last executing test programs:

1m0.290271252s ago: executing program 2 (id=522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x2, 0x0, 0x0, 0x4, 0x90602, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x8}, 0x6218, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x1, 0x0, 0x300000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa0000004000007110370000000000950000adab4a1c00"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x400c0d4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x6400, 0x0)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000780)=0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xd, &(0x7f0000000940)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000480)="f49b031547b3b8ba38b1967d0dea2ab5b8c1757767fd023a83eb071ca8b7c65309a3b9b8ddf064fbe33d0dc21f3c5b83b264e2adbc1164e1ea78907929908d0e9572f98fbae91b81a4e55aae09b797945d0c17e1f1c55a7b0c61927fc3d5b184dc989a3bc8e622c5f4f24641d3bcc8103c49b13c06d46d482ba4c21ba03529077dc6a97b68316a", &(0x7f00000002c0)=""/41, &(0x7f0000000980)="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", &(0x7f0000000540)="4fac5613b5aa362505d36a7aae7d769d9b26c39329b6c41cbc4d2c51f8655a9ea4fab0e7fcacac75ca5b6f7aff06f16bd0a85617b4f30b884493656b42d746b93b03646cea2ac425619df82ce41fe392f96a4fca2a1c5660c07e20c9ac6b5525ca48580854319a5079b9f24a09a0357bd11a8cce227d04c3c5", 0x2, r1}, 0x38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800a00010072616e676500000034000380040004"], 0x9c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000150a01010000000000000000020000060c0006400000000000202001"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="a80100001a00130700000000010000008000000000017f00000100000000000000000000000000000000000001020000008100000000663dc05b5069c8369bed741bbd5132843357d6c3bd491e95a72f26fb4feb367230af92a28b92b5c7a54e85af7ba7a9e63e9997c9d1c02a01bd2c1faaf2a4cb5fdedd2e14a69d7ff0085b7333d5aae9ee974bd3a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a8}}, 0x0)

1m0.093746991s ago: executing program 2 (id=524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x400000000000000, 0x0, 0x4000d}, 0x20000000)

59.903222196s ago: executing program 2 (id=526):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4, 0x7, 0xffffffff, 0x1, 0x7ff, 0x2}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x14000}, 0x4000010)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800032543000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef482861", 0x69}, {&(0x7f0000000300)="13a595013432e4b3b5c5e762c38b8ffaa4f1279848dc20d17c48d282", 0x1c}, {&(0x7f00000003c0)="40a270f806979f0d0aa004bc0a8e1ef1114c4c14edc83f754d24dad4dda665ee974973645a2676bbeb5a4c059daea32870938075e97d7ce57b8227d1aa25cac276d6c1f18bfdbb931542c1a77a4f3d9f6d97a8", 0x53}], 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x40)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000003060102000000000000000007000006050001000700070000000900020073797a320000f0ff0800020073797a3200000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8001)

59.902921703s ago: executing program 2 (id=527):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f220000035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
close(r5)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314010025bd7000fcdbdf250900020073797a3200000000080041007278650014003300766ca7584822c1070a58d184d9d8976f12616e3000"/71], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

59.702883684s ago: executing program 2 (id=529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="38000000130001002bbd7000fbdbdf2504004f80040031802000bc800400c380180035"], 0x38}], 0x1, 0x0, 0x0, 0x8800}, 0x8880)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040041}, 0x4080)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x49, 0x1, 0x2, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x2, 0x0, 0x0, 0x3, 0x43fe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:')
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000cda21800ffffffff9500000000000000dcacb4df43d5b5c3719035655b553034d58b5064c0d0a613eba2e135fe267df71e14d7ef6f5757865070165114fd30c21f35"], &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd70ed7d14e2e394bfbb000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94)

59.509808082s ago: executing program 0 (id=532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x500000000000000, 0x0, 0x4000d}, 0x20000000)

59.444491381s ago: executing program 0 (id=534):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000b00)=""/181, 0xb5}, {&(0x7f00000020c0)=""/4086, 0xff6}, {&(0x7f0000000d40)=""/4103, 0x1007}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000240)=""/123, 0x7b}], 0x6}, 0x40010022)
recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf7babe05000700810005008100", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f00000000c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180500000000000000000000000d0000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="9e8e17ca7dc381debd7ec7df5f188d1660f5a1dae2a52e8070865bbeb1e6d10df7bdb83c00a06d09bc98c70afa76c59402acc61aa545b5ad2552a1588a509f2d5c843703929e519b565be2c0ec53feecec3e73a8781c6fa1136bd066b740448858c8af680136347371a3b3f7d4a4b0aa829b4ee5de8f98eb5c6bdb8bd3ab4a7d123e7ad50261294efad7cc8b053365c85c5bf31c092ba474f721ba58496718dec77e87b0a8d64790e636a54d75154b9c73d18b9095caf58fb75f2d89aa4c50e3aaccc0201ff2b9ac17030efb2da7ef3ca8b5e66422b7"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

59.442469289s ago: executing program 2 (id=536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x100)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x200})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)

56.300642701s ago: executing program 0 (id=537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x32, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

55.573740108s ago: executing program 0 (id=538):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff91, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

55.57292585s ago: executing program 1 (id=539):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x25, 0x101, 0x71bd22, 0xfffffffc, {0x15}, [@typed={0x22, 0x10d, 0x0, 0x0, @binary="b669019f45711a060d959d1282279ada070000000000000041bd29d04cfe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x3, 0x2000007}, {0x5, 0x1, 0xe}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f00000005c0)=""/194, 0x45, 0xc2, 0x1, 0x8}, 0x28)
sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x278, 0x40, 0x8, 0x70bd29, 0x25dfdbfe, {0x1d}, [@nested={0x250, 0x33, 0x0, 0x1, [@nested={0x4, 0xb3}, @nested={0x4, 0x12e}, @nested={0x234, 0x4, 0x0, 0x1, [@nested={0x1a3, 0x49, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @fd=r2}, @generic="616dafb7323f15d5eef0f607bf07ccd87ccc1206b0f35c692c00c5cf47e5d9425e2d3fa1c03b83cbfe6834ed3879c691679e8e427aa222e0208be8f905781887b187b4a8a4df3e7b2cbd4527c22dd431dfee2d22f4c035a9478dab8043acef4dee9b015295ec4d31d22b1a369b13603c98e8505633bb47c5524e7bdaddb18b6ffe07e0fcf845c7edb6672d4e07463eb245c4974036f1d5535b09bc0c9db73086ae1189a3016b6dfe413fa3385fd0c6", @nested={0x4, 0x126}, @generic="7cdef7e9f0da90f1d0681f80fd1a169a78926bc82f39e82af29c311abce877edce5f261bd727f1d7fd6a904499b40b0a90b90f9dc82e4a55f471683042d228b8dd72ea3dcfd35d2acfbbe309ac24e872627b54d64a869e3792f01f06fa1316043aff331dfb8da255faf938c530d0a67a0fd177e0518cc447520df4decae114d4867269e6f9443c70bda7ee2851dd317028a3a0c7e8e1f4646bc8cbaa1b1559f70e151528c3d72e473c9291f51e38", @generic="ef1880aebf0de7052fb1e32b93f64091e29f1ed6229e5b6453632b4a4ea3e063c5fc9867ad9a830f12ebf0c5b099cdb07c73bb4f49c3"]}, @nested={0x78, 0x6c, 0x0, 0x1, [@generic="051a67c6bdbbd1d953ec8134fd6761ff8e793ffb7af18955ca51f5186faeb729f8d2ad070d8e0aba4122a4481b510380e4c4a0b995925d68ef72e42a8b07d01bba2f5497cc6df35b17c633fedc321bd795ee3b073902b64e21de9a571e81896a60049a4f70e05e10e71e4a1a6ed432646becb930"]}, @typed={0x14, 0x9d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x4, 0x62}, @nested={0x4, 0x10b}, @typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x278}, 0x1, 0x0, 0x0, 0x4}, 0x8804)

