5907] ==================================================================
[  189.491691][ T5907] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  189.494278][ T5907] Write of size 8 at addr ffff88810ab4c4a8 by task kworker/u8:4/5907
[  189.497664][ T5907] 
[  189.498824][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  189.498835][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.498841][ T5907] Workqueue: netns cleanup_net
[  189.498856][ T5907] Call Trace:
[  189.498860][ T5907]  <TASK>
[  189.498882][ T5907]  dump_stack_lvl+0x189/0x250
[  189.498893][ T5907]  ? __kasan_check_byte+0x12/0x40
[  189.498911][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.498919][ T5907]  ? lock_release+0x4b/0x3e0
[  189.498930][ T5907]  ? __virt_addr_valid+0x4a5/0x5c0
[  189.498940][ T5907]  print_report+0xca/0x240
[  189.498948][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  189.498959][ T5907]  kasan_report+0x118/0x150
[  189.498969][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  189.498980][ T5907]  __xfrm_state_delete+0x666/0xca0
[  189.498992][ T5907]  __xfrm_state_delete+0x87b/0xca0
[  189.499004][ T5907]  xfrm_state_flush+0x45f/0x770
[  189.499016][ T5907]  xfrm6_tunnel_net_exit+0x3f/0x100
[  189.499024][ T5907]  ops_undo_list+0x49a/0x990
[  189.499035][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  189.499045][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  189.499054][ T5907]  cleanup_net+0x4c5/0x800
[  189.499064][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  189.499074][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.499084][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  189.499091][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  189.499098][ T5907]  process_scheduled_works+0xae1/0x17b0
[  189.499110][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.499120][ T5907]  worker_thread+0x8a0/0xda0
[  189.499128][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.499138][ T5907]  ? __kthread_parkme+0x7b/0x200
[  189.499147][ T5907]  kthread+0x711/0x8a0
[  189.499159][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  189.499166][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.499174][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.499182][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.499191][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.499199][ T5907]  ret_from_fork+0x3fc/0x770
[  189.499208][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  189.499216][ T5907]  ? __switch_to_asm+0x39/0x70
[  189.499225][ T5907]  ? __switch_to_asm+0x33/0x70
[  189.499233][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.499241][ T5907]  ret_from_fork_asm+0x1a/0x30
[  189.499253][ T5907]  </TASK>
[  189.499256][ T5907] 
[  189.575547][ T5907] Allocated by task 7214:
[  189.577280][ T5907]  kasan_save_track+0x3e/0x80
[  189.579200][ T5907]  __kasan_slab_alloc+0x6c/0x80
[  189.581191][ T5907]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  189.583356][ T5907]  xfrm_state_alloc+0x24/0x2f0
[  189.585288][ T5907]  __find_acq_core+0x8a7/0x1c00
[  189.587231][ T5907]  xfrm_find_acq+0x78/0xa0
[  189.589022][ T5907]  xfrm_alloc_userspi+0x6b3/0xc90
[  189.591050][ T5907]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.593006][ T5907]  netlink_rcv_skb+0x208/0x470
[  189.594880][ T5907]  xfrm_netlink_rcv+0x79/0x90
[  189.596742][ T5907]  netlink_unicast+0x82f/0x9e0
[  189.598623][ T5907]  netlink_sendmsg+0x805/0xb30
[  189.600559][ T5907]  __sock_sendmsg+0x21c/0x270
[  189.602447][ T5907]  ____sys_sendmsg+0x505/0x830
[  189.604360][ T5907]  ___sys_sendmsg+0x21f/0x2a0
[  189.606267][ T5907]  __x64_sys_sendmsg+0x19b/0x260
[  189.608239][ T5907]  do_syscall_64+0xfa/0x3b0
[  189.610081][ T5907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.612428][ T5907] 
[  189.613396][ T5907] Freed by task 5971:
[  189.615001][ T5907]  kasan_save_track+0x3e/0x80
[  189.616888][ T5907]  kasan_save_free_info+0x46/0x50
[  189.618898][ T5907]  __kasan_slab_free+0x5b/0x80
[  189.620838][ T5907]  kmem_cache_free+0x18f/0x400
