last executing test programs:

2m6.954215022s ago: executing program 1 (id=241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a310000000024000480100001800c000100636f756e74657200100001800c0001006e6f747261636b000900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

2m6.778396147s ago: executing program 1 (id=243):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

2m6.629127046s ago: executing program 1 (id=246):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48004)
r0 = socket$kcm(0x2, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

2m6.628856625s ago: executing program 2 (id=247):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x3fc, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

2m6.44210513s ago: executing program 1 (id=250):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

2m6.32355601s ago: executing program 1 (id=255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
close(0x3)

2m6.246391539s ago: executing program 1 (id=257):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1942}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100000000000000000000000000000000000ec8dbfd4e200003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000c00000000000000f707000000000000f0aa000000000000feffffffffffffff000050000000000004000000000000000400000000000000020000000000000008c9000088262721080000002bbd7000073500000a0000001000000000000000ff0000000200008008001600ff010000"], 0x100}, 0x1, 0x0, 0x0, 0x8880}, 0x48000)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc300000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000004000380140000001100010000000000000000000102000a02421f67d98bb86931cca62eae7a8a5656bc3e8e44283655af282a0aa536bd4a2ffa717cf4fa6d661d951c806656cc65"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0xffffffffffffffae)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="15000000040000000600"/20, @ANYRES32, @ANYBLOB="0000e81400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000200000000000000000000000000000000000000000491bf3230cae49be1f884d5a97596523b8ed8ee52460836e5a477eb1dcbc44a4977f7513ad9a416ca7bb06e1ca24093df3be5cee024d733623ad148a03a7688e994ab4d0e95e3545a077ddc20c8e391d248a9880b7130c014f483135d80c497ba12ce6764db035f8d7de869c49767fb8f7bd40aa9c68d3f927d8241c5588fc51e71f46f122570369a0dea9c9124733e00a60c7f68159efcfce6b248e25a2c14a7d0b7cc0cd11548f984b7606345d77d524ef1e433b10"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

2m6.089310394s ago: executing program 0 (id=258):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94)

2m6.0352678s ago: executing program 2 (id=259):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x80, 0x0}, 0x0)

2m6.034876087s ago: executing program 2 (id=260):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

2m6.030906257s ago: executing program 0 (id=261):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8901, &(0x7f0000000040)={r0})
close(r0)

2m5.764326312s ago: executing program 0 (id=262):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x1000, &(0x7f00000008c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, 0x90)

2m5.648300834s ago: executing program 0 (id=263):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r1}, 0x8)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

2m5.01779006s ago: executing program 2 (id=264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x80)

2m5.017350093s ago: executing program 2 (id=265):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff7fc5f603ff65ec5d67837e430478efd9022b11669623dc"], 0xfdef)

2m4.952384421s ago: executing program 2 (id=266):
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850076002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9c00, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
close(0xffffffffffffffff)

2m4.729112199s ago: executing program 0 (id=267):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff010000007110430056926529bf"], 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

2m4.678971653s ago: executing program 0 (id=268):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000003940)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000580)=""/111, 0x6f}], 0x6}, 0x10100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

1m50.666798312s ago: executing program 32 (id=257):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1942}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100000000000000000000000000000000000ec8dbfd4e200003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000c00000000000000f707000000000000f0aa000000000000feffffffffffffff000050000000000004000000000000000400000000000000020000000000000008c9000088262721080000002bbd7000073500000a0000001000000000000000ff0000000200008008001600ff010000"], 0x100}, 0x1, 0x0, 0x0, 0x8880}, 0x48000)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc300000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000004000380140000001100010000000000000000000102000a02421f67d98bb86931cca62eae7a8a5656bc3e8e44283655af282a0aa536bd4a2ffa717cf4fa6d661d951c806656cc65"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0xffffffffffffffae)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="15000000040000000600"/20, @ANYRES32, @ANYBLOB="0000e81400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000200000000000000000000000000000000000000000491bf3230cae49be1f884d5a97596523b8ed8ee52460836e5a477eb1dcbc44a4977f7513ad9a416ca7bb06e1ca24093df3be5cee024d733623ad148a03a7688e994ab4d0e95e3545a077ddc20c8e391d248a9880b7130c014f483135d80c497ba12ce6764db035f8d7de869c49767fb8f7bd40aa9c68d3f927d8241c5588fc51e71f46f122570369a0dea9c9124733e00a60c7f68159efcfce6b248e25a2c14a7d0b7cc0cd11548f984b7606345d77d524ef1e433b10"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

1m49.634335932s ago: executing program 33 (id=268):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000003940)=""/4058, 0xfda}, {&(0x7f0000002940)=""/4093, 0xffd}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000580)=""/111, 0x6f}], 0x6}, 0x10100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

1m49.424868552s ago: executing program 34 (id=266):
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850076002000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9c00, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
close(0xffffffffffffffff)

11.908185583s ago: executing program 3 (id=1251):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})

11.663292695s ago: executing program 3 (id=1252):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0)

11.50956127s ago: executing program 3 (id=1256):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015001300000008001240000080000500050002000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x40000010)

11.241080181s ago: executing program 3 (id=1260):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

822.483512ms ago: executing program 3 (id=1260):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

590.972821ms ago: executing program 3 (id=1304):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="18020000eaff000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'/12, @ANYRES32=0x0], 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000240)=r3, 0x4)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8094)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0xff09, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x2, 0xffff, 0x0, 0x80, 0x0, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000380)={r9, r8})

449.920964ms ago: executing program 5 (id=1308):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)

380.747459ms ago: executing program 5 (id=1309):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f000063dc460000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

379.998255ms ago: executing program 5 (id=1310):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ec0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/242, 0xf2}, {&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000600)=""/213, 0xd5}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000540)=""/140, 0x8c}], 0x6}, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r1 = socket$kcm(0xa, 0x1, 0x106)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
socket$kcm(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000980)={&(0x7f00000004c0)=@x25, 0x80, &(0x7f0000000740)=[{&(0x7f0000000800)="acd81e1b5139040d0b9bccad3d38d60e67c53008cd819848c74840eecaf039a03d8392267f0b4d5e872d8eaa544e2060f2b486da4d87d671e43c055453eafc6d1a485587d5d306985b49002e04be8c40bf384e572e0b908969afd00ec002dc505a3e0669410d538becad84f435395ddefcd7d89b0c535df910ea60febcb1ae9ae111b4d7717f2769a4cf58c07fce1142712a65003776468803670413536309bfb597aa988ca647d525f8cea4cec485181edd279dd35ef2ee7e0dc482799af34c91cc09a53287203c582559", 0xcb}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000000700)="eff697b0602549ef4836abb3c7738f8010e24281c27c44924dae53aa2f6f592c802e499be9c4922374d36480931ba4036ecb1c233387", 0x36}], 0x3}, 0x40018)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

259.863966ms ago: executing program 4 (id=1312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)

259.693303ms ago: executing program 4 (id=1313):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00198008000180"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)

170.386653ms ago: executing program 4 (id=1314):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

170.132265ms ago: executing program 4 (id=1315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "8faad8723e6e7fa481f44723334b061f44"}]}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x0)

90.429141ms ago: executing program 4 (id=1316):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x84, 0x4, 0x4, 0x64}, 0x50)

89.9936ms ago: executing program 4 (id=1317):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280)}, 0xe70, 0xc78, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x1, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x9)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2b, 0x1, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000025c0))
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

51.287593ms ago: executing program 5 (id=1318):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000000000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28)

215.979µs ago: executing program 5 (id=1319):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x28)