55.572033915s ago: executing program 1 (id=540):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000002000000000000000000000085130000560000d5a66dc5a2b116516edf7e3e7fbc7a31"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffc, <r1=>0x0}, 0x8)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[], 0x138}}, 0x844)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x6b, &(0x7f0000000000)=r7, 0x10)
setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0)=r3, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4)
sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x7ff}, 0x3, 0xad, 0x6, 0x2, 0x15, 'syz0\x00', "c5aaad85bd2aa2435e03dbf056b8a7b1b98fbdb3174c0e784de57dd75c4cc821", "55443a79fc6b005dcad0cfd006deaffedabf4f53f43a6f86f35a97c7fade8330", [{0xd, 0x1, {0x3, 0xffffffff}}, {0x6, 0x1, {0x3, 0x2}}, {0x7fff, 0x1, {0x1, 0x101}}, {0x400, 0x2, {0x2, 0x503}}, {0xdf2e, 0x8, {0x2, 0x7fffffff}}, {0x960, 0x0, {0x2, 0xaf4}}, {0x3, 0x9, {0x2, 0x7}}, {0x401, 0x5}, {0x40, 0x8, {0x0, 0x6771}}, {0x9, 0x2, {0x1, 0x5}}, {0xa, 0x4, {0x2, 0x5}}, {0x4, 0xffff, {0x3, 0x7}}, {0x1, 0x8, {0x2, 0x7fffffff}}, {0x2, 0x5, {0xe84e5e9897738728, 0x9}}, {0x8000, 0x101, {0x2, 0x4}}, {0x1, 0x5, {0x2, 0x8000}}, {0x1d, 0x9, {0x2, 0x8}}, {0x2, 0x0, {0x3, 0x7ff}}, {0x80, 0x6, {0x3, 0x7fff}}, {0x65, 0x401, {0x3, 0x77}}, {0xfffb, 0x6, {0x3, 0xfffffffd}}, {0x4, 0xf99c, {0x1, 0x6}}, {0x0, 0x3, {0x0, 0x1000}}, {0x4, 0x9, {0x2, 0x7}}, {0x5, 0xc, {0x3, 0xaf1}}, {0x6, 0x9, {0x2, 0xa810}}, {0xff, 0x0, {0x0, 0xfffffff9}}, {0x4, 0x6, {0x3}}, {0x4, 0x1, {0x2}}, {0x81, 0x940, {0x0, 0x7}}, {0x2e8b, 0xfe00, {0x3, 0x6}}, {0x40, 0xf4e5, {0x2, 0x5}}, {0x20e, 0x7, {0x3, 0x21}}, {0x1, 0x9, {0x3, 0x4}}, {0x3, 0x4, {0x3, 0x8}}, {0x0, 0x1, {0x2}}, {0x7fff, 0x9, {0x3, 0x10}}, {0x7, 0xcfd, {0x0, 0xfffffff5}}, {0x34, 0x0, {0x3, 0x7}}, {0xfffc, 0x49de, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x1, 0xfc, 0x3d, 0x3, 0x5, 'syz1\x00', "c4c0d11c071a582ff6b0ff414ce95920a3062c20e49c8fe021bc8b546b820a5f", "fe9ce159c3fc6734ba1c75f512bea9f05bf9073bed74178ddb7a488e7c5f919a", [{0x7ff, 0x7, {0x1, 0x180}}, {0x19, 0x6, {0x1, 0x1}}, {0xfff, 0x80c0, {0x3, 0x1}}, {0x1800, 0x8, {0x3, 0x3}}, {0x40, 0x8000, {0x0, 0x26f0}}, {0x5, 0xf800, {0x2, 0x7}}, {0x7, 0x1ff, {0x1, 0x59}}, {0x3, 0x7fff, {0x0, 0xffffffaa}}, {0x1, 0x9, {0x0, 0x7}}, {0x4, 0x5a44, {0x0, 0x9}}, {0x3303, 0x9, {0x2, 0x200000}}, {0x5, 0x8, {0x3, 0x6}}, {0xffff, 0xfff, {0x1, 0x6}}, {0x8, 0xd18, {0x3, 0x6}}, {0x7, 0xa2db, {0x0, 0x2}}, {0x2000, 0x0, {0x3, 0x4}}, {0x1, 0xd, {0x1, 0x4}}, {0x2, 0x0, {0x2, 0x11eb}}, {0x100, 0x0, {0x0, 0x3}}, {0xf2, 0x7ff, {0x1, 0x3}}, {0xa7f, 0x7a7, {0x3}}, {0x9, 0x4, {0x0, 0x47}}, {0xc52b, 0x9fb, {0x2, 0x1}}, {0x7, 0x100, {0x2, 0x4}}, {0x200, 0x4, {0x3, 0x3ff}}, {0x3, 0x7, {0x3, 0x6}}, {0xfff, 0x3, {0x2, 0x44}}, {0xfff8, 0x9, {0x2, 0xccb2}}, {0x2, 0x8001, {0x3, 0x9}}, {0x4, 0xe, {0x0, 0x3}}, {0x374, 0x3, {0x1, 0x200}}, {0xc, 0x7, {0x0, 0x1}}, {0xfff, 0xa, {0x3, 0x1000}}, {0xede7, 0x7, {0x0, 0xffff}}, {0x1, 0x1, {0x2, 0xfffffffb}}, {0xa, 0xfff7, {0x0, 0x10}}, {0x2, 0x6, {0x3, 0x8001}}, {0xf0f5, 0x3, {0x0, 0xd}}, {0x12, 0x3, {0x0, 0x946b}}, {0x8, 0x40, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x200}, 0x8, 0x6, 0x7, 0x9, 0x17, 'syz0\x00', "5f6ed19b8f6b4e8d944780f29bc7426f32db241fd6ef23bd92376a968b7bd6b8", "fc66a2a8faa2063aba9cb11b5ac0e0f5fc4bc2a4d245dc892650d8b70fdc6b39", [{0x17, 0x7, {0x3, 0x9}}, {0x0, 0x8, {0x2, 0xc}}, {0x6, 0x1, {0x2, 0x5}}, {0x8, 0x7, {0x0, 0xabc}}, {0xfc00, 0x9, {0x0, 0x1}}, {0x6, 0x81, {0x1, 0x3}}, {0x9275, 0x7, {0x2, 0x8}}, {0x80, 0x3d, {0x0, 0x3}}, {0x2, 0x59, {0x0, 0x7fffffff}}, {0x87b, 0x8, {0x2, 0x4}}, {0x1, 0xfff8, {0x0, 0x78a2}}, {0x4, 0x0, {0x3, 0x6}}, {0x5, 0x3, {0x1, 0x8}}, {0xa, 0x2, {0x3, 0xfffffff8}}, {0x7, 0x6, {0x2, 0x32}}, {0x4, 0x1, {0x0, 0xffffffff}}, {0x5, 0x0, {0x3, 0x40}}, {0x1, 0x4, {0x0, 0x200}}, {0x6, 0x200, {0x3, 0x1ff}}, {0x5, 0x7, {0x0, 0x8}}, {0x5, 0x9, {0x1}}, {0x10, 0x8, {0x0, 0x4}}, {0x6, 0x9, {0x0, 0x5}}, {0x0, 0x6, {0x3, 0x1000}}, {0xfbc1, 0x800, {0x0, 0x2e3}}, {0x4, 0xc, {0x0, 0xffffffff}}, {0x7, 0xffd0, {0x1, 0x10}}, {0x9, 0x0, {0x2, 0x401}}, {0x1, 0x9, {0x2, 0x4d4}}, {0xe, 0x800, {0x1, 0xffffffc0}}, {0x1000, 0x0, {0x1, 0x6}}, {0x9, 0x7, {0x1, 0xe857}}, {0x5, 0x400, {0x2, 0x8}}, {0x6, 0x18, {0x0, 0x4}}, {0x510, 0xffff, {0x0, 0x200}}, {0x6, 0xb, {0x0, 0x400}}, {0x4, 0x7, {0x2, 0x800}}, {0x2, 0x6, {0x0, 0xffff}}, {0x0, 0x2, {0x3, 0x7}}, {0x400, 0x10, {0x2, 0x1f7}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0xce, 0xfa, 0xd4, 0x1, 0x18, 'syz1\x00', "3dc6941d34e7d1b414c7b78d0ac56a13e795e97be75ae08c0b77090ad4d10f6f", "3c47f5e54b2d1b7575e4938fedcc1ce6e49593618c6f4485f9468dbb29f1184b", [{0x800, 0x7f, {0x1, 0xfffff223}}, {0x81, 0x1, {0x0, 0xf}}, {0x5, 0xd, {0x2, 0x63d}}, {0xb, 0x100, {0x1, 0x101}}, {0xa, 0x6, {0x0, 0x8}}, {0x5, 0x8, {0x2, 0x70d}}, {0x9, 0x9, {0x1, 0x8}}, {0xc051, 0x9, {0x3, 0x1bb}}, {0x3, 0x50ea, {0x3, 0xf}}, {0x8, 0x9, {0x0, 0x1}}, {0x7, 0x6, {0x0, 0x5}}, {0x9, 0x1, {0x1, 0x5}}, {0x0, 0x6, {0x2, 0x3}}, {0x8, 0x3, {0x2, 0x8}}, {0x9d, 0x200, {0x1, 0xb}}, {0x2, 0x7174, {0x1, 0x9}}, {0x9, 0x5, {0x2}}, {0x0, 0x1, {0x3}}, {0x64, 0x9, {0x2, 0xe0a3}}, {0x2, 0x9, {0x3, 0x1}}, {0x6, 0x5, {0x0, 0x9}}, {0x3f50, 0x95c1, {0x1, 0x2}}, {0xa, 0x9, {0x2, 0x1}}, {0x400, 0x7f, {0x2, 0x3}}, {0x7ff, 0x7, {0x3, 0x17}}, {0x0, 0xc879, {0x2, 0x3}}, {0x3, 0x3, {0x2, 0x7}}, {0x5, 0x2, {0x1, 0x8001}}, {0x2, 0x0, {0x3, 0x74f}}, {0x6, 0xb, {0x1, 0xfff}}, {0x80, 0x6, {0x1, 0x5}}, {0x401, 0x687, {0x1, 0x8}}, {0x9, 0x9, {0x2, 0xa}}, {0x5, 0x6, {0x0, 0x4}}, {0xff, 0x7}, {0x619, 0x0, {0x2, 0xffff}}, {0x96c8, 0x80, {0x2, 0x8001}}, {0x1, 0x7, {0x0, 0x9}}, {0x9, 0xde, {0x3, 0x6}}, {0x0, 0x200, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x9, 0x3, 0x9, 0x7, 0x26, 'syz0\x00', "3e2218d55db530c4d7da9d0399afea2eaf60cde057484ddb7ed3a2a75e49216a", "7029130baae7eaa1a9a775c9f9d58fef577ad2d8317e2a4f236754873c746776", [{0xff81, 0x0, {0x2}}, {0x0, 0x1, {0x2, 0x1}}, {0xf4d2, 0xfffa, {0x0, 0x8001}}, {0x3, 0x5, {0x3, 0x9}}, {0x8, 0x3, {0x0, 0x10001}}, {0x1ff, 0x7, {0x2, 0x2}}, {0x279, 0x5, {0x3, 0x4}}, {0x7a0, 0x1, {0x2, 0x7}}, {0xfd, 0x5, {0x0, 0x8}}, {0xfff4, 0x9, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x3}}, {0x6, 0x9, {0x3, 0x3f}}, {0xd56, 0x8b1, {0x0, 0x7e}}, {0x3, 0x3, {0x3, 0x34}}, {0xaa9, 0x2, {0x2, 0x9}}, {0xfff, 0x3, {0x1, 0x3}}, {0x9, 0x4fb0, {0x1, 0x7}}, {0x800, 0x2, {0x3, 0x7}}, {0xfff, 0x6, {0x1, 0x8}}, {0x9, 0x7, {0x0, 0x53}}, {0x8d, 0x6fbd, {0x3, 0x80}}, {0x4, 0x7fff, {0x3, 0x6b35}}, {0x2, 0xfff6, {0x1}}, {0x3, 0x1ff, {0x3, 0x3}}, {0x0, 0x8001, {0x0, 0xffff0001}}, {0x0, 0xe4, {0x3, 0x1}}, {0x7, 0x7, {0x0, 0x9da}}, {0x8, 0x7, {0x0, 0x8}}, {0xf, 0x7, {0x0, 0x8}}, {0x9, 0x8, {0x3, 0x7}}, {0x9597, 0x5, {0x1, 0x9}}, {0x5d, 0x1, {0x0, 0xffffffff}}, {0x91a3, 0x9, {0x3, 0x1ff}}, {0x6, 0x5, {0x0, 0x3}}, {0xaf, 0xfffa, {0x2, 0x4}}, {0x2, 0x0, {0x2}}, {0xe, 0x5b13, {0x1, 0x81}}, {0x5, 0x6, {0x2, 0x8000}}, {0x1, 0x0, {0x2, 0x6}}, {0xfffd, 0x3486, {0x3, 0x3679}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x31, 0x1, 0x7, 0x0, 0x16, 'syz1\x00', "a06ad0b8f36d965890746cfb8645f292e5cc4a38528ee54d80f9a6e8d4c896e1", "6b82a966a72cf5efe877574b785d91ce4d814fe38aac77b378943d8fe19c6167", [{0x3, 0x9, {0x1, 0x8}}, {0x3, 0xb12, {0x0, 0x822}}, {0x0, 0x1, {0x3, 0x6}}, {0x6ea, 0x9, {0x2, 0x5}}, {0x81, 0x1, {0x0, 0xffffffff}}, {0x1, 0x9, {0x3, 0x5}}, {0x101, 0x2, {0x2, 0x7fffffff}}, {0xe92f, 0x4, {0x3, 0x8}}, {0x3, 0x7, {0x1, 0x5}}, {0x9, 0xe3, {0x0, 0xd}}, {0x5a, 0x5, {0x1, 0x2}}, {0x7, 0x4, {0x3, 0x1}}, {0xffff, 0x4d00, {0x1, 0xa04}}, {0x4, 0x1, {0x0, 0x51cf9cc7}}, {0x5, 0x1, {0x1, 0xc2a7}}, {0x9, 0x8, {0x2}}, {0x0, 0x9, {0x1, 0x1}}, {0x3ff, 0x0, {0x1, 0x7}}, {0x262b, 0xfe8, {0x0, 0x4}}, {0x3, 0xb, {0x0, 0x400}}, {0x6, 0x8, {0x2}}, {0x0, 0x2e7, {0x2, 0x5}}, {0x6, 0xb, {0x2, 0x9}}, {0xc, 0x137d, {0x1}}, {0x100, 0x7, {0x3}}, {0x3b, 0xae9, {0x2, 0x2}}, {0x7, 0x7, {0x2, 0x2}}, {0xb, 0x1000, {0x2, 0x5}}, {0x5cc6, 0x0, {0x0, 0x8001}}, {0x5, 0xfffc, {0x2, 0x7}}, {0x401, 0x4, {0x0, 0x7}}, {0x4, 0x3, {0x1, 0x6}}, {0x1, 0x0, {0x0, 0x7}}, {0x8, 0x1, {0x2, 0x2}}, {0x2695, 0x7, {0x3, 0x74}}, {0x7, 0x1ce, {0x1, 0x10}}, {0x7b7d, 0x0, {0x3, 0xf}}, {0x4, 0x5, {0x3, 0x2a7d666d}}, {0x100, 0x585, {0x0, 0x39}}, {0x7, 0x7, {0x1, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0xc0}, 0x4)

