last executing test programs:

50.682491439s ago: executing program 1 (id=953):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xf6, 0x1, 0x6, [{@multicast1, 0xfffff801}, {@private=0xa010102, 0xffffffff}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x80000001}, {@private=0xa010100, 0x8}]}]}}}], 0x40}, 0x0)

50.682394596s ago: executing program 1 (id=954):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
r2 = getpid()
write$cgroup_pid(r1, &(0x7f0000000880)=r2, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)

47.64860706s ago: executing program 1 (id=957):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x0)

47.585951257s ago: executing program 1 (id=958):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

47.512616471s ago: executing program 1 (id=960):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

47.300112041s ago: executing program 1 (id=965):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4)

47.171830054s ago: executing program 32 (id=965):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4)

1.370331044s ago: executing program 0 (id=1630):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2098, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7ffffffb}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x200, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x20, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)

1.068149267s ago: executing program 3 (id=1635):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000)

1.018276847s ago: executing program 0 (id=1636):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)=""/213, 0xd5}, {0x0}, {&(0x7f0000000200)=""/43, 0x2b}], 0x7}, 0x100)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000038f0beea0000000000"], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x140, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x10f9c6, 0x637}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000440), 0x3d)
socket$kcm(0xa, 0x2, 0x0)
close(r4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x24)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x0, 0x3, {0xa, 0x4e23, 0x1, @mcast1, 0xfffffffd}}}, 0x80, 0x0}, 0x40000)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='afs_edit_dir\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d4, 0x3c}, 0x2, @in6=@remote, 0x3504, 0x4, 0x2, 0x6, 0x0, 0x1}]}]}, 0x16c}}, 0x0)

1.01534983s ago: executing program 3 (id=1638):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x38}, {0x0, 0x30}], 0x2, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

785.702412ms ago: executing program 3 (id=1645):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000000000002400000085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

693.646365ms ago: executing program 3 (id=1646):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000048"], 0xb8}}, 0x4000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x300, {{@in=@multicast1=0xe0000002, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0xfffffffd}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

640.023628ms ago: executing program 3 (id=1647):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7deb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a3000000000"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
close(0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xb3)

579.695701ms ago: executing program 2 (id=1649):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x408000, 0x8}, 0x114905, 0x7c, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010200000000000000000300000514000780080012400000000c0800114000000081050001"], 0x64}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000800)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

469.397852ms ago: executing program 2 (id=1650):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)