0s ago: executing program 5 (id=1320):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000000000000004d3c"], 0x18}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22921' (ED25519) to the list of known hosts.
syzkaller login: [   56.225068][ T5832] cgroup: Unknown subsys name 'net'
[   56.366426][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.371117][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.497608][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.415684][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.419664][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.423610][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.426370][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.429483][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.432131][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.436409][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.438912][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.439272][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.444547][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.511229][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.515912][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.519665][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.523434][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.526723][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.741848][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   63.910814][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.987245][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.990230][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.992643][ T5848] bridge_slave_0: entered allmulticast mode
[   63.996916][ T5848] bridge_slave_0: entered promiscuous mode
[   64.020205][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.024244][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.027266][ T5848] bridge_slave_1: entered allmulticast mode
[   64.031191][ T5848] bridge_slave_1: entered promiscuous mode
[   64.035709][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   64.116205][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.121699][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.125687][ T5847] bridge_slave_0: entered allmulticast mode
[   64.129882][ T5847] bridge_slave_0: entered promiscuous mode
[   64.136429][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.156917][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.160172][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.164914][ T5847] bridge_slave_1: entered allmulticast mode
[   64.169770][ T5847] bridge_slave_1: entered promiscuous mode
[   64.175275][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.269113][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.289397][ T5848] team0: Port device team_slave_0 added
[   64.295317][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.299175][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.302177][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.306542][ T5858] bridge_slave_0: entered allmulticast mode
[   64.310526][ T5858] bridge_slave_0: entered promiscuous mode
[   64.316946][ T5848] team0: Port device team_slave_1 added
[   64.319728][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.322752][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.326698][ T5858] bridge_slave_1: entered allmulticast mode
[   64.330639][ T5858] bridge_slave_1: entered promiscuous mode
[   64.386757][ T5847] team0: Port device team_slave_0 added
[   64.390758][ T5847] team0: Port device team_slave_1 added
[   64.449517][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.452361][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.462367][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.470413][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.479000][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.482773][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.485617][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.495076][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.500296][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.504005][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.515651][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.547053][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.549718][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.560452][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.581007][ T5858] team0: Port device team_slave_0 added
[   64.585929][ T5858] team0: Port device team_slave_1 added
[   64.670792][ T5847] hsr_slave_0: entered promiscuous mode
[   64.674058][ T5847] hsr_slave_1: entered promiscuous mode
[   64.677702][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.680174][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.689712][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.695020][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.697868][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.706519][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.713495][ T5848] hsr_slave_0: entered promiscuous mode
[   64.716283][ T5848] hsr_slave_1: entered promiscuous mode
[   64.719234][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   64.721656][ T5848] Cannot create hsr debugfs directory
[   64.848053][ T5858] hsr_slave_0: entered promiscuous mode
[   64.850996][ T5858] hsr_slave_1: entered promiscuous mode
[   64.854733][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   64.856964][ T5858] Cannot create hsr debugfs directory
[   65.100359][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.127013][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.136105][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.157787][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.209230][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.220425][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.227950][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.247568][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.297981][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.309569][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.321060][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.339394][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.422221][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.448763][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   65.467370][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.470356][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.481337][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.501345][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.504288][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.524274][   T54] Bluetooth: hci1: command tx timeout
[   65.527853][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.533868][   T54] Bluetooth: hci0: command tx timeout
[   65.555043][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.557529][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.580961][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.583922][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.595276][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.604117][   T54] Bluetooth: hci2: command tx timeout
[   65.662419][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.689467][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   65.711557][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.713975][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.747516][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.750264][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.791237][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.859227][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.878928][ T5848] veth0_vlan: entered promiscuous mode
[   65.899262][ T5848] veth1_vlan: entered promiscuous mode
[   65.956387][ T5848] veth0_macvtap: entered promiscuous mode
[   65.962142][ T5848] veth1_macvtap: entered promiscuous mode
[   65.981303][ T5847] veth0_vlan: entered promiscuous mode
[   66.010081][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.016035][ T5847] veth1_vlan: entered promiscuous mode
[   66.028733][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.037038][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.055049][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.058771][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.072136][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.077005][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.148614][ T5847] veth0_macvtap: entered promiscuous mode
[   66.168389][ T5847] veth1_macvtap: entered promiscuous mode
[   66.187801][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.192455][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.202518][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.220920][ T5858] veth0_vlan: entered promiscuous mode
[   66.229913][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.262559][ T5858] veth1_vlan: entered promiscuous mode
[   66.270380][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.277612][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.281049][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.301263][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.306902][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.311509][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.370346][ T5858] veth0_macvtap: entered promiscuous mode
[   66.400084][ T5858] veth1_macvtap: entered promiscuous mode
[   66.410226][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.458480][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.461505][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.468832][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.485059][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.533057][    C1] hrtimer: interrupt took 74604 ns
[   66.558241][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.570679][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.577703][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.585147][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.606554][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.609912][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.779878][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.782381][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.813870][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.816953][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.568201][ T5970] =======================================================
[   67.568201][ T5970] WARNING: The mand mount option has been deprecated and
[   67.568201][ T5970]          and is ignored by this kernel. Remove the mand
[   67.568201][ T5970]          option from the mount to silence this warning.
[   67.568201][ T5970] =======================================================
[   67.588342][ T5970] tmpfs: Bad value for 'gid'
[   67.590279][ T5970] tmpfs: Bad value for 'gid'
[   67.611581][   T54] Bluetooth: hci0: command tx timeout
[   67.613891][   T54] Bluetooth: hci1: command tx timeout
[   67.684084][   T54] Bluetooth: hci2: command tx timeout
[   69.145880][ T5999] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[   69.152052][ T5999] netlink: 17 bytes leftover after parsing attributes in process `syz.2.40'.
[   69.191787][ T6001] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   69.199976][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.295510][ T6007] netlink: 948 bytes leftover after parsing attributes in process `syz.0.44'.
[   69.394742][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.458652][ T6013] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   69.463575][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'.
[   69.513770][ T6009] netlink: 'syz.0.45': attribute type 39 has an invalid length.
[   69.543105][ T6009] veth0_macvtap: left promiscuous mode
[   69.683481][   T54] Bluetooth: hci0: command tx timeout
[   69.683563][ T5850] Bluetooth: hci1: command tx timeout
[   69.761063][ T6019] veth1_macvtap: left promiscuous mode