54.643991081s ago: executing program 1 (id=541):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'hugetlb'}, {0xc12d317436b0cf20, 'cpuset'}]}, 0x11) (async)
r2 = getpid() (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000a8000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000007c0003800800014000000000680003801400010076657468305f746f5f62617461647600140001006d6163766c616e31000000000000000014000100766574683100000000000000000000001400010069703665727370616e300000000000001400010076657468305f746f5f626f6e640000000800024000d28800e7"], 0xf0}}, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000034000107"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x40) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$kcm(0x11, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000)=r8, 0x4) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={r4})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000160007010200000000000000017c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0x0, 0x0}, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)

44.411659s ago: executing program 32 (id=536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x100)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x200})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xd}}], 0x30}, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)

43.753032825s ago: executing program 1 (id=543):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500090122bd7000f9ffffff020100000000030047150000"], 0x1c}, 0x1, 0x0, 0x0, 0x30004957}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x90400228}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="4c9bc5376b22498d87e43aad998bc9e06a919b75a5961112c82908d5b9d2241e5997e7582aa760525176d638b52a3b8d2d582be3344647d5d21810603172887708857dc880a24bb357eb15ed0cb30d9bb9c8d52d8c82afa3ac22b2452d4f894031cfb85dcf44356861d02a8998e8444c44388a78586b87101320b41aaa136a3485e9abfc1e9a52ae65feb4947f7d30983d54c6ee") (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8) (async)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x10000) (async)
r10 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000826712403cde056d8b4811980013710d00240000002400000002000000000000000200008400000000007f000004000000000000"], 0x0, 0x3e, 0x0, 0x8}, 0x28) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) (async)
close(r3)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000feffffffffffffff000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x54}, 0x24048880) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001", @ANYRESDEC=r11, @ANYRESDEC=r0], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc005)
ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x5a85)

43.671901888s ago: executing program 1 (id=544):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x2, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000240)='syzkaller\x00', 0x1000, 0x2a, &(0x7f0000000280)=""/42, 0xf1c8009bd33ff1d3, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0xe, 0x726f}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r2, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x2, 0x8}, {0x0, 0x2, 0x6, 0x8}], 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000009600000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)

43.521786013s ago: executing program 0 (id=545):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5450, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d000000000000000003000000000000000000000105000000200000000000000000000003000000000300000002"], 0x0, 0x56}, 0x28)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="a9cb6a4c13f7a5a9544ac3b49855fd7ba1b0ccd243e0d6359abfd52c24b765fc7e7c699c91da3330c01b6222b342830c2003160592cc782acd570d790c7a9eba6fc77ffec1eba228957aac4aa6b9cece5b241ab466787892ee71165ec3e538aabed491d5155ade46bf199559189461e2fe27da997b5ba5b9670df033df48e008d0da0898f6054b8ebf2f84e7e96da1ef95b003531f88d0f75972bfd178d080af"], 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88192, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffffffffffffffff, 0xb214}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x140, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x7ff}, 0x114d05, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
close(r6)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0xff09, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r1, 0x2, 0x2, 0x1}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', r8, 0x4000, r3}, 0x18)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5)
close(r10)
socket$nl_route(0x10, 0x3, 0x0)

43.180099221s ago: executing program 0 (id=546):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xee)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
socket$kcm(0x2c, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r7 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000f, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1004a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r4, 0x0)
recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000740)=""/203, 0xcb}, 0x400120c0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="0de548b6a3ae0e607dd40867f0a4", 0x4}], 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000d019200001000dd73e2f2c41a5df4f6595700438e66c10000000010000000000000000e01000088640000"], 0x28}, 0x40)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000085000000d0000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
close(r5)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
bpf$PROG_BIND_MAP(0x23, 0xfffffffffffffffd, 0x0)

42.732857429s ago: executing program 1 (id=547):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x4c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x11}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x88}, @NFTA_CT_HELPER_NAME={0xe, 0x1, 'snmp_trap\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x1a8}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz1\x00'}]}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x22, 0x8, "3e19e61323336b20438c0e895bf73f236a9ab2e6fa25c200d2138b4483e9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0xd73a0d257e4fefcc, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000600)='%+9llu \x00'}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfffffffa, '\x00', 0x0, r7, 0x4, 0x3, 0x4}, 0x50)
sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000320001070076415382c7ffae0b"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
r8 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/4052, 0xfd4}, {&(0x7f0000002fc0)=""/4073, 0xfe9}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000001ec0)=""/240, 0xf0}], 0x5}, 0xbf9d5a5a4c2f3718)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96636ddc68af2084, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x12a24, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

27.42088287s ago: executing program 33 (id=546):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xee)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6erspan0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
socket$kcm(0x2c, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r7 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000f, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1004a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, r4, 0x0)
recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000740)=""/203, 0xcb}, 0x400120c0)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="0de548b6a3ae0e607dd40867f0a4", 0x4}], 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000d019200001000dd73e2f2c41a5df4f6595700438e66c10000000010000000000000000e01000088640000"], 0x28}, 0x40)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000085000000d0000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
close(r5)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
bpf$PROG_BIND_MAP(0x23, 0xfffffffffffffffd, 0x0)