469.024559ms ago: executing program 2 (id=1651):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d69883c073ec10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b950600009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b7b67aa0b28d69a74ffdea61be892f0f9ff9468e42aea53ee0cb83ff180aa18b625d1667459c7cba77cff9dc8c2772fe552fecfcd1778b08381000000c0b8e14631d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9400010000ca11d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da2097f57020dd4f1f4f15edd7a0b1e24c6f79e1ea72a29c773f40f5bd9a6d7926c5c741f5aa85405273c7967d2c1a14efe0d5322cdcf2bc058ff9acb481926312f04008b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c7810ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e408910000000000f784583b63fcd46293e1ea56bd87915783a144d41669cd2c52dbb03e2b7384f100000000000000000090bd4fa6a2d30dafd3a04d373eaf151dfbbb744f0f1ce962217b32ad159f41671f002c3a25b4efbc3b193e0954f71c7f240a7cdc5bf9be12ca0e82d2a408c8f882760331612a7c3d74386b3268e0c2a95396f6d16b8309cc192295fea2d0ce983baef6deecca6b6268b6cc965f2623bac861e31026a6aba7ebf78a614092257e3a4e52b7b1628dc33a425dce56fc939b96fbb66e131ba7651b542c86650336735d315c26bae977ff5a619b2534a5d1479e9090447aa860b81b905ded2f52ab9c741fc3a05030476b159690a811416d59f9d92c84fcbf0146be0330e1127cc4bb4e4c94d603f449279874e44113e9de94fbc14891af08e20a4701f0f8788b357815cf4ca3da2066ee6604ac6ab6ec54a111bd5b1887e74eb854010cc2dc95b06ceddfbc1b914be267fc29e6cf2301291ca8de0eed796d9e5e356861349b0fc217592e962360e714bb93a2e936f70873e773b9b6c056f28a36185bb8ecdcd3332528ab2d05be93bc69a373ac9d20fa087015481cfba74612d93104db153f89d03d6ce620f1f25be68b9cb2d225711c1b288ec6464111db1b40dbce06fd1bd887d7254476c9c70fe79be0fb7810e054b6e2205c2b4b27f13751639c581dac83889ed6eea54c798f2287c9d5345b0c49f78b9aa27a9c96ce5e43b6ca11bb6375ed390773315d19b596a60500330115bb100d0ea1511e29720d5f712eedd8e165af0c1d591fdbbd84e654b0e60c338c530a9e8ae1316a889134204f9db96e870bc1c5ffc1bdb2394d77e6c751f9d87ef42f6d53293f31ff4b60912fa0777c59db1ff74ba90026eed627e0f8ab250c8c6d51d86030e6be4a8982684c12c1c435d586ce106d0b4cd0f5fabcc5fbe30db5e715646867122ef50f767e215f92d407ad1c6575eccfe25f76aaf388008ec2217c9ba0f807edebe686b420287b6e0c6f14a48c82ec45f1aa7ac2508932d0e3a5834a1a4e20bc9bb2a802304900d6bef57bd9c081b45520e7bd491a0ef1bfec4721cc70962f4d55f01bae699cb3fe31c179f00dc79140333fa4e85ec393dd01bdc5bf79677453a30c63d1561a35c5e94e3cad80136e753052b08901965293bcf5f9de9c8019a1fdebddb255427326deea4506d2cc2949df6a5c13fbcc36cbcd0f0d35602668c3bc7c7264457f161a51"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

446.6808ms ago: executing program 3 (id=1652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x8, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x1)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7}, [@CTA_TUPLE_MASTER={0x4}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x81)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x15, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x8, 0x8, "65cf8438"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x20008000)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}], 0x2}, 0x2122)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d0081", 0x7}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0xfe33)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800)

440.385938ms ago: executing program 2 (id=1653):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x3}, 0x102, 0xfffffffffffffffc, 0x0, 0x0, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000400000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000000), 0x4)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000880)={'wg1\x00', 0x400})
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000e80)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r5, @ANYRES64=r0, @ANYRES64=r5, @ANYRES64, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRESDEC=r2], &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x33}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r7, 0xff05, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xb}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x1, &(0x7f0000000780)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex, r6, 0x2, 0x0, 0x0, @void, @value=r8}, 0x20)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e22000001002b34ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000"], 0x54}}, 0x20004010)
socket$nl_audit(0x10, 0x3, 0x9)

160.221569ms ago: executing program 0 (id=1654):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000140), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc0400"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'cpuset'}, {0x2b, 'pids'}]}, 0x62)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x42, &(0x7f0000000040), 0xcf)

55.918972ms ago: executing program 0 (id=1655):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x26, 0x0, &(0x7f0000000240)="30e3f15fe2fbd2f63010aebb79dcbf0554b009bc6cf272abaab9024e82b5db35305577c04406", &(0x7f00000007c0), 0x2}, 0x50)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12)

55.743224ms ago: executing program 2 (id=1656):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

55.441744ms ago: executing program 0 (id=1657):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040027800c00018006000600800a0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

164.167µs ago: executing program 0 (id=1658):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x401d0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040), 0x4)
sendmsg$kcm(r2, 0x0, 0x4000080)
recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000b63d25a80dc9f14e53420b4", 0x12}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0x10, 0x7, 0x0)
socket$kcm(0xa, 0x3, 0x73)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x3, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x4040)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000001c0)=@del={0xe0, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {{'xts-camellia-aesni\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x40400c4)