[   69.763286][ T5850] Bluetooth: hci2: command tx timeout
[   69.908109][ T6022] veth1_macvtap: entered promiscuous mode
[   69.914094][ T6022] macsec0: entered promiscuous mode
[   69.916223][ T6022] macsec0: entered allmulticast mode
[   69.918091][ T6022] veth1_macvtap: entered allmulticast mode
[   70.249983][ T6052] Illegal XDP return value 580245056 on prog  (id 15) dev N/A, expect packet loss!
[   71.288378][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.291947][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.447092][ T6086] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.80'.
[   71.490125][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'.
[   71.496095][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.81'.
[   71.541015][ T6096] Zero length message leads to an empty skb
[   71.765147][ T5850] Bluetooth: hci1: command tx timeout
[   71.775384][ T5850] Bluetooth: hci0: command tx timeout
[   71.843974][ T5850] Bluetooth: hci2: command tx timeout
[   71.889647][ T6114] netlink: 'syz.0.92': attribute type 21 has an invalid length.
[   71.892223][ T6114] netlink: 128 bytes leftover after parsing attributes in process `syz.0.92'.
[   72.024976][ T6120] warning: `syz.0.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.169112][ T6122] netlink: 26 bytes leftover after parsing attributes in process `syz.0.95'.
[   72.859338][ T6131] syz.1.97: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   72.875858][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) 
[   72.875873][ T6131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.875880][ T6131] Call Trace:
[   72.875885][ T6131]  <TASK>
[   72.875903][ T6131]  dump_stack_lvl+0x189/0x250
[   72.875924][ T6131]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.875934][ T6131]  ? __pfx__printk+0x10/0x10
[   72.875950][ T6131]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.875962][ T6131]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.875974][ T6131]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   72.875985][ T6131]  warn_alloc+0x214/0x310
[   72.875999][ T6131]  ? stack_depot_save_flags+0x41b/0x860
[   72.876030][ T6131]  ? __pfx_warn_alloc+0x10/0x10
[   72.876043][ T6131]  ? kasan_save_track+0x4f/0x80
[   72.876056][ T6131]  ? xskq_create+0x56/0x170
[   72.876067][ T6131]  ? xsk_init_queue+0xb0/0x110
[   72.876075][ T6131]  ? xsk_setsockopt+0x57b/0x8d0
[   72.876083][ T6131]  ? do_sock_setsockopt+0x17c/0x1b0
[   72.876092][ T6131]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   72.876099][ T6131]  ? do_syscall_64+0xfa/0x3b0
[   72.876111][ T6131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.876128][ T6131]  __vmalloc_node_range_noprof+0x125/0x12f0
[   72.876161][ T6131]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   72.876181][ T6131]  ? __kasan_kmalloc+0x93/0xb0
[   72.876196][ T6131]  vmalloc_user_noprof+0xad/0xf0
[   72.876207][ T6131]  ? xskq_create+0xbf/0x170
[   72.876217][ T6131]  xskq_create+0xbf/0x170
[   72.876228][ T6131]  xsk_init_queue+0xb0/0x110
[   72.876239][ T6131]  xsk_setsockopt+0x57b/0x8d0
[   72.876249][ T6131]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.876258][ T6131]  ? __pfx_aa_sk_perm+0x10/0x10
[   72.876271][ T6131]  ? __fget_files+0x2a/0x420
[   72.876279][ T6131]  ? aa_sock_opt_perm+0xff/0x1b0
[   72.876287][ T6131]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   72.876296][ T6131]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.876306][ T6131]  do_sock_setsockopt+0x17c/0x1b0
[   72.876316][ T6131]  __x64_sys_setsockopt+0x13f/0x1b0
[   72.876325][ T6131]  do_syscall_64+0xfa/0x3b0
[   72.876337][ T6131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.876344][ T6131]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   72.876354][ T6131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.876362][ T6131] RIP: 0033:0x7efd8ff8ebe9
[   72.876371][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.876378][ T6131] RSP: 002b:00007efd90e43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   72.876387][ T6131] RAX: ffffffffffffffda RBX: 00007efd901c6090 RCX: 00007efd8ff8ebe9
[   72.876393][ T6131] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[   72.876399][ T6131] RBP: 00007efd90011e19 R08: 0000000000000004 R09: 0000000000000000
[   72.876405][ T6131] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   72.876411][ T6131] R13: 00007efd901c6128 R14: 00007efd901c6090 R15: 00007ffd9f419728
[   72.876424][ T6131]  </TASK>
[   72.876858][ T6131] Mem-Info:
[   73.003178][ T6131] active_anon:5614 inactive_anon:0 isolated_anon:0
[   73.003178][ T6131]  active_file:1227 inactive_file:38225 isolated_file:0
[   73.003178][ T6131]  unevictable:1768 dirty:1437 writeback:0
[   73.003178][ T6131]  slab_reclaimable:9201 slab_unreclaimable:51416
[   73.003178][ T6131]  mapped:18009 shmem:2430 pagetables:922
[   73.003178][ T6131]  sec_pagetables:0 bounce:0
[   73.003178][ T6131]  kernel_misc_reclaimable:0
[   73.003178][ T6131]  free:301821 free_pcp:21109 free_cma:0
[   73.019516][ T6131] Node 0 active_anon:13888kB inactive_anon:0kB active_file:1856kB inactive_file:22248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28552kB dirty:2984kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5392kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.115076][ T6131] Node 1 active_anon:8636kB inactive_anon:0kB active_file:3052kB inactive_file:130652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43484kB dirty:2764kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6000kB pagetables:1508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.131743][ T6131] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.158068][ T6131] lowmem_reserve[]: 0 811 811 811 811
[   73.239266][ T6131] Node 0 DMA32 free:442592kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13956kB inactive_anon:0kB active_file:1856kB inactive_file:22248kB unevictable:3536kB writepending:2984kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:23908kB local_pcp:19096kB free_cma:0kB
[   73.256140][ T6131] lowmem_reserve[]: 0 0 0 0 0
[   73.260382][ T6131] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.277372][ T6131] lowmem_reserve[]: 0 0 854 854 854
[   73.282411][ T6131] Node 1 Normal free:292400kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8636kB inactive_anon:0kB active_file:3052kB inactive_file:130652kB unevictable:3536kB writepending:2764kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:58396kB local_pcp:38376kB free_cma:0kB
[   73.324569][ T6131] lowmem_reserve[]: 0 0 0 0 0
[   73.329874][ T6131] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   73.346710][ T6131] Node 0 DMA32: 714*4kB (UM) 95*8kB (U) 154*16kB (UM) 251*32kB (UE) 39*64kB (UM) 10*128kB (U) 3*256kB (UME) 2*512kB (UE) 1*1024kB (M) 4*2048kB (ME) 101*4096kB (M) = 442592kB
[   73.375122][ T6131] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   73.426426][ T6131] Node 1 Normal: 7044*4kB (UME) 100*8kB (UME) 234*16kB (UME) 10*32kB (UME) 5*64kB (UME) 4*128kB (UM) 3*256kB (UM) 1*512kB (M) 1*1024kB (M) 5*2048kB (ME) 60*4096kB (M) = 292176kB
[   73.449100][ T6131] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.458184][ T6131] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.465588][ T6131] 41882 total pagecache pages
[   73.468920][ T6131] 0 pages in swap cache
[   73.471551][ T6131] Free swap  = 124996kB
[   73.474847][ T6131] Total swap = 124996kB
[   73.477389][ T6131] 786301 pages RAM
[   73.479987][ T6131] 0 pages HighMem/MovableOnly
[   73.485861][ T6131] 241329 pages reserved
[   73.488725][ T6131] 0 pages cma reserved
[   74.840924][ T6177] syzkaller0: entered promiscuous mode
[   74.843218][ T6177] syzkaller0: entered allmulticast mode
[   74.986537][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.090986][ T6175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.568087][  T971] cfg80211: failed to load regulatory.db
[   76.651077][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   76.656075][ T6238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.145'.
[   76.801073][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'.
[   76.806808][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'.
[   76.815094][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'.
[   77.299128][ T6275] netlink: 80 bytes leftover after parsing attributes in process `syz.0.162'.
[   77.302307][ T6275] netlink: 80 bytes leftover after parsing attributes in process `syz.0.162'.
[   77.468341][ T6286] netlink: 830 bytes leftover after parsing attributes in process `syz.2.167'.
[   77.790864][ T6301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.171'.
[   77.854279][ T6306] netlink: 177 bytes leftover after parsing attributes in process `syz.1.175'.
[   77.891887][ T6308] cgroup: fork rejected by pids controller in /syz1
[   78.312233][ T5880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.398075][ T5880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.498637][ T5880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.546188][ T6322] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   78.610460][ T5880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.641909][ T6324] netlink: 'syz.2.184': attribute type 29 has an invalid length.
[   78.816398][ T5880] bridge_slave_1: left allmulticast mode
[   78.822781][ T5880] bridge_slave_1: left promiscuous mode
[   78.832165][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.841050][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.846677][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.850665][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.854466][ T5880] bridge_slave_0: left allmulticast mode
[   78.856396][ T5880] bridge_slave_0: left promiscuous mode
[   78.856620][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.858460][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.861768][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.931319][ T6346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.478805][ T6349] netlink: 'syz.0.193': attribute type 3 has an invalid length.
[   79.481543][ T6349] netlink: 'syz.0.193': attribute type 4 has an invalid length.
[   79.724334][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.729385][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.734749][ T5880] bond0 (unregistering): Released all slaves
[   80.125647][ T6370] netlink: 'syz.0.199': attribute type 33 has an invalid length.
[   80.137262][ T6370] `: renamed from team0 (while UP)
[   80.239068][ T5880] hsr_slave_0: left promiscuous mode
[   80.250373][ T5880] hsr_slave_1: left promiscuous mode
[   80.255747][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.258844][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.274154][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.277400][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.309942][ T5880] veth1_macvtap: left allmulticast mode
[   80.312585][ T5880] veth1_macvtap: left promiscuous mode
[   80.316045][ T5880] veth0_macvtap: left promiscuous mode
[   80.318582][ T5880] veth1_vlan: left promiscuous mode
[   80.320976][ T5880] veth0_vlan: left promiscuous mode
[   80.869223][ T5880] team0 (unregistering): Port device team_slave_1 removed
[   80.883597][   T54] Bluetooth: hci0: command tx timeout
[   80.896626][ T5880] team0 (unregistering): Port device team_slave_0 removed
[   81.326392][ T6338] chnl_net:caif_netlink_parms(): no params data found
[   81.459561][ T6405] netlink: 'syz.2.211': attribute type 28 has an invalid length.
[   81.594305][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.597685][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.600878][ T6338] bridge_slave_0: entered allmulticast mode
[   81.619327][ T6338] bridge_slave_0: entered promiscuous mode
[   81.635185][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.638304][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.641510][ T6338] bridge_slave_1: entered allmulticast mode
[   81.656974][ T6338] bridge_slave_1: entered promiscuous mode
[   81.737316][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.745766][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.827677][ T6338] team0: Port device team_slave_0 added