27.36142101s ago: executing program 34 (id=547):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x4c, 0x12, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x11}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x88}, @NFTA_CT_HELPER_NAME={0xe, 0x1, 'snmp_trap\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x1a8}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz1\x00'}]}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x22, 0x8, "3e19e61323336b20438c0e895bf73f236a9ab2e6fa25c200d2138b4483e9"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0xd73a0d257e4fefcc, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}, 0x1, 0x0, 0x0, 0x54}, 0x48000)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000600)='%+9llu \x00'}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xfffffffa, '\x00', 0x0, r7, 0x4, 0x3, 0x4}, 0x50)
sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000320001070076415382c7ffae0b"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
r8 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f0000000ec0)=""/4052, 0xfd4}, {&(0x7f0000002fc0)=""/4073, 0xfe9}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f0000001ec0)=""/240, 0xf0}], 0x5}, 0xbf9d5a5a4c2f3718)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96636ddc68af2084, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x12a24, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

15.741043665s ago: executing program 3 (id=542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x14}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
close(0x3)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8eb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="61202a3a2a2072776d00637046bfaabfbd2af1ac86e6db26a1a16a15534283d9"], 0xa)
r10 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8}, 0x100081, 0xfd3b, 0x0, 0x1, 0x0, 0x445feeaf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d", @ANYRESDEC=0x0], 0xe0}], 0x1}, 0x40040)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff)
r12 = socket$kcm(0xa, 0x2, 0x73)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x541b, &(0x7f0000000240))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r13)