0s ago: executing program 2 (id=1659):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19396' (ED25519) to the list of known hosts.
syzkaller login: [   48.454494][ T5833] cgroup: Unknown subsys name 'net'
[   48.565496][ T5833] cgroup: Unknown subsys name 'cpuset'
[   48.571689][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.876503][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.663668][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.668438][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.671354][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.674687][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.677871][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.681169][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.701067][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.703865][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.704334][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.710020][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.732789][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.736695][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.740434][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.744182][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.747734][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.967236][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.028040][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   54.073019][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   54.098652][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.102912][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.105708][ T5843] bridge_slave_0: entered allmulticast mode
[   54.109173][ T5843] bridge_slave_0: entered promiscuous mode
[   54.114346][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.117200][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.120058][ T5843] bridge_slave_1: entered allmulticast mode
[   54.123827][ T5843] bridge_slave_1: entered promiscuous mode
[   54.188437][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.193705][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.223327][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.226538][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.228865][ T5847] bridge_slave_0: entered allmulticast mode
[   54.232661][ T5847] bridge_slave_0: entered promiscuous mode
[   54.257309][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.259753][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.263312][ T5847] bridge_slave_1: entered allmulticast mode
[   54.266173][ T5847] bridge_slave_1: entered promiscuous mode
[   54.278638][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.281684][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.284308][ T5852] bridge_slave_0: entered allmulticast mode
[   54.287346][ T5852] bridge_slave_0: entered promiscuous mode
[   54.292416][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.295465][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.298500][ T5852] bridge_slave_1: entered allmulticast mode
[   54.302668][ T5852] bridge_slave_1: entered promiscuous mode
[   54.319494][ T5843] team0: Port device team_slave_0 added
[   54.324800][ T5843] team0: Port device team_slave_1 added
[   54.340471][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.376532][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.382107][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.385673][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.388629][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.399510][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.418447][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.422425][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.425335][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.435985][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.468519][ T5847] team0: Port device team_slave_0 added
[   54.484992][ T5852] team0: Port device team_slave_0 added
[   54.488780][ T5847] team0: Port device team_slave_1 added
[   54.504816][ T5852] team0: Port device team_slave_1 added
[   54.554485][ T5843] hsr_slave_0: entered promiscuous mode
[   54.558082][ T5843] hsr_slave_1: entered promiscuous mode
[   54.562578][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.565521][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.576697][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.594706][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.597341][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.607359][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.613841][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.616869][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.626928][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.637135][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.639854][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.650122][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.727105][ T5847] hsr_slave_0: entered promiscuous mode
[   54.729861][ T5847] hsr_slave_1: entered promiscuous mode
[   54.733196][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   54.735500][ T5847] Cannot create hsr debugfs directory
[   54.758207][ T5852] hsr_slave_0: entered promiscuous mode
[   54.761289][ T5852] hsr_slave_1: entered promiscuous mode
[   54.763913][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   54.766078][ T5852] Cannot create hsr debugfs directory