[   81.844606][ T6338] team0: Port device team_slave_1 added
[   81.949192][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.952254][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.975117][ T6429] netlink: 'syz.2.217': attribute type 21 has an invalid length.
[   81.979336][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.000948][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.006123][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.033212][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.228109][ T6338] hsr_slave_0: entered promiscuous mode
[   82.231424][ T6338] hsr_slave_1: entered promiscuous mode
[   82.517138][ T6450] __nla_validate_parse: 8 callbacks suppressed
[   82.517149][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   82.816105][ T6466] netlink: 332 bytes leftover after parsing attributes in process `syz.2.226'.
[   82.965091][   T54] Bluetooth: hci0: command tx timeout
[   83.954700][ T6503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.118066][ T6338] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.145019][ T6338] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.150040][ T6338] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.165728][ T6338] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.294779][ T6531] netlink: 104 bytes leftover after parsing attributes in process `syz.0.238'.
[   84.307487][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'.
[   84.360290][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.398896][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   84.402810][ T6535] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   84.405699][ T6535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.444270][ T6338] 8021q: adding VLAN 0 to HW filter on device team0
[   84.470522][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.473156][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.513715][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.516508][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.712035][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.754763][ T6338] veth0_vlan: entered promiscuous mode
[   84.768593][ T6338] veth1_vlan: entered promiscuous mode
[   84.797999][ T6338] veth0_macvtap: entered promiscuous mode
[   84.806842][ T6338] veth1_macvtap: entered promiscuous mode
[   84.827125][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.837305][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.849304][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.852817][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.868981][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.875737][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.940541][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.944377][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.983620][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.987024][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.041643][ T6557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.179'.
[   85.055313][   T54] Bluetooth: hci0: command tx timeout
[   85.269063][ T6571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.242'.
[   85.421897][ T6579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.120037][ T6615] syzkaller0: entered promiscuous mode
[   86.122336][ T6615] syzkaller0: entered allmulticast mode
[   87.133403][   T54] Bluetooth: hci0: command tx timeout
[   95.989446][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1425278502 wd_nsec: 1425278304
[  101.713362][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  101.720819][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  101.725188][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  101.730504][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  101.734667][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.779607][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  102.787748][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.790846][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.794553][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.797547][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.822927][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.827196][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.832127][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.837416][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.840444][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  103.763397][   T54] Bluetooth: hci3: command tx timeout
[  104.883749][ T5850] Bluetooth: hci4: command tx timeout
[  104.886713][   T54] Bluetooth: hci5: command tx timeout
[  105.843271][   T54] Bluetooth: hci3: command tx timeout
[  106.963857][ T5850] Bluetooth: hci4: command tx timeout
[  106.966763][   T54] Bluetooth: hci5: command tx timeout
[  107.924079][ T5850] Bluetooth: hci3: command tx timeout
[  109.043335][ T5850] Bluetooth: hci4: command tx timeout
[  109.045601][ T5850] Bluetooth: hci5: command tx timeout
[  110.003486][   T54] Bluetooth: hci3: command tx timeout
[  111.123418][   T54] Bluetooth: hci5: command tx timeout
[  111.125930][   T54] Bluetooth: hci4: command tx timeout
[  117.951693][ T5897] sched: DL replenish lagged too much
[  118.633477][ T6635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.268'.
[  118.948046][ T5880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.071316][ T5880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.207906][ T5880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.271420][ T6650] chnl_net:caif_netlink_parms(): no params data found
[  119.321221][ T5880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.330188][ T6653] chnl_net:caif_netlink_parms(): no params data found
[  119.379838][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  119.447448][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.451603][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.456340][ T6650] bridge_slave_0: entered allmulticast mode
[  119.460603][ T6650] bridge_slave_0: entered promiscuous mode
[  119.489753][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.493344][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.496461][ T6650] bridge_slave_1: entered allmulticast mode
[  119.501013][ T6650] bridge_slave_1: entered promiscuous mode
[  119.622631][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.645642][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.649844][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.655037][ T6653] bridge_slave_0: entered allmulticast mode
[  119.659091][ T6653] bridge_slave_0: entered promiscuous mode
[  119.667264][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.677402][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.680388][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.682914][ T6642] bridge_slave_0: entered allmulticast mode
[  119.687433][ T6642] bridge_slave_0: entered promiscuous mode
[  119.692991][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.696808][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.700119][ T6642] bridge_slave_1: entered allmulticast mode
[  119.704437][ T6642] bridge_slave_1: entered promiscuous mode
[  119.721507][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.725163][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.728276][ T6653] bridge_slave_1: entered allmulticast mode
[  119.732305][ T6653] bridge_slave_1: entered promiscuous mode
[  119.818852][ T6650] team0: Port device team_slave_0 added
[  119.824613][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.846766][ T6650] team0: Port device team_slave_1 added
[  119.851932][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.858727][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.862642][ T5880] bridge_slave_1: left allmulticast mode
[  119.865504][ T5880] bridge_slave_1: left promiscuous mode
[  119.869123][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.876023][ T5880] bridge_slave_0: left allmulticast mode
[  119.878434][ T5880] bridge_slave_0: left promiscuous mode
[  119.884171][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.216067][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.222413][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.228261][ T5880] bond0 (unregistering): Released all slaves
[  120.254747][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.362671][ T6653] team0: Port device team_slave_0 added
[  120.368277][ T6653] team0: Port device team_slave_1 added
[  120.389034][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.391923][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.403526][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.410091][ T6642] team0: Port device team_slave_0 added
[  120.427881][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.430797][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.441965][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.456599][ T6642] team0: Port device team_slave_1 added
[  120.490015][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.492907][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.504780][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.574828][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.577706][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.594455][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.605708][ T6650] hsr_slave_0: entered promiscuous mode
[  120.610727][ T6650] hsr_slave_1: entered promiscuous mode
[  120.614617][ T6650] debugfs: 'hsr0' already exists in 'hsr'
[  120.617105][ T6650] Cannot create hsr debugfs directory
[  120.676184][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.679235][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.691676][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.728263][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.731295][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.742776][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.776001][ T5880] hsr_slave_0: left promiscuous mode
[  120.778184][ T5880] hsr_slave_1: left promiscuous mode
[  120.780388][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.782898][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.788591][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.791182][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.805714][ T5880] veth1_macvtap: left promiscuous mode
[  120.807796][ T5880] veth0_macvtap: left promiscuous mode
[  120.809795][ T5880] veth1_vlan: left promiscuous mode
[  120.811839][ T5880] veth0_vlan: left promiscuous mode
[  121.151210][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  121.187275][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  121.616456][ T6653] hsr_slave_0: entered promiscuous mode
[  121.619870][ T6653] hsr_slave_1: entered promiscuous mode
[  121.626169][ T6653] debugfs: 'hsr0' already exists in 'hsr'
[  121.628654][ T6653] Cannot create hsr debugfs directory
[  121.720303][ T6642] hsr_slave_0: entered promiscuous mode
[  121.724665][ T6642] hsr_slave_1: entered promiscuous mode
[  121.732975][ T6642] debugfs: 'hsr0' already exists in 'hsr'
[  121.740617][ T6642] Cannot create hsr debugfs directory
[  122.114190][ T6650] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  122.150726][ T5880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.193691][ T6650] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.213809][ T6650] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.250138][ T5880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.268688][ T6650] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.322088][ T5880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.350386][ T6653] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  122.356781][ T6653] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  122.377917][ T5880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.409169][ T6653] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  122.420867][ T6653] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  122.508256][ T6642] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.537040][ T6642] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.545467][ T6642] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.569085][ T6642] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.670351][ T5880] bridge_slave_1: left allmulticast mode