[  189.622767][ T5907]  xfrm_state_gc_task+0x52d/0x6b0
[  189.624766][ T5907]  process_scheduled_works+0xae1/0x17b0
[  189.626893][ T5907]  worker_thread+0x8a0/0xda0
[  189.628681][ T5907]  kthread+0x711/0x8a0
[  189.630333][ T5907]  ret_from_fork+0x3fc/0x770
[  189.632201][ T5907]  ret_from_fork_asm+0x1a/0x30
[  189.634107][ T5907] 
[  189.635088][ T5907] The buggy address belongs to the object at ffff88810ab4c480
[  189.635088][ T5907]  which belongs to the cache xfrm_state of size 928
[  189.640495][ T5907] The buggy address is located 40 bytes inside of
[  189.640495][ T5907]  freed 928-byte region [ffff88810ab4c480, ffff88810ab4c820)
[  189.645817][ T5907] 
[  189.646784][ T5907] The buggy address belongs to the physical page:
[  189.649479][ T5907] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810ab4c480 pfn:0x10ab4c
[  189.653462][ T5907] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  189.656834][ T5907] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  189.659844][ T5907] page_type: f5(slab)
[  189.661455][ T5907] raw: 057ff00000000040 ffff88801cb73b40 dead000000000122 0000000000000000
[  189.664872][ T5907] raw: ffff88810ab4c480 00000000800e0009 00000000f5000000 0000000000000000
[  189.668237][ T5907] head: 057ff00000000040 ffff88801cb73b40 dead000000000122 0000000000000000
[  189.671631][ T5907] head: ffff88810ab4c480 00000000800e0009 00000000f5000000 0000000000000000
[  189.674996][ T5907] head: 057ff00000000002 ffffea00042ad301 00000000ffffffff 00000000ffffffff
[  189.678389][ T5907] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  189.681790][ T5907] page dumped because: kasan: bad access detected
[  189.684318][ T5907] page_owner tracks the page as allocated
[  189.686588][ T5907] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6323, tgid 6322 (syz.0.175), ts 71831528021, free_ts 71647768697
[  189.693893][ T5907]  post_alloc_hook+0x240/0x2a0
[  189.695818][ T5907]  get_page_from_freelist+0x21e4/0x22c0
[  189.697976][ T5907]  __alloc_frozen_pages_noprof+0x181/0x370
[  189.700291][ T5907]  alloc_pages_mpol+0x232/0x4a0
[  189.702223][ T5907]  allocate_slab+0x8a/0x370
[  189.704008][ T5907]  ___slab_alloc+0xbeb/0x1410
[  189.705881][ T5907]  kmem_cache_alloc_noprof+0x283/0x3c0
[  189.708051][ T5907]  xfrm_state_alloc+0x24/0x2f0
[  189.709992][ T5907]  __find_acq_core+0x8a7/0x1c00
[  189.711944][ T5907]  xfrm_find_acq+0x78/0xa0
[  189.713685][ T5907]  pfkey_getspi+0x65d/0xee0
[  189.715505][ T5907]  pfkey_sendmsg+0xbfe/0x1090
[  189.717394][ T5907]  __sock_sendmsg+0x21c/0x270
[  189.719280][ T5907]  ____sys_sendmsg+0x505/0x830
[  189.721203][ T5907]  ___sys_sendmsg+0x21f/0x2a0
[  189.723074][ T5907]  __x64_sys_sendmsg+0x19b/0x260
[  189.724979][ T5907] page last free pid 6311 tgid 6311 stack trace:
[  189.727411][ T5907]  __free_frozen_pages+0xbc4/0xd30
[  189.729434][ T5907]  free_large_kmalloc+0x13a/0x1f0
[  189.731449][ T5907]  free_netdev+0x3e2/0x700
[  189.733242][ T5907]  netdev_run_todo+0xd0c/0xea0
[  189.735157][ T5907]  tun_chr_close+0x13c/0x1c0
[  189.737015][ T5907]  __fput+0x44c/0xa70
[  189.738642][ T5907]  task_work_run+0x1d4/0x260
[  189.740430][ T5907]  exit_to_user_mode_loop+0xec/0x110
[  189.742416][ T5907]  do_syscall_64+0x2bd/0x3b0
[  189.744235][ T5907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.746569][ T5907] 
[  189.747537][ T5907] Memory state around the buggy address:
[  189.749632][ T5907]  ffff88810ab4c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  189.752684][ T5907]  ffff88810ab4c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  189.755840][ T5907] >ffff88810ab4c480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.758981][ T5907]                                   ^
[  189.761141][ T5907]  ffff88810ab4c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.764190][ T5907]  ffff88810ab4c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.767269][ T5907] ==================================================================