[   54.964698][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.979482][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.985523][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.990648][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.042529][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.047329][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.054043][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.059575][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.109834][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.122021][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.133097][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.138771][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.218794][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.251573][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.259489][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.270529][  T326] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.273209][  T326] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.284661][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.288321][  T326] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.291019][  T326] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.301502][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   55.316909][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.319310][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.329916][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.332364][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.339187][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   55.352833][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.355809][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.361654][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.364069][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.453867][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.538876][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.580176][ T5847] veth0_vlan: entered promiscuous mode
[   55.588993][ T5847] veth1_vlan: entered promiscuous mode
[   55.616768][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.628279][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.639738][ T5847] veth0_macvtap: entered promiscuous mode
[   55.646533][ T5847] veth1_macvtap: entered promiscuous mode
[   55.670365][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.679310][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.700735][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.707371][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.720052][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.723459][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.730141][ T5852] veth0_vlan: entered promiscuous mode
[   55.734819][ T5843] veth0_vlan: entered promiscuous mode
[   55.753511][ T5843] veth1_vlan: entered promiscuous mode
[   55.765485][ T5852] veth1_vlan: entered promiscuous mode
[   55.792975][ T5235] Bluetooth: hci2: command tx timeout
[   55.792989][ T5850] Bluetooth: hci0: command tx timeout
[   55.793215][   T54] Bluetooth: hci1: command tx timeout
[   55.824520][ T5843] veth0_macvtap: entered promiscuous mode
[   55.837965][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.838161][ T5843] veth1_macvtap: entered promiscuous mode
[   55.845769][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.883459][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.885294][ T5852] veth0_macvtap: entered promiscuous mode
[   55.887270][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.894211][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.903129][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.905869][ T5852] veth1_macvtap: entered promiscuous mode
[   55.926107][ T5888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.932738][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.935914][ T5888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.942525][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.954500][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.957326][ T5888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.963913][ T5888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.974288][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.987677][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.993412][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.006919][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.065576][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.068349][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.071763][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.077606][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.101064][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.105089][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.109093][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.113594][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.123132][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.226392][   T54] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[   56.235484][   T54] Bluetooth: hci0: Unable to find connection for big 0x00
[   56.357286][ T5923] netlink: 'syz.0.5': attribute type 3 has an invalid length.
[   56.360342][ T5923] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.608263][    C1] hrtimer: interrupt took 37278 ns
[   56.966705][ T5947] netlink: 360 bytes leftover after parsing attributes in process `syz.2.15'.
[   57.010825][ T5944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.330011][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'.