[  122.672273][ T5880] bridge_slave_1: left promiscuous mode
[  122.675923][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.680492][ T5880] bridge_slave_0: left allmulticast mode
[  122.682364][ T5880] bridge_slave_0: left promiscuous mode
[  122.685262][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.942833][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.949894][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.957286][ T5880] bond0 (unregistering): Released all slaves
[  122.975651][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.081587][ T6650] 8021q: adding VLAN 0 to HW filter on device team0
[  123.090416][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.101486][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.104740][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.130518][ T6653] 8021q: adding VLAN 0 to HW filter on device team0
[  123.147207][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.150231][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.238288][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.240901][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.254323][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.256690][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.301530][ T5880] hsr_slave_0: left promiscuous mode
[  123.309359][ T5880] hsr_slave_1: left promiscuous mode
[  123.312149][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.317088][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.320803][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.324180][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.339152][ T5880] veth1_macvtap: left promiscuous mode
[  123.341464][ T5880] veth0_macvtap: left promiscuous mode
[  123.345690][ T5880] veth1_vlan: left promiscuous mode
[  123.347929][ T5880] veth0_vlan: left promiscuous mode
[  123.712160][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  123.734640][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  124.070860][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.141299][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[  124.178114][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.181148][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.219091][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.221931][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.331678][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.387896][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.627560][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.710601][ T6642] veth0_vlan: entered promiscuous mode
[  124.732339][ T6642] veth1_vlan: entered promiscuous mode
[  124.772668][ T6650] veth0_vlan: entered promiscuous mode
[  124.789563][ T6650] veth1_vlan: entered promiscuous mode
[  124.792921][ T6642] veth0_macvtap: entered promiscuous mode
[  124.818625][ T6650] veth0_macvtap: entered promiscuous mode
[  124.828418][ T6642] veth1_macvtap: entered promiscuous mode
[  124.835951][ T6650] veth1_macvtap: entered promiscuous mode
[  124.862658][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.869453][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.877660][ T6653] veth0_vlan: entered promiscuous mode
[  124.882724][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.895860][ T6653] veth1_vlan: entered promiscuous mode
[  124.901225][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.917319][ T5879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.933957][ T5879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.941560][ T5879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.960068][ T5879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.975715][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.982652][ T6653] veth0_macvtap: entered promiscuous mode
[  124.996512][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.007741][ T6653] veth1_macvtap: entered promiscuous mode
[  125.012517][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.046157][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.076014][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.080556][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.098568][ T5880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.101805][ T5880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.119863][ T5880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.125251][ T5880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.141435][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.147443][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.190801][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.194499][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.242631][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.251614][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.258480][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.263253][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.293904][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.300276][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.331936][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.339089][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.660059][ T6841] netlink: 'syz.4.281': attribute type 10 has an invalid length.
[  127.686040][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.281'.
[  127.690102][ T6841] team0: entered promiscuous mode
[  127.702370][ T6841] team_slave_0: entered promiscuous mode
[  127.722332][ T6841] team_slave_1: entered promiscuous mode
[  127.734533][ T6841] team0: entered allmulticast mode
[  127.738732][ T6841] team_slave_0: entered allmulticast mode
[  127.746114][ T6841] team_slave_1: entered allmulticast mode
[  127.766769][ T6841] bridge0: port 3(team0) entered blocking state
[  127.780931][ T6841] bridge0: port 3(team0) entered disabled state
[  127.828732][ T6841] bridge0: port 3(team0) entered blocking state
[  127.832515][ T6841] bridge0: port 3(team0) entered forwarding state
[  132.568056][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.570246][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.877598][ T6950] netlink: 'syz.5.310': attribute type 2 has an invalid length.
[  133.192074][ T6971] netlink: 'syz.5.318': attribute type 6 has an invalid length.
[  133.198589][ T6971] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.318'.
[  134.596867][ T7004] netlink: 277 bytes leftover after parsing attributes in process `syz.3.330'.
[  134.788796][ T7013] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.071398][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'.
[  135.077294][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.4.339'.
[  135.515756][ T7041] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.344'.
[  135.662539][ T7047] netlink: 172 bytes leftover after parsing attributes in process `syz.4.347'.
[  135.872393][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'.
[  135.888207][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'.
[  137.548689][ T7102] sit0: entered allmulticast mode
[  137.555894][ T7103] sit0: entered promiscuous mode
[  137.747442][ T7115] netlink: 264 bytes leftover after parsing attributes in process `syz.5.372'.
[  137.751119][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.5.372'.
[  137.950736][ T7127] netlink: 'syz.4.378': attribute type 1 has an invalid length.
[  140.227669][ T7224] netlink: 'syz.5.401': attribute type 1 has an invalid length.
[  140.232967][ T7224] netlink: 'syz.5.401': attribute type 4 has an invalid length.
[  140.241244][ T7224] __nla_validate_parse: 1 callbacks suppressed
[  140.241254][ T7224] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.401'.
[  140.254249][ T7224] netlink: 'syz.5.401': attribute type 1 has an invalid length.
[  140.259894][ T7224] netlink: 'syz.5.401': attribute type 4 has an invalid length.
[  140.268868][ T7224] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.401'.
[  140.755802][ T7247] netlink: 132 bytes leftover after parsing attributes in process `syz.5.403'.
[  140.986975][ T7255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  141.934940][ T7298] netlink: 'syz.4.417': attribute type 1 has an invalid length.
[  142.096159][ T7308] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  142.525282][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'.
[  142.550510][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'.
[  143.088397][ T7372] netlink: 'syz.4.443': attribute type 10 has an invalid length.
[  143.092774][ T7372] bridge0: port 3(team0) entered disabled state
[  143.095602][ T7372] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.099137][ T7372] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.100337][ T7370] openvswitch: netlink: IP tunnel dst address not specified
[  143.113328][ T7372] bridge0: port 3(team0) entered blocking state
[  143.115853][ T7372] bridge0: port 3(team0) entered forwarding state
[  143.118480][ T7372] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.121321][ T7372] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.124491][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.127387][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.136064][ T7372] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  144.176169][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'.
[  145.269995][ T7431] netlink: 'syz.4.463': attribute type 1 has an invalid length.
[  145.470413][ T7448] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.470'.
[  147.282600][ T7487] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  147.293546][ T7490] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  147.471791][ T7499] netlink: 132 bytes leftover after parsing attributes in process `syz.5.489'.
[  148.379567][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.5.508'.
[  148.384212][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.5.508'.
[  148.396773][ T7542] netlink: 60 bytes leftover after parsing attributes in process `syz.5.508'.
[  148.696921][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  148.724837][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  148.832953][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'.
[  148.839126][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'.
[  148.844084][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'.
[  149.622926][ T7598] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  149.628811][ T7598] netlink: 'syz.5.535': attribute type 3 has an invalid length.
[  150.642963][ T7633] __nla_validate_parse: 3 callbacks suppressed
[  150.642980][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.550'.
[  150.655433][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.550'.
[  150.671669][ T7634] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.551'.
[  151.266231][ T7665] netlink: 2 bytes leftover after parsing attributes in process `syz.5.566'.
[  151.347058][ T7668] netlink: 'syz.4.564': attribute type 2 has an invalid length.
[  151.870535][ T7683] netlink: 'syz.4.574': attribute type 11 has an invalid length.
[  151.895662][ T7684] syz.3.572 uses obsolete (PF_INET,SOCK_PACKET)
[  152.097168][ T7688] netlink: 1 bytes leftover after parsing attributes in process `syz.4.576'.
[  152.611102][ T5850] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5
[  152.718263][ T7714] netlink: 144 bytes leftover after parsing attributes in process `syz.4.589'.
[  152.918675][ T7728] netlink: 'syz.3.595': attribute type 28 has an invalid length.
[  152.921488][ T7728] netlink: 'syz.3.595': attribute type 3 has an invalid length.
[  152.924185][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.595'.
[  153.194120][ T7745] netlink: 1 bytes leftover after parsing attributes in process `syz.4.603'.
[  153.377413][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'.
[  153.512304][ T7767] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.612'.
[  155.919435][ T7839] netlink: 'syz.4.643': attribute type 1 has an invalid length.
[  156.124059][ T7851] netlink: 'syz.4.648': attribute type 10 has an invalid length.