[  189.770820][ T5907] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.773678][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  189.777350][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.781315][ T5907] Workqueue: netns cleanup_net
[  189.783252][ T5907] Call Trace:
[  189.784591][ T5907]  <TASK>
[  189.785802][ T5907]  dump_stack_lvl+0x99/0x250
[  189.787670][ T5907]  ? __asan_memcpy+0x40/0x70
[  189.789541][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.791625][ T5907]  ? __pfx__printk+0x10/0x10
[  189.793480][ T5907]  vpanic+0x281/0x750
[  189.795129][ T5907]  ? __pfx_vpanic+0x10/0x10
[  189.796915][ T5907]  ? irqentry_exit+0x74/0x90
[  189.798785][ T5907]  panic+0xb9/0xc0
[  189.800319][ T5907]  ? __pfx_panic+0x10/0x10
[  189.802102][ T5907]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  189.804363][ T5907]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.806753][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  189.808885][ T5907]  check_panic_on_warn+0x89/0xb0
[  189.810875][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  189.812990][ T5907]  end_report+0x78/0x160
[  189.814682][ T5907]  kasan_report+0x129/0x150
[  189.816498][ T5907]  ? __xfrm_state_delete+0x666/0xca0
[  189.818615][ T5907]  __xfrm_state_delete+0x666/0xca0
[  189.820641][ T5907]  __xfrm_state_delete+0x87b/0xca0
[  189.822637][ T5907]  xfrm_state_flush+0x45f/0x770
[  189.824417][ T5907]  xfrm6_tunnel_net_exit+0x3f/0x100
[  189.826417][ T5907]  ops_undo_list+0x49a/0x990
[  189.828268][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  189.830345][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  189.832383][ T5907]  cleanup_net+0x4c5/0x800
[  189.834188][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  189.836193][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.838252][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  189.840560][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  189.842831][ T5907]  process_scheduled_works+0xae1/0x17b0
[  189.845054][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.847414][ T5907]  worker_thread+0x8a0/0xda0
[  189.849276][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.851698][ T5907]  ? __kthread_parkme+0x7b/0x200
[  189.853662][ T5907]  kthread+0x711/0x8a0
[  189.855311][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  189.857359][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.859210][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.861315][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.863407][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.865240][ T5907]  ret_from_fork+0x3fc/0x770
[  189.866978][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  189.868586][ T5907]  ? __switch_to_asm+0x39/0x70
[  189.870071][ T5907]  ? __switch_to_asm+0x33/0x70
[  189.871575][ T5907]  ? __pfx_kthread+0x10/0x10
[  189.873020][ T5907]  ret_from_fork_asm+0x1a/0x30
[  189.874527][ T5907]  </TASK>
[  189.876105][ T5907] Kernel Offset: disabled
[  189.877446][ T5907] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:53:46  Registers:
info registers vcpu 0

CPU#0
RAX=f63d2f2641bb7f00 RBX=ffff8881067b2600 RCX=f63d2f2641bb7f00 RDX=0000000000000000
RSI=ffffffff8d9b6a67 RDI=0000000000000001 RBP=0000000000000021 RSP=ffffc900032cfc80
R8 =ffffffff8fa37f37 R9 =1ffffffff1f46fe6 R10=dffffc0000000000 R11=fffffbfff1f46fe7
R12=1ffff11020cf6553 R13=0000000000000000 R14=000000001c000004 R15=ffff8881067b2a98
RIP=ffffffff8b7bcf59 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8a4285d6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000000000000b CR3=000000010659e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033ff010
R8 =ffff888107928237 R9 =1ffff11020f25046 R10=dffffc0000000000 R11=ffffffff854ef830
R12=dffffc0000000000 R13=ffffffff99af98c5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe57def56c0 CR3=000000004046a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f96d7612e53
XMM06=0000000000000000 00007f96d7612e4d XMM07=0000000000000000 00007f96d7612e61
XMM08=0000000000000000 00007f96d7612ee7 XMM09=0000000000000000 00007f96d7612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