[   57.706725][  T793] cfg80211: failed to load regulatory.db
[   57.871843][   T54] Bluetooth: hci1: command tx timeout
[   57.873175][ T5235] Bluetooth: hci0: command tx timeout
[   57.887587][ T5975] netlink: 277 bytes leftover after parsing attributes in process `syz.1.28'.
[   58.457478][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'.
[   58.466098][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   58.944365][ T6003] netlink: 'syz.0.40': attribute type 40 has an invalid length.
[   58.971237][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.355877][ T6009] netlink: 'syz.2.41': attribute type 2 has an invalid length.
[   59.366012][ T6009] netlink: 22 bytes leftover after parsing attributes in process `syz.2.41'.
[   59.951131][ T5235] Bluetooth: hci0: command tx timeout
[   59.951498][   T54] Bluetooth: hci1: command tx timeout
[   60.323063][   T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   60.325878][   T54] Bluetooth: hci2: Injecting HCI hardware error event
[   60.328476][   T54] Bluetooth: hci2: hardware error 0x00
[   60.846255][ T6045] netlink: 'syz.2.58': attribute type 10 has an invalid length.
[   60.874880][ T6045] team0: Port device geneve1 added
[   60.966234][ T6053] netlink: 104 bytes leftover after parsing attributes in process `syz.0.62'.
[   61.087145][ T6061] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   61.137260][ T6065] netlink: zone id is out of range
[   61.139697][ T6065] netlink: zone id is out of range
[   61.157859][ T6065] netlink: zone id is out of range
[   61.159711][ T6065] netlink: zone id is out of range
[   61.170576][ T6065] netlink: zone id is out of range
[   61.173026][ T6065] netlink: zone id is out of range
[   61.174739][ T6065] netlink: zone id is out of range
[   61.176794][ T6065] netlink: zone id is out of range
[   61.178564][ T6065] netlink: zone id is out of range
[   61.180189][ T6065] netlink: zone id is out of range
[   61.689119][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'.
[   61.836392][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'.
[   62.054843][ T5235] Bluetooth: hci1: command tx timeout
[   62.054876][ T5850] Bluetooth: hci0: command tx timeout
[   62.188634][ T6123] netlink: 'syz.1.95': attribute type 2 has an invalid length.
[   62.194033][ T6123] netlink: 'syz.1.95': attribute type 4 has an invalid length.
[   62.196964][ T6123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.95'.
[   62.283575][ T6127] =======================================================
[   62.283575][ T6127] WARNING: The mand mount option has been deprecated and
[   62.283575][ T6127]          and is ignored by this kernel. Remove the mand
[   62.283575][ T6127]          option from the mount to silence this warning.
[   62.283575][ T6127] =======================================================
[   62.304149][ T6127] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   62.430982][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   62.508234][ T6133] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   62.516855][ T6133] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.100'.
[   63.847709][ T6193] netlink: 'syz.2.128': attribute type 21 has an invalid length.
[   63.850361][ T6193] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   63.854691][ T6193] netlink: 100 bytes leftover after parsing attributes in process `syz.2.128'.
[   63.923420][ T6197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.130'.
[   63.941838][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[   63.944765][ T6200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[   63.947834][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'.
[   64.355715][ T6224] warning: `syz.1.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.409016][ T6224] netlink: 10 bytes leftover after parsing attributes in process `syz.1.141'.
[   64.556511][ T6236] delete_channel: no stack
[   64.707286][ T6248] Zero length message leads to an empty skb
[   66.219287][ T6321] net_ratelimit: 163 callbacks suppressed
[   66.219301][ T6321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.493426][ T6349] openvswitch: netlink: Unknown key attributes 1
[   66.707364][ T6370] netlink: 'syz.2.209': attribute type 3 has an invalid length.
[   66.758528][   T33] audit: type=1107 audit(1757555822.487:2): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   66.890066][ T6379] __nla_validate_parse: 7 callbacks suppressed
[   66.890076][ T6379] netlink: 10 bytes leftover after parsing attributes in process `syz.0.211'.
[   67.412832][ T6410] netlink: 277 bytes leftover after parsing attributes in process `syz.2.221'.
[   67.493063][ T6416] netlink: 'syz.2.225': attribute type 2 has an invalid length.
[   67.932669][ T6447] netlink: 'syz.1.238': attribute type 21 has an invalid length.
[   67.935600][ T6447] netlink: 156 bytes leftover after parsing attributes in process `syz.1.238'.
[   67.940293][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'.
[   68.007158][ T6451] netlink: 'syz.1.239': attribute type 2 has an invalid length.
[   68.011190][ T6451] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.049951][ T6453] netlink: 'syz.1.240': attribute type 11 has an invalid length.
[   68.053367][ T6453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.240'.
[   68.058310][ T6453] netlink: 'syz.1.240': attribute type 11 has an invalid length.
[   68.062468][ T6453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.240'.