[  156.127556][ T7851] __nla_validate_parse: 2 callbacks suppressed
[  156.127568][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.4.648'.
[  156.970761][ T7877] netlink: 52 bytes leftover after parsing attributes in process `syz.4.655'.
[  156.976113][ T7877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  157.508606][ T7914] netlink: 'syz.4.672': attribute type 10 has an invalid length.
[  157.512432][ T7914] netlink: 2 bytes leftover after parsing attributes in process `syz.4.672'.
[  157.555477][ T7914] bond0: entered promiscuous mode
[  157.557272][ T7914] bond_slave_0: entered promiscuous mode
[  157.568127][ T7914] bond_slave_1: entered promiscuous mode
[  157.586614][ T7914] bridge0: entered promiscuous mode
[  157.594835][ T7914] bridge0: port 4(bond0) entered blocking state
[  157.598957][ T7914] bridge0: port 4(bond0) entered disabled state
[  157.604118][ T7914] bond0: entered allmulticast mode
[  157.606595][ T7914] bond_slave_0: entered allmulticast mode
[  157.609500][ T7914] bond_slave_1: entered allmulticast mode
[  157.612181][ T7914] bridge0: entered allmulticast mode
[  157.637838][ T7914] bond0: left allmulticast mode
[  157.640279][ T7914] bond_slave_0: left allmulticast mode
[  157.644490][ T7914] bond_slave_1: left allmulticast mode
[  157.647534][ T7914] bridge0: left allmulticast mode
[  158.061093][ T7926] sctp: [Deprecated]: syz.5.676 (pid 7926) Use of int in maxseg socket option.
[  158.061093][ T7926] Use struct sctp_assoc_value instead
[  159.097725][ T7961] netlink: 17 bytes leftover after parsing attributes in process `syz.5.692'.
[  159.113763][ T7961] netlink: zone id is out of range
[  159.116077][ T7961] netlink: zone id is out of range
[  159.123974][ T7961] netlink: zone id is out of range
[  159.126264][ T7961] netlink: zone id is out of range
[  159.128290][ T7961] netlink: zone id is out of range
[  159.133575][ T7961] netlink: zone id is out of range
[  159.137086][ T7961] netlink: zone id is out of range
[  159.141070][ T7961] netlink: zone id is out of range
[  159.144040][ T7961] netlink: zone id is out of range
[  159.310641][ T7968] netlink: 'syz.3.695': attribute type 1 has an invalid length.
[  159.511168][ T7978] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  159.521460][ T7978] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  159.731767][ T7990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.707'.
[  160.110048][ T8007] netlink: 'syz.5.713': attribute type 11 has an invalid length.
[  160.459491][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.723'.
[  160.569931][ T8034] netlink: 92 bytes leftover after parsing attributes in process `syz.4.726'.
[  161.442766][ T8055] netlink: 132 bytes leftover after parsing attributes in process `syz.5.734'.
[  161.799686][ T8080] netlink: 'syz.5.747': attribute type 39 has an invalid length.
[  161.809832][ T8081] netlink: 'syz.4.745': attribute type 21 has an invalid length.
[  161.852091][ T8081] netlink: 'syz.4.745': attribute type 6 has an invalid length.
[  161.854679][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.745'.
[  162.447744][ T8122] netlink: 92 bytes leftover after parsing attributes in process `syz.4.766'.
[  162.451457][ T8122] netlink: 92 bytes leftover after parsing attributes in process `syz.4.766'.
[  162.580272][ T8127] netlink: 'syz.4.768': attribute type 41 has an invalid length.
[  162.760105][ T8133] netlink: 184 bytes leftover after parsing attributes in process `syz.4.771'.
[  162.917658][ T8138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.773'.
[  162.986137][ T5850] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  163.221320][ T8150] net_ratelimit: 15 callbacks suppressed
[  163.221339][ T8150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.910828][ T8193] netlink: 304 bytes leftover after parsing attributes in process `syz.5.797'.
[  163.945333][ T8195] netlink: 'syz.5.799': attribute type 21 has an invalid length.
[  163.948049][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'.
[  163.952666][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'.
[  164.032729][ T8203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.210122][ T8211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.806'.
[  164.580927][ T8230] delete_channel: no stack
[  164.584920][ T8228] delete_channel: no stack
[  164.904385][ T8252] netlink: 'syz.4.825': attribute type 4 has an invalid length.
[  164.926120][ T8252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  166.868566][ T8265] syz.5.830 (8265) used obsolete PPPIOCDETACH ioctl
[  166.997258][ T8277] __nla_validate_parse: 2 callbacks suppressed
[  166.997268][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'.
[  168.067037][ T8298] netlink: 'syz.4.843': attribute type 11 has an invalid length.
[  168.069705][ T8298] netlink: 'syz.4.843': attribute type 6 has an invalid length.
[  168.204577][ T8309] netlink: 'syz.3.849': attribute type 27 has an invalid length.
[  168.676837][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.863'.
[  168.690298][ T8338] netlink: 56 bytes leftover after parsing attributes in process `syz.5.863'.
[  170.970908][ T8355] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.870'.
[  171.274685][ T8371] sit0: entered allmulticast mode
[  171.986420][ T8379] netlink: 'syz.3.878': attribute type 4 has an invalid length.
[  172.048370][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.882'.
[  172.051617][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.5.882'.
[  172.228094][ T8395] option changes via remount are deprecated (pid=8382 comm=syz.3.880)
[  177.487076][ T8441] netlink: 68 bytes leftover after parsing attributes in process `syz.5.905'.
[  177.712260][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.912'.
[  178.001135][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'.
[  178.440619][ T8488] netlink: 152 bytes leftover after parsing attributes in process `syz.3.923'.
[  180.097844][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'.
[  180.319860][ T8524] netlink: 'syz.4.939': attribute type 9 has an invalid length.
[  180.327697][ T8524] netlink: 146452 bytes leftover after parsing attributes in process `syz.4.939'.
[  180.556061][ T8538] netlink: 'syz.4.943': attribute type 3 has an invalid length.
[  180.559645][ T8538] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.943'.
[  182.887071][ T8578] netlink: 188 bytes leftover after parsing attributes in process `syz.3.957'.
[  184.469735][ T8615] netlink: 'syz.3.975': attribute type 1 has an invalid length.
[  184.649215][ T8619] netlink: 830 bytes leftover after parsing attributes in process `syz.3.977'.
[  185.886583][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1002'.
[  185.951905][ T8682] delete_channel: no stack
[  185.956988][ T8682] delete_channel: no stack
[  186.011844][ T8684] : entered promiscuous mode
[  186.158487][ T8692] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  186.255393][ T8700] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1012'.
[  186.723935][ T8716] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1019'.
[  187.428439][ T8753] netlink: 'syz.5.1034': attribute type 2 has an invalid length.
[  187.643237][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  187.648965][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1038'.
[  187.851471][ T8765] netlink: 'syz.4.1040': attribute type 10 has an invalid length.
[  188.270017][ T8765] batman_adv: batadv0: Adding interface: netdevsim0
[  188.272996][ T8765] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.286830][ T8765] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  189.059900][ T8794] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1052'.
[  189.142644][ T8794] netlink: 'syz.3.1052': attribute type 10 has an invalid length.
[  189.179139][ T8794] batman_adv: batadv0: Adding interface: netdevsim0
[  189.182329][ T8794] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.193956][ T8794] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  189.462794][ T8808] netlink: 'syz.4.1056': attribute type 1 has an invalid length.
[  189.469948][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'.
[  189.475436][ T8808] netlink: 'syz.4.1056': attribute type 16 has an invalid length.
[  189.478472][ T8808] netlink: 'syz.4.1056': attribute type 17 has an invalid length.
[  189.488955][ T8808] sit0: left promiscuous mode
[  189.490637][ T8808] sit0: left allmulticast mode
[  189.500040][ T8808] bond0: left promiscuous mode
[  189.501988][ T8808] bond_slave_0: left promiscuous mode
[  189.506763][ T8808] bond_slave_1: left promiscuous mode
[  189.509042][ T8808] bridge0: left promiscuous mode
[  189.517757][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.625358][ T8808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.632669][ T8811] netlink: 'syz.3.1058': attribute type 25 has an invalid length.
[  189.691321][ T5850] Bluetooth: hci3: unexpected event 0x31 length: 82 > 6
[  190.056155][ T8830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1066'.
[  190.064532][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'.
[  190.068675][ T8830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1066'.
[  190.258755][ T8842] netlink: 'syz.5.1073': attribute type 10 has an invalid length.
[  190.277215][ T8842] team0: Port device geneve1 added
[  190.280881][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'.
[  190.392058][ T8842] syz.5.1073 (8842) used greatest stack depth: 18816 bytes left
[  190.529082][ T8869] netlink: 'syz.4.1086': attribute type 1 has an invalid length.
[  190.548188][ T8872] netlink: 143 bytes leftover after parsing attributes in process `syz.3.1085'.
[  190.551317][ T8872] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1085'.
[  192.265546][ T8957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.312439][ T8955] syzkaller0: entered promiscuous mode
[  192.324591][ T8955] syzkaller0: entered allmulticast mode
[  194.018597][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.020728][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.241610][ T8983] netlink: 'syz.4.1134': attribute type 4 has an invalid length.
[  194.244638][ T8983] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1134'.
[  194.290328][ T8983] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  194.403636][ T8995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.099752][ T9028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1155'.
[  195.412031][ T5850] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  195.570950][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'.
[  195.641858][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1165'.
[  195.707165][ T9056] netlink: 'syz.4.1167': attribute type 1 has an invalid length.
[  196.020658][ T9083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.026475][ T9083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.315252][ T9129] netlink: 'syz.5.1201': attribute type 19 has an invalid length.
[  197.821860][ T9141] netlink: 'syz.5.1207': attribute type 29 has an invalid length.
[  197.827190][ T9141] netlink: 'syz.5.1207': attribute type 29 has an invalid length.
[  197.937422][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  197.943214][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'.
[  199.160330][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.218963][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.232951][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1231'.
[  199.339484][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.447292][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.659964][ T5879] bridge_slave_1: left allmulticast mode
[  199.661870][ T5879] bridge_slave_1: left promiscuous mode
[  199.664621][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.684865][ T5879] bridge_slave_0: left allmulticast mode
[  199.688278][ T5879] bridge_slave_0: left promiscuous mode
[  199.690949][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.955088][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'.