0s ago: executing program 35 (id=542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x14}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
close(0x3)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8eb2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="61202a3a2a2072776d00637046bfaabfbd2af1ac86e6db26a1a16a15534283d9"], 0xa)
r10 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8}, 0x100081, 0xfd3b, 0x0, 0x1, 0x0, 0x445feeaf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d", @ANYRESDEC=0x0], 0xe0}], 0x1}, 0x40040)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff)
r12 = socket$kcm(0xa, 0x2, 0x73)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x541b, &(0x7f0000000240))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r13)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18666' (ED25519) to the list of known hosts.
syzkaller login: [   56.564132][ T5822] cgroup: Unknown subsys name 'net'
[   56.649598][ T5822] cgroup: Unknown subsys name 'cpuset'
[   56.655576][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.218234][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.087389][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.090504][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.093674][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.096650][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.099709][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.119482][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.123419][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.126267][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.129072][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.129312][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.135453][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.138065][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.142221][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.148111][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.150837][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.359780][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   62.445916][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   62.524998][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   62.532773][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.536260][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.539608][ T5839] bridge_slave_0: entered allmulticast mode
[   62.543865][ T5839] bridge_slave_0: entered promiscuous mode
[   62.567579][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.570286][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.572938][ T5839] bridge_slave_1: entered allmulticast mode
[   62.575788][ T5839] bridge_slave_1: entered promiscuous mode
[   62.635724][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.638606][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.642134][ T5843] bridge_slave_0: entered allmulticast mode
[   62.645851][ T5843] bridge_slave_0: entered promiscuous mode
[   62.658908][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.661988][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.664793][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.667774][ T5843] bridge_slave_1: entered allmulticast mode
[   62.672384][ T5843] bridge_slave_1: entered promiscuous mode
[   62.681056][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.731367][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.735066][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.737560][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.739900][ T5844] bridge_slave_0: entered allmulticast mode
[   62.744554][ T5844] bridge_slave_0: entered promiscuous mode
[   62.748723][ T5839] team0: Port device team_slave_0 added
[   62.752801][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.756430][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.758796][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.761618][ T5844] bridge_slave_1: entered allmulticast mode
[   62.764234][ T5844] bridge_slave_1: entered promiscuous mode
[   62.768376][ T5839] team0: Port device team_slave_1 added
[   62.834482][ T5843] team0: Port device team_slave_0 added
[   62.840458][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.845287][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.848029][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.858252][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.865827][ T5843] team0: Port device team_slave_1 added
[   62.870296][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.875001][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.877735][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.888144][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.928293][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.931076][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.941308][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.958789][ T5844] team0: Port device team_slave_0 added
[   62.974681][ T5844] team0: Port device team_slave_1 added
[   62.977461][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.980098][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.990714][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.030938][ T5839] hsr_slave_0: entered promiscuous mode
[   63.034162][ T5839] hsr_slave_1: entered promiscuous mode
[   63.050272][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.053133][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.063262][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.092379][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.095186][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.105172][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.134260][ T5843] hsr_slave_0: entered promiscuous mode
[   63.136495][ T5843] hsr_slave_1: entered promiscuous mode
[   63.139069][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   63.141809][ T5843] Cannot create hsr debugfs directory
[   63.229757][ T5844] hsr_slave_0: entered promiscuous mode
[   63.232972][ T5844] hsr_slave_1: entered promiscuous mode
[   63.235788][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   63.237987][ T5844] Cannot create hsr debugfs directory
[   63.453336][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.467742][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.479450][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.492755][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.526303][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.536016][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.541602][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.547800][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.596166][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.602955][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.608037][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.618135][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.655494][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.680250][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   63.692532][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.695574][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.707264][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.710173][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.750989][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.804626][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   63.821052][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.824083][ T4967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.837604][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.848267][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.851468][ T4967] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.879820][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   63.905887][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.908819][ T4967] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.921118][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.923993][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.944341][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.048128][ T5839] veth0_vlan: entered promiscuous mode
[   64.063632][ T5839] veth1_vlan: entered promiscuous mode
[   64.092992][ T5839] veth0_macvtap: entered promiscuous mode
[   64.099228][ T5839] veth1_macvtap: entered promiscuous mode
[   64.131621][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.143111][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.165783][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.178419][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.183220][ T5842] Bluetooth: hci1: command tx timeout
[   64.183935][   T56] Bluetooth: hci0: command tx timeout
[   64.188099][ T5847] Bluetooth: hci2: command tx timeout
[   64.207915][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.211792][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.235528][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.259800][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.292853][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.295389][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.331580][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.335455][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.362830][ T5843] veth0_vlan: entered promiscuous mode
[   64.372099][ T5844] veth0_vlan: entered promiscuous mode
[   64.379011][ T5843] veth1_vlan: entered promiscuous mode
[   64.386846][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.395344][ T5844] veth1_vlan: entered promiscuous mode
[   64.427858][ T5844] veth0_macvtap: entered promiscuous mode
[   64.437862][ T5844] veth1_macvtap: entered promiscuous mode
[   64.458092][ T5843] veth0_macvtap: entered promiscuous mode
[   64.469280][ T5843] veth1_macvtap: entered promiscuous mode
[   64.482602][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.491123][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.508755][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.521130][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.565053][ T5909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.583657][ T5909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.585781][ T5911] netlink: 'syz.2.4': attribute type 21 has an invalid length.
[   64.592084][ T5911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4'.
[   64.596251][ T5911] netlink: 'syz.2.4': attribute type 4 has an invalid length.
[   64.598822][ T5911] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4'.
[   64.604835][ T5909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.618039][ T5909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.632172][ T5909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.635768][ T5909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.639413][ T5909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.675551][ T5909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.710775][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.713928][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.746840][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.749243][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.760276][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.765592][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.792753][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.797381][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.855640][ T5916] netlink: 'syz.2.5': attribute type 19 has an invalid length.
[   64.858941][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5'.
[   64.957242][ T5921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'.
[   64.960463][ T5921] unsupported nlmsg_type 40
[   64.972682][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   64.984563][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.101406][    C0] hrtimer: interrupt took 45751 ns
[   65.134119][ T5931] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.165016][ T5935] =======================================================
[   65.165016][ T5935] WARNING: The mand mount option has been deprecated and
[   65.165016][ T5935]          and is ignored by this kernel. Remove the mand
[   65.165016][ T5935]          option from the mount to silence this warning.
[   65.165016][ T5935] =======================================================
[   65.180463][ T5931] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   65.228853][ T5937] netlink: 'syz.1.10': attribute type 21 has an invalid length.
[   65.241641][ T5937] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10'.
[   65.316166][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.376254][ T5947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'.
[   65.397037][ T5952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'.
[   65.400601][ T5952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'.
[   65.719020][ T5973] netlink: 'syz.0.22': attribute type 4 has an invalid length.
[   66.052467][ T5985] syzkaller0: entered promiscuous mode
[   66.054418][ T5985] syzkaller0: entered allmulticast mode
[   66.263421][ T5847] Bluetooth: hci2: command tx timeout
[   66.263463][   T56] Bluetooth: hci0: command tx timeout
[   66.265294][ T5842] Bluetooth: hci1: command tx timeout
[   66.918778][ T6006] netlink: 'syz.1.31': attribute type 21 has an invalid length.
[   67.155572][ T5847] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   67.170076][ T6016] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[   67.177240][ T6018] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   68.343161][ T5842] Bluetooth: hci2: command tx timeout
[   68.343257][   T56] Bluetooth: hci1: command tx timeout
[   68.345524][ T5847] Bluetooth: hci0: command tx timeout
[   69.162613][ T6036] netlink: 'syz.1.42': attribute type 10 has an invalid length.
[   70.431520][ T5847] Bluetooth: hci1: command tx timeout
[   70.805564][   T56] Bluetooth: hci2: command tx timeout
[   70.807309][ T5847] Bluetooth: hci0: command tx timeout
[   71.421889][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1030585541 wd_nsec: 1030585644
[   71.757773][ T6051] __nla_validate_parse: 39 callbacks suppressed
[   71.757783][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   71.815624][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   72.222020][ T6070] Zero length message leads to an empty skb
[   72.777391][ T6073] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.51'.
[   73.434661][ T6095] netlink: 'syz.2.57': attribute type 39 has an invalid length.
[   73.455174][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.56'.
[   73.458841][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'.
[   73.468425][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   73.469537][ T6086] syz.0.54 (6086) used greatest stack depth: 19832 bytes left
[   73.744400][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   73.750087][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   74.878600][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   75.173116][ T6143] delete_channel: no stack
[   77.985412][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[   77.988163][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[   82.069854][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5616779674 wd_nsec: 5616779821
[   84.489001][ T6167] pim6reg1: entered promiscuous mode
[   84.492625][ T6167] pim6reg1: entered allmulticast mode
[   84.653657][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[   84.656782][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[   84.730865][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[   84.739570][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[   84.779791][ T6185] netlink: 'syz.2.88': attribute type 10 has an invalid length.
[   84.788451][ T6185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.792551][ T6185] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.815501][ T6185] syz.2.88 (6185) used greatest stack depth: 19808 bytes left