[   68.066731][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.103156][ T6455] netlink: 'syz.1.241': attribute type 21 has an invalid length.
[   68.106177][ T6455] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.350433][ T6470] netlink: 277 bytes leftover after parsing attributes in process `syz.1.248'.
[   68.649834][ T6484] netlink: 'syz.1.255': attribute type 39 has an invalid length.
[   68.676320][ T6486] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   68.834420][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'.
[   69.273635][ T5295] udevd[5295]: worker [5844] terminated by signal 33 (Unknown signal 33)
[   69.279372][ T5295] udevd[5295]: worker [5844] failed while handling '/devices/virtual/block/loop0'
[   69.345418][ T6514] GPL: port 1(gretap0) entered blocking state
[   69.348486][ T6514] GPL: port 1(gretap0) entered disabled state
[   69.353025][ T6514] gretap0: entered allmulticast mode
[   69.358710][ T6514] gretap0: entered promiscuous mode
[   69.506251][ T5295] udevd[5295]: worker [5853] terminated by signal 33 (Unknown signal 33)
[   69.510310][ T5295] udevd[5295]: worker [5853] failed while handling '/devices/virtual/block/loop2'
[   70.003335][ T6542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.281'.
[   70.026099][ T6546] tap0: tun_chr_ioctl cmd 1074025677
[   70.028171][ T6546] tap0: linktype set to 6
[   70.634700][ T6582] netlink: 48 bytes leftover after parsing attributes in process `syz.0.299'.
[   70.679544][ T6584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.076741][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.080842][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.128940][ T6611] Driver unsupported XDP return value 0 on prog  (id 93) dev N/A, expect packet loss!
[   71.266560][ T6619] netlink: 'syz.1.314': attribute type 6 has an invalid length.
[   71.269860][ T6619] netlink: 'syz.1.314': attribute type 5 has an invalid length.
[   71.565942][ T6636] xt_limit: Overflow, try lower: 271964/0
[   71.658157][ T6643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.864123][ T6659] netlink: 'syz.0.331': attribute type 10 has an invalid length.
[   72.421528][ T6679] netlink: 'syz.0.337': attribute type 10 has an invalid length.
[   72.424152][ T6679] __nla_validate_parse: 6 callbacks suppressed
[   72.424211][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.337'.
[   72.429824][ T6679] team0: entered promiscuous mode
[   72.434330][ T6679] team_slave_0: entered promiscuous mode
[   72.437146][ T6679] team_slave_1: entered promiscuous mode
[   72.439571][ T6679] team0: entered allmulticast mode
[   72.441885][ T6679] team_slave_0: entered allmulticast mode
[   72.444027][ T6679] team_slave_1: entered allmulticast mode
[   72.448472][ T6679] bridge0: port 3(team0) entered blocking state
[   72.453464][ T6679] bridge0: port 3(team0) entered disabled state
[   72.476485][ T6679] bridge0: port 3(team0) entered blocking state
[   72.479187][ T6679] bridge0: port 3(team0) entered forwarding state
[   72.975302][ T6708] option changes via remount are deprecated (pid=6705 comm=syz.1.350)
[   73.583981][ T6712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.352'.
[   73.587213][ T6712] netlink: zone id is out of range
[   73.589065][ T6712] netlink: zone id is out of range
[   73.590844][ T6712] netlink: get zone limit has 8 unknown bytes
[   73.764515][ T6722] netlink: 196 bytes leftover after parsing attributes in process `syz.0.357'.
[   73.965149][   T54] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   74.263008][ T6746] netlink: 'syz.1.369': attribute type 13 has an invalid length.
[   74.265767][ T6746] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.369'.
[   74.380079][ T6757] delete_channel: no stack
[   74.384736][ T6757] delete_channel: no stack
[   74.406352][ T6759] netlink: 'syz.0.375': attribute type 29 has an invalid length.
[   74.409868][ T6759] netlink: 'syz.0.375': attribute type 29 has an invalid length.
[   74.414984][ T6759] netlink: 'syz.0.375': attribute type 29 has an invalid length.
[   74.512441][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'.
[   74.515883][ T6765] openvswitch: netlink: Missing key (keys=40, expected=100)
[   74.543910][ T6755] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.374'.
[   74.647788][ T6776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.382'.
[   74.652217][ T6776] unsupported nlmsg_type 40
[   75.089483][ T6796] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   75.141958][ T6798] netlink: 'syz.2.392': attribute type 13 has an invalid length.
[   75.410387][ T5850] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   75.699622][ T6831] netlink: 'syz.1.409': attribute type 10 has an invalid length.
[   75.711932][ T6831] lo: entered promiscuous mode
[   75.718962][ T6831] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.033482][ T5850] Bluetooth: hci0: command tx timeout
[   76.115279][ T6865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.425'.
[   76.119554][ T6865] netlink: 'syz.2.425': attribute type 3 has an invalid length.
[   76.276797][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'.
[   76.907559][ T6892] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.438'.
[   77.194277][ T6910] syz.1.444 uses obsolete (PF_INET,SOCK_PACKET)
[   77.980147][ T6938] netlink: 'syz.1.458': attribute type 10 has an invalid length.
[   77.983642][ T6938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'.
[   77.986851][ T6938] lo: left promiscuous mode