[  200.277298][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.285402][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.291027][ T5879] bond0 (unregistering): Released all slaves
[  200.479276][ T9242] cgroup: fork rejected by pids controller in /syz3
[  200.687806][ T9253] netlink: 'syz.5.1257': attribute type 10 has an invalid length.
[  200.772439][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.818107][ T9253] team0: Port device bond0 added
[  200.902030][ T5879] hsr_slave_0: left promiscuous mode
[  200.913278][ T5879] hsr_slave_1: left promiscuous mode
[  200.925664][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.928757][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.950289][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.953590][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.978524][ T5879] veth1_macvtap: left promiscuous mode
[  200.982777][ T5879] veth1_vlan: left promiscuous mode
[  200.990791][ T5879] veth0_vlan: left promiscuous mode
[  201.258676][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.270913][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.281208][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.285918][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.295944][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.556996][ T5879] ` (unregistering): Port device team_slave_1 removed
[  201.587265][ T5879] ` (unregistering): Port device team_slave_0 removed
[  201.938325][ T5851] infiniband syz0: ib_query_port failed (-19)
[  202.230937][ T9266] chnl_net:caif_netlink_parms(): no params data found
[  202.397637][ T9302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1271'.
[  202.497073][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.500136][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.504217][ T9266] bridge_slave_0: entered allmulticast mode
[  202.507060][ T9266] bridge_slave_0: entered promiscuous mode
[  202.511824][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.515740][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.518858][ T9266] bridge_slave_1: entered allmulticast mode
[  202.522000][ T9266] bridge_slave_1: entered promiscuous mode
[  202.579109][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.592781][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.706679][ T9266] team0: Port device team_slave_0 added
[  202.760217][ T5879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.781149][ T9266] team0: Port device team_slave_1 added
[  202.854403][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.856649][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.868809][ T9266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.897215][ T5879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.935568][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.938051][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.983259][ T9266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.052158][ T5879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.103498][ T9266] hsr_slave_0: entered promiscuous mode
[  203.106208][ T9266] hsr_slave_1: entered promiscuous mode
[  203.164864][ T5879] batman_adv: batadv0: Removing interface: netdevsim0
[  203.168824][ T5879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.303269][ T9332] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1278'.
[  203.373578][   T54] Bluetooth: hci0: command tx timeout
[  203.543722][ T5879] bridge_slave_1: left allmulticast mode
[  203.546726][ T5879] bridge_slave_1: left promiscuous mode
[  203.552190][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.567713][ T5879] bridge_slave_0: left allmulticast mode
[  203.569529][ T5879] bridge_slave_0: left promiscuous mode
[  203.571514][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.034827][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.041019][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.048497][ T5879] bond0 (unregistering): Released all slaves
[  204.107354][ T5879] : left promiscuous mode
[  204.669661][ T9266] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  204.681118][ T9357] netlink: 'syz.5.1285': attribute type 4 has an invalid length.
[  205.492391][   T54] Bluetooth: hci0: command tx timeout
[  207.523247][   T54] Bluetooth: hci0: command tx timeout
[  207.558002][ T9266] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.591207][ T9266] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.650138][ T9266] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.767641][ T9360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  207.772635][ T9360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  207.910206][ T5879] hsr_slave_0: left promiscuous mode
[  207.935200][ T5879] hsr_slave_1: left promiscuous mode
[  207.947113][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.950349][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.963921][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.966461][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.993283][ T5879] veth1_macvtap: left promiscuous mode
[  207.997729][ T5879] veth0_macvtap: left promiscuous mode
[  208.001445][ T5879] veth1_vlan: left promiscuous mode
[  208.007175][ T5879] veth0_vlan: left promiscuous mode
[  208.294973][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'.
[  208.539741][ T9388] netlink: 'syz.4.1292': attribute type 2 has an invalid length.
[  208.542715][ T9388] netlink: 'syz.4.1292': attribute type 8 has an invalid length.
[  208.548983][ T9388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1292'.
[  208.667827][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  208.707287][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  209.603373][   T54] Bluetooth: hci0: command tx timeout
[  210.499259][ T9266] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.529090][ T9266] 8021q: adding VLAN 0 to HW filter on device team0
[  210.540379][ T9405] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1298'.
[  210.564200][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.567245][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.583798][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.586554][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.844435][ T9266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.944161][ T9266] veth0_vlan: entered promiscuous mode
[  210.961762][ T9266] veth1_vlan: entered promiscuous mode
[  211.004742][ T9266] veth0_macvtap: entered promiscuous mode
[  211.022330][ T9266] veth1_macvtap: entered promiscuous mode
[  211.044976][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.058905][ T9266] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.071947][ T6676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.085894][ T6676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.098940][ T6676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.112153][ T6676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.182626][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.194853][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.217561][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.220072][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.560179][ T9444] netlink: 'syz.5.1306': attribute type 17 has an invalid length.
[  211.562903][ T9444] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1306'.
[  211.678393][ T9452] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1309'.
[  211.735014][ T9457] netlink: 'syz.3.1304': attribute type 64 has an invalid length.
[  211.827294][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1310'.
[  211.831261][ T9455] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1310'.
[  211.838797][ T9466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.854748][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1310'.
[  211.908064][ T9455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.094339][ T9482] ==================================================================
[  212.097704][ T9482] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  212.100926][ T9482] Read of size 1 at addr ffff88802fec50b0 by task syz.5.1320/9482
[  212.105386][ T9482] 
[  212.106398][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.5.1320 Not tainted syzkaller #0 PREEMPT(full) 
[  212.106419][ T9482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.106430][ T9482] Call Trace:
[  212.106439][ T9482]  <TASK>
[  212.106449][ T9482]  dump_stack_lvl+0x189/0x250
[  212.106471][ T9482]  ? __kasan_check_byte+0x12/0x40
[  212.106495][ T9482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.106513][ T9482]  ? lock_release+0x4b/0x3e0
[  212.106536][ T9482]  ? __virt_addr_valid+0x4a5/0x5c0
[  212.106555][ T9482]  print_report+0xca/0x240
[  212.106568][ T9482]  ? xfrm_state_find+0x2cf2/0x5400
[  212.106580][ T9482]  kasan_report+0x118/0x150
[  212.106602][ T9482]  ? xfrm_state_find+0x2cf2/0x5400
[  212.106619][ T9482]  xfrm_state_find+0x2cf2/0x5400
[  212.106644][ T9482]  ? stack_depot_save_flags+0x40/0x860
[  212.106663][ T9482]  ? xfrm_state_find+0x1da/0x5400
[  212.106682][ T9482]  ? __pfx_xfrm_state_find+0x10/0x10
[  212.106703][ T9482]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  212.106728][ T9482]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  212.106754][ T9482]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  212.106774][ T9482]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  212.106793][ T9482]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  212.106831][ T9482]  ? xfrm_expand_policies+0x41f/0x6a0
[  212.106850][ T9482]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  212.106870][ T9482]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  212.106887][ T9482]  ? crng_make_state+0x34c/0x700
[  212.106903][ T9482]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.106924][ T9482]  xfrm_lookup_route+0x3c/0x1c0
[  212.106941][ T9482]  sctp_v4_get_dst+0x3c7/0x1200
[  212.106967][ T9482]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  212.106985][ T9482]  ? _get_random_bytes+0x1bd/0x210
[  212.107004][ T9482]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.107030][ T9482]  ? dst_release+0x72/0x1b0
[  212.107046][ T9482]  sctp_transport_route+0x118/0x2f0
[  212.107065][ T9482]  sctp_assoc_add_peer+0x657/0x13b0
[  212.107086][ T9482]  sctp_connect_new_asoc+0x30a/0x690
[  212.107101][ T9482]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  212.107114][ T9482]  ? __local_bh_enable_ip+0x12d/0x1c0
[  212.107133][ T9482]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  212.107151][ T9482]  ? security_sctp_bind_connect+0x7e/0x2e0
[  212.107170][ T9482]  sctp_sendmsg+0x155c/0x2810
[  212.107197][ T9482]  ? __pfx_sctp_sendmsg+0x10/0x10
[  212.107218][ T9482]  ? aa_sk_perm+0x81e/0x950
[  212.107239][ T9482]  ? __pfx_aa_sk_perm+0x10/0x10
[  212.107259][ T9482]  ? sock_rps_record_flow+0x19/0x410
[  212.107277][ T9482]  ? inet_sendmsg+0x2f4/0x370
[  212.107326][ T9482]  __sock_sendmsg+0x19c/0x270
[  212.107349][ T9482]  ____sys_sendmsg+0x505/0x830
[  212.107367][ T9482]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.107387][ T9482]  ? import_iovec+0x74/0xa0
[  212.107407][ T9482]  ___sys_sendmsg+0x21f/0x2a0
[  212.107422][ T9482]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.107455][ T9482]  ? __fget_files+0x2a/0x420
[  212.107467][ T9482]  ? __fget_files+0x3a0/0x420
[  212.107484][ T9482]  __x64_sys_sendmsg+0x19b/0x260
[  212.107498][ T9482]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.107517][ T9482]  ? rcu_is_watching+0x15/0xb0
[  212.107533][ T9482]  ? do_syscall_64+0xbe/0x3b0
[  212.107553][ T9482]  do_syscall_64+0xfa/0x3b0
[  212.107570][ T9482]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.107587][ T9482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.107600][ T9482]  ? exc_page_fault+0x9f/0xf0
[  212.107617][ T9482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.107631][ T9482] RIP: 0033:0x7fc35ef8ebe9
[  212.107648][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.107662][ T9482] RSP: 002b:00007fc35feb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.107677][ T9482] RAX: ffffffffffffffda RBX: 00007fc35f1c5fa0 RCX: 00007fc35ef8ebe9
[  212.107688][ T9482] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  212.107697][ T9482] RBP: 00007fc35f011e19 R08: 0000000000000000 R09: 0000000000000000