[   85.999924][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'.
[   86.028100][ T6240] netlink: 288 bytes leftover after parsing attributes in process `syz.0.103'.
[   86.061688][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'.
[   86.200228][ T6243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.104'.
[   86.385371][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'.
[   86.822767][    T9] cfg80211: failed to load regulatory.db
[   86.932601][ T6270] netlink: 56 bytes leftover after parsing attributes in process `syz.2.112'.
[   87.771009][ T6297] netlink: 'syz.1.117': attribute type 21 has an invalid length.
[   87.775574][ T6297] netlink: 'syz.1.117': attribute type 6 has an invalid length.
[   88.320661][ T6360] Driver unsupported XDP return value 0 on prog  (id 92) dev N/A, expect packet loss!
[   88.709309][ T6411] netlink: 'syz.1.132': attribute type 15 has an invalid length.
[   88.724695][ T6412] netlink: 'syz.1.132': attribute type 13 has an invalid length.
[   88.727437][ T6412] netlink: 'syz.1.132': attribute type 12 has an invalid length.
[   88.914682][ T6426] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   89.134736][ T6434] netlink: 'syz.2.137': attribute type 61 has an invalid length.
[   89.179056][ T6434] netlink: 'syz.2.137': attribute type 28 has an invalid length.
[   89.188567][ T6434] netlink: 'syz.2.137': attribute type 29 has an invalid length.
[   89.944288][ T6441] __nla_validate_parse: 4 callbacks suppressed
[   89.944345][ T6441] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.140'.
[   89.968713][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'.
[   89.976339][ T6454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.141'.
[   89.979926][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'.
[   90.087884][ T6457] netlink: 'syz.2.143': attribute type 6 has an invalid length.
[   90.215598][ T6465] netlink: 64 bytes leftover after parsing attributes in process `syz.0.147'.
[   90.230081][ T6465] sock: sock_set_timeout: `syz.0.147' (pid 6465) tries to set negative timeout
[   90.236966][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   90.239865][ T6465] netlink: 'syz.0.147': attribute type 3 has an invalid length.
[   90.275334][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'.
[   90.279382][ T6467] netlink: 60 bytes leftover after parsing attributes in process `syz.2.148'.
[   90.440601][ T6472] netlink: 'syz.0.149': attribute type 11 has an invalid length.
[   90.443167][ T6472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.149'.
[   90.498381][ T6477] netlink: 64 bytes leftover after parsing attributes in process `syz.0.150'.
[   90.644850][ T6477] netlink: 'syz.0.150': attribute type 4 has an invalid length.
[   90.719438][ T6479] syzkaller0: entered promiscuous mode
[   90.726010][ T6479] syzkaller0: entered allmulticast mode
[   93.454883][ T6511] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   93.464731][ T6511] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   93.474661][ T6515] netlink: 'syz.1.164': attribute type 23 has an invalid length.
[   95.318186][ T6583] : entered promiscuous mode
[   95.470298][ T6545] syz.0.169 (6545) used greatest stack depth: 19616 bytes left
[   99.326680][ T6609] __nla_validate_parse: 7 callbacks suppressed
[   99.326691][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[  100.473490][ T6646] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  100.614406][ T6639] netlink: 'syz.0.198': attribute type 6 has an invalid length.
[  100.620908][ T6639] netlink: 168 bytes leftover after parsing attributes in process `syz.0.198'.
[  103.385916][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  103.424946][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'.
[  103.541496][ T6678] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[  103.795344][ T6679] netlink: 830 bytes leftover after parsing attributes in process `syz.0.202'.
[  103.912367][ T6695] netlink: 'syz.0.212': attribute type 21 has an invalid length.
[  103.914823][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.212'.
[  103.924269][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[  105.147878][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'.
[  105.382637][ T6731] netlink: 830 bytes leftover after parsing attributes in process `syz.1.225'.
[  105.387960][ T6731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.225'.
[  105.467980][ T6734] syz.1.226: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  105.474997][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) 
[  105.475027][ T6734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.475035][ T6734] Call Trace:
[  105.475040][ T6734]  <TASK>
[  105.475047][ T6734]  dump_stack_lvl+0x189/0x250
[  105.475068][ T6734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.475083][ T6734]  ? __pfx__printk+0x10/0x10
[  105.475102][ T6734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.475116][ T6734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.475129][ T6734]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  105.475143][ T6734]  warn_alloc+0x214/0x310
[  105.475161][ T6734]  ? __pfx_warn_alloc+0x10/0x10
[  105.475178][ T6734]  ? kasan_save_track+0x4f/0x80
[  105.475190][ T6734]  ? kasan_save_track+0x3e/0x80
[  105.475201][ T6734]  ? __kasan_kmalloc+0x93/0xb0
[  105.475213][ T6734]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  105.475225][ T6734]  ? xskq_create+0x56/0x170
[  105.475240][ T6734]  ? xsk_setsockopt+0x57b/0x8d0
[  105.475253][ T6734]  ? do_sock_setsockopt+0x17c/0x1b0
[  105.475268][ T6734]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  105.475279][ T6734]  ? do_syscall_64+0xfa/0xf80
[  105.475293][ T6734]  __vmalloc_node_range_noprof+0x134/0x16a0
[  105.475322][ T6734]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  105.475337][ T6734]  ? __kasan_kmalloc+0x93/0xb0
[  105.475352][ T6734]  vmalloc_user_noprof+0xad/0xf0
[  105.475364][ T6734]  ? xskq_create+0xbf/0x170
[  105.475378][ T6734]  xskq_create+0xbf/0x170
[  105.475392][ T6734]  xsk_init_queue+0xb0/0x110
[  105.475408][ T6734]  xsk_setsockopt+0x57b/0x8d0
[  105.475423][ T6734]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.475438][ T6734]  ? __pfx_aa_sk_perm+0x10/0x10
[  105.475454][ T6734]  ? aa_sock_opt_perm+0xff/0x1a0
[  105.475469][ T6734]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  105.475479][ T6734]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.475494][ T6734]  do_sock_setsockopt+0x17c/0x1b0
[  105.475509][ T6734]  __x64_sys_setsockopt+0x13f/0x1b0
[  105.475523][ T6734]  do_syscall_64+0xfa/0xf80
[  105.475556][ T6734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.475569][ T6734]  ? exc_page_fault+0xab/0x100
[  105.475590][ T6734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.475601][ T6734] RIP: 0033:0x7f8b0cd8f7c9
[  105.475613][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.475622][ T6734] RSP: 002b:00007f8b0db3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  105.475636][ T6734] RAX: ffffffffffffffda RBX: 00007f8b0cfe5fa0 RCX: 00007f8b0cd8f7c9
[  105.475644][ T6734] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  105.475652][ T6734] RBP: 00007f8b0cdf297f R08: 0000000000000004 R09: 0000000000000000
[  105.475666][ T6734] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  105.475671][ T6734] R13: 00007f8b0cfe6038 R14: 00007f8b0cfe5fa0 R15: 00007ffffb423a58
[  105.475686][ T6734]  </TASK>
[  105.475690][ T6734] Mem-Info:
[  105.571913][ T6734] active_anon:5171 inactive_anon:0 isolated_anon:0
[  105.571913][ T6734]  active_file:13251 inactive_file:38274 isolated_file:0
[  105.571913][ T6734]  unevictable:1768 dirty:124 writeback:0
[  105.571913][ T6734]  slab_reclaimable:10012 slab_unreclaimable:81681
[  105.571913][ T6734]  mapped:18097 shmem:2435 pagetables:897
[  105.571913][ T6734]  sec_pagetables:0 bounce:0
[  105.571913][ T6734]  kernel_misc_reclaimable:0
[  105.571913][ T6734]  free:1130689 free_pcp:24468 free_cma:0
[  105.589962][ T6734] Node 0 active_anon:9868kB inactive_anon:0kB active_file:29796kB inactive_file:131512kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44904kB dirty:276kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4176kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.603072][ T6734] Node 1 active_anon:10816kB inactive_anon:0kB active_file:23208kB inactive_file:21584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27484kB dirty:220kB writeback:0kB shmem:5104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8296kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.615388][ T6734] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  105.626900][ T6734] lowmem_reserve[]: 0 1593 2125 2125 2125
[  105.629219][ T6734] Node 0 DMA32 free:1427436kB boost:0kB min:25116kB low:31392kB high:37668kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:24128kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1632052kB mlocked:0kB bounce:0kB free_pcp:53144kB local_pcp:41768kB free_cma:0kB
[  105.641640][ T6734] lowmem_reserve[]: 0 0 531 531 531
[  105.643727][ T6734] Node 0 Normal free:19268kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9736kB inactive_anon:0kB active_file:5668kB inactive_file:131512kB unevictable:3536kB writepending:276kB zspages:0kB present:1572868kB managed:544388kB mlocked:0kB bounce:0kB free_pcp:6400kB local_pcp:4048kB free_cma:0kB
[  105.656105][ T6734] lowmem_reserve[]: 0 0 0 0 0
[  105.661288][ T6734] Node 1 Normal free:3060756kB boost:0kB min:56236kB low:70292kB high:84348kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10788kB inactive_anon:0kB active_file:23208kB inactive_file:21584kB unevictable:3536kB writepending:224kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:38228kB local_pcp:27564kB free_cma:0kB
[  105.683395][ T6734] lowmem_reserve[]: 0 0 0 0 0
[  105.685415][ T6734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  105.701843][ T6734] Node 0 DMA32: 255*4kB (UM) 196*8kB (UME) 193*16kB (UM) 162*32kB (UM) 118*64kB (UM) 102*128kB (UM) 17*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 5*2048kB (UME) 335*4096kB (M) = 1427436kB
[  105.708945][ T6734] Node 0 Normal: 169*4kB (UE) 68*8kB (UE) 28*16kB (UME) 118*32kB (UM) 148*64kB (UME) 26*128kB (UM) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 19268kB
[  105.715430][ T6734] Node 1 Normal: 11*4kB (U) 3*8kB (UM) 3*16kB (UME) 679*32kB (UE) 299*64kB (UM) 118*128kB (UME) 17*256kB (UME) 4*512kB (UM) 2*1024kB (M) 3*2048kB (M) 730*4096kB (M) = 3060756kB
[  105.741140][ T6734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.745431][ T6734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.748444][ T6734] 53962 total pagecache pages
[  105.750764][ T6734] 0 pages in swap cache
[  105.752304][ T6734] Free swap  = 124996kB
[  105.753840][ T6734] Total swap = 124996kB
[  105.755212][ T6734] 1834877 pages RAM
[  105.761263][ T6734] 0 pages HighMem/MovableOnly
[  105.762744][ T6734] 388254 pages reserved
[  105.764027][ T6734] 0 pages cma reserved
[  105.806317][ T6740] netlink: 168 bytes leftover after parsing attributes in process `syz.2.229'.
[  105.857659][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[  105.862575][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[  106.037366][ T6747] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[  106.326261][ T6756] netlink: 'syz.2.234': attribute type 10 has an invalid length.
[  106.518856][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[  107.052484][ T6795] netlink: 'syz.0.238': attribute type 10 has an invalid length.
[  107.055872][ T6795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'.
[  107.059858][ T6795] ipvlan1: entered promiscuous mode
[  107.064002][ T6795] ipvlan1: entered allmulticast mode
[  107.069064][ T6795] veth0_vlan: entered allmulticast mode
[  107.080036][ T6795] bridge0: port 3(ipvlan1) entered blocking state
[  107.082551][ T6795] bridge0: port 3(ipvlan1) entered disabled state
[  107.086488][ T6795] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  107.163766][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.240'.
[  107.642725][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.248'.
[  107.844331][ T6871] 2: renamed from team_slave_1 (while UP)
[  108.772217][ T6880] nbd: illegal input index 895345970
[  108.782999][ T6878] raw_sendmsg: syz.1.257 forgot to set AF_INET. Fix it!
[  108.813221][ T6878] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[  108.881553][ T6883] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[  108.986878][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.077539][ T6878] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  109.138052][ T6883] batadv0: entered promiscuous mode
[  109.140369][ T6883] batadv0: entered allmulticast mode
[  109.144333][ T6883] bond0: (slave batadv0): Releasing backup interface
[  109.152319][ T6883] bridge0: port 3(batadv0) entered blocking state
[  109.154578][ T6883] bridge0: port 3(batadv0) entered disabled state
[  109.611662][ T5909] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  109.615534][ T5909] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  109.744193][ T6915] openvswitch: netlink: Flow key attribute not present in set flow.
[  109.860314][ T6917] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  120.119603][ T6926] netlink: 'syz.0.269': attribute type 16 has an invalid length.
[  120.122244][ T6926] netlink: 'syz.0.269': attribute type 17 has an invalid length.
[  120.765037][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.905549][ T6933] __nla_validate_parse: 10 callbacks suppressed
[  120.905560][ T6933] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.272'.
[  120.934877][ T6935] netlink: 'syz.2.273': attribute type 4 has an invalid length.
[  120.937371][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[  120.956563][ T6935] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.273'.
[  121.102692][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.275'.
[  122.612451][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.282'.
[  122.638843][ T6974] netlink: 830 bytes leftover after parsing attributes in process `syz.0.282'.
[  122.643868][ T6974] bond_slave_0: entered promiscuous mode
[  122.646404][ T6974] bond_slave_1: entered promiscuous mode
[  122.656529][ T6974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'.
[  122.709397][ T6976] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.282'.
[  123.120300][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.124183][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.127472][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.130714][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.133957][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.137404][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  123.140626][ T6984] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[  124.058187][ T7029] netlink: 64 bytes leftover after parsing attributes in process `syz.1.299'.
[  124.135009][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.302'.
[  126.149263][ T7098] __nla_validate_parse: 69 callbacks suppressed
[  126.149274][ T7098] netlink: 72 bytes leftover after parsing attributes in process `syz.0.317'.
[  126.154605][ T7098] netlink: 72 bytes leftover after parsing attributes in process `syz.0.317'.
[  126.196119][ T7101] veth1_macvtap: left promiscuous mode
[  126.346067][ T7106] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.319'.
[  126.362603][ T7103] infiniband syz2: set active
[  126.364638][ T7103] infiniband syz2: added team0
[  126.449644][ T7103] RDS/IB: syz2: added
[  126.457200][ T7103] smc: adding ib device syz2 with port count 1
[  126.472806][ T7103] smc:    ib device syz2 port 1 has no pnetid
[  126.612172][ T7114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.322'.
[  126.615199][ T7114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.322'.
[  126.618065][ T7114] nbd: illegal input index -67109120
[  127.243618][ T7118] validate_nla: 37 callbacks suppressed
[  127.243630][ T7118] netlink: 'syz.2.323': attribute type 23 has an invalid length.
[  127.355837][ T7120] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.324'.
[  127.471696][ T7103] syz.0.319 (7103) used greatest stack depth: 19272 bytes left
[  127.494897][ T7125] : entered promiscuous mode
[  127.536678][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'.
[  130.874727][ T7151] netlink: 'syz.0.335': attribute type 4 has an invalid length.
[  130.877181][ T7151] netlink: 124 bytes leftover after parsing attributes in process `syz.0.335'.
[  130.920690][ T7151] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  130.982983][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'.
[  130.987445][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.337'.
[  131.276781][ T7172] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[  131.662370][ T7185] __nla_validate_parse: 1 callbacks suppressed
[  131.662385][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'.
[  131.786253][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[  131.819996][ T7190] bpf: Bad value for 'gid'
[  131.926448][ T7202] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.352'.
[  131.932304][ T7202] netlink: 'syz.1.352': attribute type 9 has an invalid length.
[  131.935549][ T7202] netlink: 'syz.1.352': attribute type 11 has an invalid length.
[  131.938646][ T7202] netlink: 'syz.1.352': attribute type 12 has an invalid length.
[  131.945871][ T7202] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.352'.
[  132.054268][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'.
[  132.058322][ T7214] D`: renamed from hsr_slave_1 (while UP)
[  133.488541][ T7250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.367'.
[  133.489970][ T7248] netlink: 'syz.1.366': attribute type 9 has an invalid length.
[  133.546851][ T7251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[  133.550826][ T7250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'.
[  133.619404][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'.
[  133.624530][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.370'.
[  134.018899][ T7263] netlink: 'syz.1.373': attribute type 7 has an invalid length.
[  134.039431][ T7263] netlink: 'syz.1.373': attribute type 9 has an invalid length.
[  134.042338][ T7263] netlink: 'syz.1.373': attribute type 11 has an invalid length.
[  134.044743][ T7263] netlink: 'syz.1.373': attribute type 12 has an invalid length.
[  134.065071][ T7268] netlink: 'syz.0.374': attribute type 10 has an invalid length.
[  134.071464][ T7268] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  134.094545][ T7271] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  134.112920][ T7273] netlink: 'syz.0.376': attribute type 33 has an invalid length.
[  136.129567][ T7324] netlink: 'syz.0.389': attribute type 2 has an invalid length.
[  136.133274][ T7324] netlink: 'syz.0.389': attribute type 8 has an invalid length.
[  136.142857][ T7326] tmpfs: Unknown parameter '0xffffffffffffffff0xffffffffffffffff'
[  136.399716][ T7338] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[  136.549981][ T7349] syzkaller0: entered promiscuous mode
[  136.555047][ T7349] syzkaller0: entered allmulticast mode
[  137.547756][ T7361] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  137.804855][ T7378] __nla_validate_parse: 14 callbacks suppressed
[  137.804912][ T7378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.404'.
[  138.010787][ T7378] batman_adv: batadv0: Adding interface: virt_wifi0
[  138.013498][ T7378] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  138.026334][ T7378] batman_adv: batadv0: Interface activated: virt_wifi0
[  138.048893][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  138.050940][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  138.056897][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'.
[  138.064310][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'.
[  138.170902][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'.
[  139.973919][ T7422] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.413'.
[  139.979055][ T7422] bridge: RTM_NEWNEIGH with invalid state 0x1d25
[  140.218108][ T7431] netlink: 956 bytes leftover after parsing attributes in process `syz.0.416'.
[  140.227237][ T7431] netlink: 1 bytes leftover after parsing attributes in process `syz.0.416'.
[  140.449239][ T7438] validate_nla: 4 callbacks suppressed
[  140.449256][ T7438] netlink: 'syz.2.419': attribute type 39 has an invalid length.
[  140.463231][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.067326][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.143165][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'.
[  141.147731][ T7452] syz.0.425 uses obsolete (PF_INET,SOCK_PACKET)
[  141.201523][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.332480][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.352823][ T7458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.426'.
[  141.356769][ T7456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.426'.
[  141.377941][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  141.383770][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.387407][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.391774][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.397637][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  141.426419][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.575069][ T5909] bridge_slave_1: left allmulticast mode
[  141.591379][ T5909] bridge_slave_1: left promiscuous mode
[  141.597069][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.655951][ T5909] bridge_slave_0: left allmulticast mode
[  141.670116][ T5909] bridge_slave_0: left promiscuous mode
[  141.672758][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.149690][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.157147][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.157592][ T7480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.167309][ T7482] openvswitch: netlink: Key type 317 is out of range max 32
[  142.171374][ T5909] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  142.178752][ T5909] bond0 (unregistering): Released all slaves
[  142.380822][ T7459] chnl_net:caif_netlink_parms(): no params data found
[  142.550223][ T7499] netlink: 'syz.1.436': attribute type 29 has an invalid length.
[  142.608884][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.612859][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.616930][ T7459] bridge_slave_0: entered allmulticast mode
[  142.627533][ T7459] bridge_slave_0: entered promiscuous mode
[  142.630634][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.633939][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.636365][ T7459] bridge_slave_1: entered allmulticast mode
[  142.640595][ T7459] bridge_slave_1: entered promiscuous mode
[  142.714749][ T5909] hsr_slave_0: left promiscuous mode
[  142.718137][ T5909] D`: left promiscuous mode
[  142.721095][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.729937][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.741498][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.746378][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.749831][ T5909] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  142.752962][ T5909] batman_adv: batadv0: Removing interface: virt_wifi0
[  142.763796][ T5909] veth1_macvtap: left promiscuous mode
[  142.765728][ T5909] veth0_macvtap: left promiscuous mode
[  142.767509][ T5909] veth1_vlan: left promiscuous mode
[  142.769296][ T5909] veth0_vlan: left promiscuous mode
[  143.044461][ T5909] team0 (unregistering): Port device team_slave_1 removed
[  143.067560][ T5909] team0 (unregistering): Port device team_slave_0 removed
[  143.315300][ T7505] tap0: tun_chr_ioctl cmd 1074025677
[  143.317833][ T7505] tap0: linktype set to 823
[  143.322473][ T7524] __nla_validate_parse: 4 callbacks suppressed
[  143.322493][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'.
[  143.332640][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.339716][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.343189][ T7519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'.
[  143.379882][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.441'.
[  143.392873][ T7459] team0: Port device team_slave_0 added
[  143.399692][ T7459] team0: Port device team_slave_1 added
[  143.432102][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.434261][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.448689][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.454300][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.456596][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.464952][   T56] Bluetooth: hci0: command tx timeout
[  143.468293][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.501669][ T7459] hsr_slave_0: entered promiscuous mode
[  143.504377][ T7459] hsr_slave_1: entered promiscuous mode
[  144.863393][ T7459] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  144.871828][ T7459] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  144.882723][ T7459] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  144.891469][ T7459] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.927081][ T7577] netlink: 80 bytes leftover after parsing attributes in process `syz.1.449'.
[  144.931112][ T7577] netlink: 80 bytes leftover after parsing attributes in process `syz.1.449'.
[  145.005606][ T7582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.449'.
[  145.011806][ T7577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.449'.
[  145.025726][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.043808][ T7459] 8021q: adding VLAN 0 to HW filter on device team0
[  145.056084][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.059223][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.079121][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.081470][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.212051][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[  145.238402][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.272870][ T7459] veth0_vlan: entered promiscuous mode
[  145.278492][ T7459] veth1_vlan: entered promiscuous mode
[  145.294658][ T7459] veth0_macvtap: entered promiscuous mode
[  145.299366][ T7459] veth1_macvtap: entered promiscuous mode
[  145.310022][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.319432][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.328938][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.332610][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.336569][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.339252][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.406901][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.410220][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.443745][ T5146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.447068][ T5146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.541391][   T56] Bluetooth: hci0: command tx timeout
[  145.728967][ T7607] netlink: 10 bytes leftover after parsing attributes in process `syz.0.452'.
[  146.010811][   T34] audit: type=1107 audit(1766175226.658:2): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  146.055450][ T7619] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  146.607807][ T7646] netlink: 'syz.2.462': attribute type 1 has an invalid length.
[  146.610244][ T7646] netlink: 'syz.2.462': attribute type 2 has an invalid length.
[  146.618228][ T7646] netlink: 'syz.2.462': attribute type 13 has an invalid length.
[  147.565135][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'.
[  147.623904][   T56] Bluetooth: hci0: command tx timeout
[  147.856963][ T7685] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  148.373707][ T7703] __nla_validate_parse: 2 callbacks suppressed
[  148.373762][ T7703] netlink: 96 bytes leftover after parsing attributes in process `syz.1.482'.
[  148.612551][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'.
[  148.619041][ T7711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'.
[  148.627314][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'.
[  148.735031][ T7717] netlink: 'syz.1.482': attribute type 2 has an invalid length.
[  148.737390][ T7717] netlink: 'syz.1.482': attribute type 1 has an invalid length.
[  148.773141][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  148.988388][ T7724] netlink: 332 bytes leftover after parsing attributes in process `syz.2.487'.
[  149.341772][ T7732] netlink: 'syz.0.491': attribute type 10 has an invalid length.
[  149.471584][ T7750] netlink: 'syz.2.493': attribute type 10 has an invalid length.
[  149.503333][ T7732] team0: Port device wlan1 added
[  149.521886][ T7750] macvlan0: entered allmulticast mode
[  149.528836][ T7750] veth1_vlan: entered allmulticast mode
[  149.531393][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.535711][ T7750] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  149.540979][ T7754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.713303][   T56] Bluetooth: hci0: command tx timeout
[  152.197409][ T7785] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.507'.
[  152.202790][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[  152.284829][ T7783] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.506'.
[  153.331873][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'.
[  153.421401][ T7814] C: renamed from team_slave_0 (while UP)
[  153.458487][ T7814] netlink: 'syz.2.513': attribute type 2 has an invalid length.
[  153.466498][ T7814] netlink: 116 bytes leftover after parsing attributes in process `syz.2.513'.
[  153.469504][ T7814] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.599414][ T7829] netlink: 188 bytes leftover after parsing attributes in process `syz.0.518'.
[  153.665030][ T7831] netlink: 731 bytes leftover after parsing attributes in process `syz.1.519'.
[  153.804067][ T7840] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.522'.
[  153.822561][ T7840] netlink: 184 bytes leftover after parsing attributes in process `syz.2.522'.
[  154.090294][ T7851] netlink: 'syz.2.526': attribute type 1 has an invalid length.
[  154.154083][ T7853] netlink: 'syz.2.527': attribute type 21 has an invalid length.
[  154.157201][ T7853] netlink: 160 bytes leftover after parsing attributes in process `syz.2.527'.
[  154.458789][ T7867] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[  154.462051][ T7867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.469512][ T7867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.508598][   T34] audit: type=1107 audit(1766175235.158:3): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  154.571396][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.534'.
[  154.576788][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.534'.
[  154.590131][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.534'.
[  169.751997][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.756128][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.759341][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.763318][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.766208][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.094769][ T7901] chnl_net:caif_netlink_parms(): no params data found
[  170.246644][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.258280][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.261353][ T7901] bridge_slave_0: entered allmulticast mode
[  170.267208][ T7901] bridge_slave_0: entered promiscuous mode
[  170.285112][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.287647][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.290601][ T7901] bridge_slave_1: entered allmulticast mode
[  170.295546][ T7901] bridge_slave_1: entered promiscuous mode
[  170.327152][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.336845][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.377628][ T7901] team0: Port device team_slave_0 added
[  170.380850][ T7901] team0: Port device team_slave_1 added