[  212.107707][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.107716][ T9482] R13: 00007fc35f1c6038 R14: 00007fc35f1c5fa0 R15: 00007ffde5ffa998
[  212.107735][ T9482]  </TASK>
[  212.107748][ T9482] 
[  212.268407][ T9482] Allocated by task 8280:
[  212.269799][ T9482]  kasan_save_track+0x3e/0x80
[  212.271306][ T9482]  __kasan_slab_alloc+0x6c/0x80
[  212.272855][ T9482]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  212.274579][ T9482]  xfrm_state_alloc+0x24/0x2f0
[  212.276081][ T9482]  __find_acq_core+0x8a7/0x1c00
[  212.277622][ T9482]  xfrm_find_acq+0x78/0xa0
[  212.279036][ T9482]  xfrm_alloc_userspi+0x6b3/0xc90
[  212.280645][ T9482]  xfrm_user_rcv_msg+0x7a3/0xab0
[  212.282203][ T9482]  netlink_rcv_skb+0x208/0x470
[  212.283731][ T9482]  xfrm_netlink_rcv+0x79/0x90
[  212.285239][ T9482]  netlink_unicast+0x82f/0x9e0
[  212.286760][ T9482]  netlink_sendmsg+0x805/0xb30
[  212.288269][ T9482]  __sock_sendmsg+0x21c/0x270
[  212.289767][ T9482]  ____sys_sendmsg+0x505/0x830
[  212.291271][ T9482]  ___sys_sendmsg+0x21f/0x2a0
[  212.292757][ T9482]  __x64_sys_sendmsg+0x19b/0x260
[  212.294327][ T9482]  do_syscall_64+0xfa/0x3b0
[  212.295752][ T9482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.297600][ T9482] 
[  212.298369][ T9482] Freed by task 5841:
[  212.299624][ T9482]  kasan_save_track+0x3e/0x80
[  212.301101][ T9482]  kasan_save_free_info+0x46/0x50
[  212.302863][ T9482]  __kasan_slab_free+0x5b/0x80
[  212.304759][ T9482]  kmem_cache_free+0x18f/0x400
[  212.306642][ T9482]  xfrm_state_gc_task+0x52d/0x6b0
[  212.308668][ T9482]  process_scheduled_works+0xae1/0x17b0
[  212.310840][ T9482]  worker_thread+0x8a0/0xda0
[  212.312689][ T9482]  kthread+0x711/0x8a0
[  212.314336][ T9482]  ret_from_fork+0x3fc/0x770
[  212.316163][ T9482]  ret_from_fork_asm+0x1a/0x30
[  212.318127][ T9482] 
[  212.319095][ T9482] The buggy address belongs to the object at ffff88802fec4d80
[  212.319095][ T9482]  which belongs to the cache xfrm_state of size 928
[  212.323732][ T9482] The buggy address is located 816 bytes inside of
[  212.323732][ T9482]  freed 928-byte region [ffff88802fec4d80, ffff88802fec5120)
[  212.328634][ T9482] 
[  212.329555][ T9482] The buggy address belongs to the physical page:
[  212.332152][ T9482] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fec4d80 pfn:0x2fec4
[  212.336228][ T9482] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  212.339675][ T9482] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  212.342727][ T9482] page_type: f5(slab)
[  212.344385][ T9482] raw: 00fff00000000040 ffff888104e28b40 dead000000000122 0000000000000000
[  212.347876][ T9482] raw: ffff88802fec4d80 00000000800e000b 00000000f5000000 0000000000000000
[  212.351401][ T9482] head: 00fff00000000040 ffff888104e28b40 dead000000000122 0000000000000000
[  212.354926][ T9482] head: ffff88802fec4d80 00000000800e000b 00000000f5000000 0000000000000000
[  212.358449][ T9482] head: 00fff00000000002 ffffea0000bfb101 00000000ffffffff 00000000ffffffff
[  212.361964][ T9482] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  212.365453][ T9482] page dumped because: kasan: bad access detected
[  212.368030][ T9482] page_owner tracks the page as allocated
[  212.370354][ T9482] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7686, tgid 7685 (syz.4.575), ts 151937913749, free_ts 151925101171
[  212.377901][ T9482]  post_alloc_hook+0x240/0x2a0
[  212.379919][ T9482]  get_page_from_freelist+0x21e4/0x22c0
[  212.382165][ T9482]  __alloc_frozen_pages_noprof+0x181/0x370
[  212.384395][ T9482]  alloc_pages_mpol+0x232/0x4a0
[  212.385895][ T9482]  allocate_slab+0x8a/0x370
[  212.387350][ T9482]  ___slab_alloc+0xbeb/0x1410
[  212.388818][ T9482]  kmem_cache_alloc_noprof+0x283/0x3c0
[  212.390537][ T9482]  xfrm_state_alloc+0x24/0x2f0
[  212.392067][ T9482]  xfrm_add_acquire+0xf7/0xb20
[  212.393612][ T9482]  xfrm_user_rcv_msg+0x7a3/0xab0
[  212.395171][ T9482]  netlink_rcv_skb+0x208/0x470
[  212.396694][ T9482]  xfrm_netlink_rcv+0x79/0x90
[  212.398186][ T9482]  netlink_unicast+0x82f/0x9e0
[  212.399805][ T9482]  netlink_sendmsg+0x805/0xb30
[  212.401376][ T9482]  __sock_sendmsg+0x21c/0x270
[  212.402870][ T9482]  ____sys_sendmsg+0x505/0x830
[  212.404400][ T9482] page last free pid 6657 tgid 6657 stack trace:
[  212.406400][ T9482]  __free_frozen_pages+0xbc4/0xd30
[  212.408017][ T9482]  __slab_free+0x303/0x3c0
[  212.409423][ T9482]  qlist_free_all+0x97/0x140
[  212.410900][ T9482]  kasan_quarantine_reduce+0x148/0x160
[  212.412627][ T9482]  __kasan_slab_alloc+0x22/0x80
[  212.414190][ T9482]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  212.415968][ T9482]  flock_lock_inode+0x21f/0x1420
[  212.417551][ T9482]  locks_lock_inode_wait+0x107/0x410
[  212.419264][ T9482]  __se_sys_flock+0x467/0x5b0
[  212.420784][ T9482]  do_syscall_64+0xfa/0x3b0
[  212.422227][ T9482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.424114][ T9482] 
[  212.424893][ T9482] Memory state around the buggy address:
[  212.426669][ T9482]  ffff88802fec4f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.429178][ T9482]  ffff88802fec5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.431733][ T9482] >ffff88802fec5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.434298][ T9482]                                      ^
[  212.436110][ T9482]  ffff88802fec5100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  212.438608][ T9482]  ffff88802fec5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  212.441075][ T9482] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  212.497317][ T9482] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  212.499686][ T9482] CPU: 1 UID: 0 PID: 9482 Comm: syz.5.1320 Not tainted syzkaller #0 PREEMPT(full) 
[  212.502674][ T9482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.505850][ T9482] Call Trace:
[  212.506945][ T9482]  <TASK>
[  212.507899][ T9482]  dump_stack_lvl+0x99/0x250
[  212.509374][ T9482]  ? __asan_memcpy+0x40/0x70
[  212.510838][ T9482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.512492][ T9482]  ? __pfx__printk+0x10/0x10
[  212.514172][ T9482]  vpanic+0x281/0x750
[  212.515474][ T9482]  ? preempt_schedule+0xae/0xc0
[  212.517035][ T9482]  ? __pfx_vpanic+0x10/0x10
[  212.518506][ T9482]  ? preempt_schedule_common+0x83/0xd0
[  212.520247][ T9482]  ? preempt_schedule+0xae/0xc0
[  212.521819][ T9482]  ? __pfx_preempt_schedule+0x10/0x10
[  212.523585][ T9482]  panic+0xb9/0xc0
[  212.524825][ T9482]  ? __pfx_panic+0x10/0x10
[  212.526358][ T9482]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  212.528238][ T9482]  ? xfrm_state_find+0x2cf2/0x5400
[  212.529878][ T9482]  check_panic_on_warn+0x89/0xb0
[  212.531491][ T9482]  ? xfrm_state_find+0x2cf2/0x5400
[  212.533133][ T9482]  end_report+0x78/0x160
[  212.534553][ T9482]  kasan_report+0x129/0x150
[  212.536005][ T9482]  ? xfrm_state_find+0x2cf2/0x5400
[  212.537645][ T9482]  xfrm_state_find+0x2cf2/0x5400
[  212.539303][ T9482]  ? stack_depot_save_flags+0x40/0x860
[  212.541037][ T9482]  ? xfrm_state_find+0x1da/0x5400
[  212.542869][ T9482]  ? __pfx_xfrm_state_find+0x10/0x10
[  212.545061][ T9482]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  212.547632][ T9482]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  212.550103][ T9482]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  212.552843][ T9482]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  212.554765][ T9482]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  212.556833][ T9482]  ? xfrm_expand_policies+0x41f/0x6a0
[  212.558898][ T9482]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  212.560618][ T9482]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  212.562510][ T9482]  ? crng_make_state+0x34c/0x700
[  212.564110][ T9482]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.565782][ T9482]  xfrm_lookup_route+0x3c/0x1c0
[  212.567613][ T9482]  sctp_v4_get_dst+0x3c7/0x1200
[  212.569158][ T9482]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[  212.570861][ T9482]  ? _get_random_bytes+0x1bd/0x210
[  212.572570][ T9482]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.574572][ T9482]  ? dst_release+0x72/0x1b0
[  212.575991][ T9482]  sctp_transport_route+0x118/0x2f0
[  212.577943][ T9482]  sctp_assoc_add_peer+0x657/0x13b0
[  212.579627][ T9482]  sctp_connect_new_asoc+0x30a/0x690
[  212.581321][ T9482]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  212.583158][ T9482]  ? __local_bh_enable_ip+0x12d/0x1c0
[  212.584963][ T9482]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  212.586843][ T9482]  ? security_sctp_bind_connect+0x7e/0x2e0
[  212.589188][ T9482]  sctp_sendmsg+0x155c/0x2810
[  212.591005][ T9482]  ? __pfx_sctp_sendmsg+0x10/0x10
[  212.592609][ T9482]  ? aa_sk_perm+0x81e/0x950
[  212.594069][ T9482]  ? __pfx_aa_sk_perm+0x10/0x10
[  212.595625][ T9482]  ? sock_rps_record_flow+0x19/0x410
[  212.597631][ T9482]  ? inet_sendmsg+0x2f4/0x370
[  212.599240][ T9482]  __sock_sendmsg+0x19c/0x270
[  212.600788][ T9482]  ____sys_sendmsg+0x505/0x830
[  212.602561][ T9482]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.604345][ T9482]  ? import_iovec+0x74/0xa0
[  212.606130][ T9482]  ___sys_sendmsg+0x21f/0x2a0
[  212.607993][ T9482]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.609720][ T9482]  ? __fget_files+0x2a/0x420
[  212.611281][ T9482]  ? __fget_files+0x3a0/0x420
[  212.612882][ T9482]  __x64_sys_sendmsg+0x19b/0x260
[  212.614521][ T9482]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.616739][ T9482]  ? rcu_is_watching+0x15/0xb0
[  212.618572][ T9482]  ? do_syscall_64+0xbe/0x3b0
[  212.620118][ T9482]  do_syscall_64+0xfa/0x3b0
[  212.621674][ T9482]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.623651][ T9482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.626062][ T9482]  ? exc_page_fault+0x9f/0xf0
[  212.627963][ T9482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.630376][ T9482] RIP: 0033:0x7fc35ef8ebe9
[  212.632177][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.639984][ T9482] RSP: 002b:00007fc35feb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.643342][ T9482] RAX: ffffffffffffffda RBX: 00007fc35f1c5fa0 RCX: 00007fc35ef8ebe9
[  212.646720][ T9482] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  212.649928][ T9482] RBP: 00007fc35f011e19 R08: 0000000000000000 R09: 0000000000000000
[  212.653137][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.656365][ T9482] R13: 00007fc35f1c6038 R14: 00007fc35f1c5fa0 R15: 00007ffde5ffa998
[  212.659587][ T9482]  </TASK>
[  212.661554][ T9482] Kernel Offset: disabled
[  212.663326][ T9482] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:12:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000033ed RDI=00000000000033ee RBP=00000000000003f8 RSP=ffffc90003826630
R8 =ffff888021290237 R9 =1ffff11004252046 R10=dffffc0000000000 R11=ffffffff854ef9f0
R12=dffffc0000000000 R13=ffffffff99af98fe R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efa6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc35feb96c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000600 CR3=00000000235c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc35f197498 00007fc35f197470 XMM03=00007fc35f1974a8 00007fc35f1974a0
XMM04=00007fc35fcfd100 00007fc35f197460 XMM05=00007fc35f197478 00007fc35f1974c0
XMM06=00007fc35f1974b8 00007fc35f1974b0 XMM07=00007fc35f1974a8 00007fc35f1974a0
XMM08=0000000000000000 00007fc35f012ee7 XMM09=0000000000000000 00007fc35f012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e0b RBX=1ffff11009608341 RCX=ffff888021bcd640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000323f700 RSP=ffffc9000323f580
R8 =ffffffff8fa38037 R9 =1ffffffff1f47006 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44df3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb278cf7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fb2781976c3 00007fb2781976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=00005555835b8405 00005555835b8350
XMM06=0000000000000000 0000000000000000 XMM07=ffff042210000601 02aa001000188004
XMM08=0100000008060601 68d200080018e003 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