[  170.397888][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.400071][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.409013][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.413985][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.416155][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.423928][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.482326][ T7901] hsr_slave_0: entered promiscuous mode
[  170.522266][ T7901] hsr_slave_1: entered promiscuous mode
[  170.525203][ T7901] debugfs: 'hsr0' already exists in 'hsr'
[  170.527149][ T7901] Cannot create hsr debugfs directory
[  172.601445][ T5847] Bluetooth: hci3: command tx timeout
[  174.661543][ T5847] Bluetooth: hci3: command tx timeout
[  176.743006][ T5847] Bluetooth: hci3: command tx timeout
[  178.821579][ T5847] Bluetooth: hci3: command tx timeout
[  186.191366][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  186.378824][   T56] Bluetooth: hci2: command 0x0406 tx timeout
[  186.538891][ T7940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.547'.
[  186.704957][ T7901] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  186.842663][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.846812][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.850235][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.854318][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  186.858251][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  186.911967][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  186.916665][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  186.920432][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  186.924446][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.927769][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.163622][ T7901] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.601552][ T7901] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.715145][ T7901] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.901439][ T5847] Bluetooth: hci4: command tx timeout
[  188.981929][ T5847] Bluetooth: hci5: command tx timeout
[  189.363120][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.373451][ T7901] 8021q: adding VLAN 0 to HW filter on device team0
[  189.384077][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.386309][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.400097][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.402399][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.766025][ T7946] chnl_net:caif_netlink_parms(): no params data found
[  189.897612][ T7948] chnl_net:caif_netlink_parms(): no params data found
[  189.967160][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.970660][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.974060][ T7946] bridge_slave_0: entered allmulticast mode
[  189.978055][ T7946] bridge_slave_0: entered promiscuous mode
[  190.000078][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.003484][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.006455][ T7946] bridge_slave_1: entered allmulticast mode
[  190.010317][ T7946] bridge_slave_1: entered promiscuous mode
[  190.078522][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.148359][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.165585][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.170090][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.173985][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.176983][ T7948] bridge_slave_0: entered allmulticast mode
[  190.180745][ T7948] bridge_slave_0: entered promiscuous mode
[  190.208580][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.212654][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.215600][ T7948] bridge_slave_1: entered allmulticast mode
[  190.219503][ T7948] bridge_slave_1: entered promiscuous mode
[  190.252202][ T7946] team0: Port device team_slave_0 added
[  190.258232][ T7946] team0: Port device team_slave_1 added
[  190.303867][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.325592][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.328472][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.339577][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.352750][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.380056][ T7948] team0: Port device team_slave_0 added
[  190.385493][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.388411][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.399614][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.427374][ T7948] team0: Port device team_slave_1 added
[  190.513373][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.515573][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.531293][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.536187][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.538345][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.546301][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.576156][ T7946] hsr_slave_0: entered promiscuous mode
[  190.579248][ T7946] hsr_slave_1: entered promiscuous mode
[  190.582227][ T7946] debugfs: 'hsr0' already exists in 'hsr'
[  190.584555][ T7946] Cannot create hsr debugfs directory
[  190.638255][ T7901] veth0_vlan: entered promiscuous mode
[  190.697578][ T7948] hsr_slave_0: entered promiscuous mode
[  190.700779][ T7948] hsr_slave_1: entered promiscuous mode
[  190.704311][ T7948] debugfs: 'hsr0' already exists in 'hsr'
[  190.706664][ T7948] Cannot create hsr debugfs directory
[  190.745251][ T7901] veth1_vlan: entered promiscuous mode
[  190.981598][ T5847] Bluetooth: hci4: command tx timeout
[  191.061330][ T5847] Bluetooth: hci5: command tx timeout
[  191.974419][ T7901] veth0_macvtap: entered promiscuous mode
[  191.994836][ T7901] veth1_macvtap: entered promiscuous mode
[  192.004880][ T7946] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  192.391110][ T7946] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  192.483581][ T7946] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  192.553194][ T7946] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  192.613040][ T7948] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.637215][ T7948] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.689127][ T7948] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.780389][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.783179][ T7948] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.795424][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.811765][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.820752][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.826816][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.829517][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.061478][ T5842] Bluetooth: hci4: command tx timeout
[  193.146760][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.164875][ T7946] 8021q: adding VLAN 0 to HW filter on device team0
[  193.199397][ T7946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  193.204315][ T7946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.227733][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.230619][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.236767][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.239718][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.281436][ T5847] Bluetooth: hci5: command tx timeout
[  194.854220][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.869572][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.913479][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.915952][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.931814][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.955050][ T7948] 8021q: adding VLAN 0 to HW filter on device team0
[  194.967398][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.969582][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.976536][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.993228][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.995462][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.164988][ T7946] veth0_vlan: entered promiscuous mode
[  195.170282][ T7946] veth1_vlan: entered promiscuous mode
[  195.172152][ T5847] Bluetooth: hci4: command tx timeout
[  195.190713][ T7946] veth0_macvtap: entered promiscuous mode
[  195.195296][ T7946] veth1_macvtap: entered promiscuous mode
[  195.207978][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.215491][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.221874][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.227608][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.230278][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.305344][ T5847] Bluetooth: hci5: command tx timeout
[  198.107687][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.799608][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.484742][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  199.487401][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  214.473078][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.477809][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.483569][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.488550][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.504876][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.581325][ T5842] Bluetooth: hci1: command tx timeout
[  218.662146][ T5842] Bluetooth: hci1: command tx timeout
[  220.741478][ T5842] Bluetooth: hci1: command tx timeout
[  222.821813][ T5842] Bluetooth: hci1: command tx timeout
[  248.061747][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.065090][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.068088][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.071689][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.074587][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.128160][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.139215][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.143070][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.147366][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.150508][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.101362][ T5842] Bluetooth: hci2: command tx timeout
[  250.181364][ T5842] Bluetooth: hci6: command tx timeout
[  251.526409][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 52421643250 wd_nsec: 52421631257
[  252.181405][ T5842] Bluetooth: hci2: command tx timeout
[  252.261351][ T5842] Bluetooth: hci6: command tx timeout
[  254.261229][ T5842] Bluetooth: hci2: command tx timeout
[  254.351671][ T5842] Bluetooth: hci6: command tx timeout
[  256.341343][ T5842] Bluetooth: hci2: command tx timeout
[  256.471265][ T5842] Bluetooth: hci6: command tx timeout
[  260.984139][ T1367] ieee802154 phy0 wpan0: encryption failed: -22
[  260.986723][ T1367] ieee802154 phy1 wpan1: encryption failed: -22
[  275.252021][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.255525][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.258368][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.262639][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.265468][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  277.301290][ T5847] Bluetooth: hci7: command tx timeout
[  279.381331][ T5847] Bluetooth: hci7: command tx timeout
[  281.462754][ T5847] Bluetooth: hci7: command tx timeout
[  283.541282][ T5847] Bluetooth: hci7: command tx timeout
[  293.701291][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  303.901148][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  303.903849][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P7999/1:b..l
[  303.907337][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=16285, q=2364 ncpus=2)
[  303.910331][    C0] task:kworker/0:9     state:R  running task     stack:26080 pid:7999  tgid:7999  ppid:2      task_flags:0x4208060 flags:0x00080000
[  303.916104][    C0] Workqueue: events free_obj_work
[  303.917713][    C0] Call Trace:
[  303.918794][    C0]  <TASK>
[  303.919766][    C0]  __schedule+0x14bc/0x5000
[  303.921265][    C0]  ? __pfx_trace_call_bpf+0x10/0x10
[  303.922838][    C0]  ? __pfx___schedule+0x10/0x10
[  303.924384][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.926035][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.927658][    C0]  preempt_schedule_notrace+0xd1/0x110
[  303.929375][    C0]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  303.931300][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  303.932921][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.934588][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.936152][    C0]  preempt_schedule_notrace_thunk+0x16/0x30
[  303.938004][    C0]  ? 0xffffffffa0000808
[  303.939394][    C0]  lock_release+0x3a1/0x3b0
[  303.940846][    C0]  ? deref_stack_reg+0x19f/0x230
[  303.942571][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.944276][    C0]  unwind_next_frame+0x1ab1/0x23d0
[  303.945887][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  303.947461][    C0]  ? kthread+0x711/0x8a0
[  303.948819][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  303.950760][    C0]  arch_stack_walk+0x11c/0x150
[  303.952288][    C0]  ? ret_from_fork+0x599/0xb30
[  303.953807][    C0]  stack_trace_save+0x9c/0xe0
[  303.955358][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  303.957422][    C0]  ? stack_depot_save_flags+0x40/0x850
[  303.959193][    C0]  kasan_save_track+0x3e/0x80
[  303.960680][    C0]  ? kasan_save_track+0x3e/0x80
[  303.962179][    C0]  ? kasan_save_free_info+0x46/0x50
[  303.963831][    C0]  ? __kasan_slab_free+0x5c/0x80
[  303.965364][    C0]  ? kmem_cache_free+0x197/0x620
[  303.966929][    C0]  ? free_obj_work+0x377/0x4a0
[  303.968462][    C0]  ? process_scheduled_works+0xad1/0x1770
[  303.970274][    C0]  ? worker_thread+0x8a0/0xda0
[  303.971779][    C0]  ? kthread+0x711/0x8a0
[  303.973195][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  303.974841][    C0]  kasan_save_free_info+0x46/0x50
[  303.976422][    C0]  __kasan_slab_free+0x5c/0x80
[  303.977918][    C0]  kmem_cache_free+0x197/0x620
[  303.979415][    C0]  ? free_obj_work+0x377/0x4a0
[  303.980927][    C0]  ? __pfx_perf_trace_lock+0x10/0x10
[  303.982590][    C0]  free_obj_work+0x377/0x4a0
[  303.984055][    C0]  ? __pfx_free_obj_work+0x10/0x10
[  303.985656][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  303.987254][    C0]  ? process_scheduled_works+0x9ef/0x1770
[  303.989032][    C0]  ? process_scheduled_works+0x9ef/0x1770
[  303.990828][    C0]  process_scheduled_works+0xad1/0x1770
[  303.992624][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  303.994558][    C0]  worker_thread+0x8a0/0xda0
[  303.996021][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  303.998066][    C0]  ? __kthread_parkme+0x7b/0x200
[  303.999633][    C0]  kthread+0x711/0x8a0
[  304.000928][    C0]  ? __pfx_worker_thread+0x10/0x10
[  304.002543][    C0]  ? __pfx_kthread+0x10/0x10
[  304.004008][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  304.005634][    C0]  ? lockdep_hardirqs_on+0x98/0x140
[  304.007313][    C0]  ? __pfx_kthread+0x10/0x10
[  304.008740][    C0]  ret_from_fork+0x599/0xb30
[  304.010334][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  304.012042][    C0]  ? __switch_to_asm+0x39/0x70
[  304.013591][    C0]  ? __switch_to_asm+0x33/0x70
[  304.015184][    C0]  ? __pfx_kthread+0x10/0x10
[  304.016649][    C0]  ret_from_fork_asm+0x1a/0x30
[  304.018516][    C0]  </TASK>
[  305.020061][    C0] sched: DL replenish lagged too much
[  308.991706][   T56] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  309.002797][   T56] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  309.005936][   T56] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  309.009223][   T56] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  309.019152][   T56] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  309.142705][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  309.146665][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  309.149522][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  309.153449][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  309.156909][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