[   77.989622][ T6938] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   77.993137][ T6938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.214008][ T6947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'.
[   78.219935][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.256887][ T6947] bridge_slave_0 (unregistering): left promiscuous mode
[   78.262852][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.380423][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[   79.045464][ T6974] netlink: zone id is out of range
[   79.047620][ T6974] netlink: zone id is out of range
[   79.049549][ T6974] netlink: zone id is out of range
[   79.054659][ T6974] netlink: zone id is out of range
[   79.056640][ T6974] netlink: zone id is out of range
[   79.058675][ T6974] netlink: zone id is out of range
[   79.060965][ T6974] netlink: zone id is out of range
[   79.063040][ T6974] netlink: zone id is out of range
[   79.065428][ T6974] netlink: zone id is out of range
[   79.183093][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'.
[   79.186737][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'.
[   79.267116][ T6983] syzkaller0: entered promiscuous mode
[   79.269593][ T6983] syzkaller0: entered allmulticast mode
[   79.290960][ T6985] netlink: 'syz.2.479': attribute type 10 has an invalid length.
[   79.402875][ T5850] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[   79.909840][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'.
[   80.383704][ T7008] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.488'.
[   80.508655][ T7019] netlink: 'syz.2.494': attribute type 2 has an invalid length.
[   80.513540][ T7019] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.494'.
[   80.518145][ T7019] nbd: must specify a device to reconfigure
[   80.774080][ T7043] veth1_macvtap: left promiscuous mode
[   80.862028][ T7043] veth1_macvtap: entered promiscuous mode
[   80.866820][ T7043] macsec0: entered promiscuous mode
[   80.870251][ T7043] macsec0: entered allmulticast mode
[   80.873701][ T7043] veth1_macvtap: entered allmulticast mode
[   81.500744][ T7066] netlink: 'syz.0.515': attribute type 19 has an invalid length.
[   81.504214][ T7066] netlink: 55 bytes leftover after parsing attributes in process `syz.0.515'.
[   82.039682][ T7080] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   82.044894][ T7080] netlink: 'syz.1.520': attribute type 2 has an invalid length.
[   82.048928][ T7080] netlink: 'syz.1.520': attribute type 7 has an invalid length.
[   82.052157][ T7080] netlink: 21 bytes leftover after parsing attributes in process `syz.1.520'.
[   82.055771][ T7080] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   82.058904][ T7080] netlink: 'syz.1.520': attribute type 2 has an invalid length.
[   82.064184][ T7080] netlink: 'syz.1.520': attribute type 7 has an invalid length.
[   82.498297][ T7095] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   83.023313][ T7118] __nla_validate_parse: 2 callbacks suppressed
[   83.023372][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[   83.039855][ T7118] netlink: 204 bytes leftover after parsing attributes in process `syz.1.537'.
[   84.052559][ T7143] netlink: 'syz.1.547': attribute type 4 has an invalid length.
[   84.102313][ T7153] : entered promiscuous mode
[   84.132820][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.136286][ T7157] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.143226][ T7157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.554'.
[   84.148242][ T7157] batadv0: entered promiscuous mode
[   84.150164][ T7157] batadv0: entered allmulticast mode
[   84.156415][ T7157] bond0: (slave batadv0): Releasing backup interface
[   84.159996][ T7157] bridge0: port 3(batadv0) entered blocking state
[   84.163330][ T7157] bridge0: port 3(batadv0) entered disabled state
[   84.251485][ T5888] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   84.255571][ T5888] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   84.636575][ T7195] validate_nla: 3 callbacks suppressed
[   84.636780][ T7195] netlink: 'syz.1.571': attribute type 2 has an invalid length.
[   85.569534][ T7206] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.575'.
[   85.618692][ T7208] netlink: 'syz.1.576': attribute type 1 has an invalid length.
[   85.768258][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.582'.
[   86.015277][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[   86.024555][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[   86.039661][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'.
[   86.383163][ T7258] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.599'.
[   86.531824][ T7260] netlink: 'syz.0.600': attribute type 9 has an invalid length.
[   86.537497][ T7260] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.600'.
[   86.658496][ T7266] netlink: 'syz.1.603': attribute type 2 has an invalid length.
[   86.952983][ T7283] netlink: 'syz.1.611': attribute type 4 has an invalid length.
[   87.715700][ T7313] netlink: 'syz.2.624': attribute type 2 has an invalid length.
[   87.720816][ T7313] nbd: must specify at least one socket
[   88.046726][ T7318] __nla_validate_parse: 7 callbacks suppressed
[   88.046736][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[   88.120841][ T7326] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[   88.137558][ T7326] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[   88.142662][ T7326] netlink: 'syz.1.630': attribute type 29 has an invalid length.
[   88.242489][ T7336] net_ratelimit: 10 callbacks suppressed
[   88.242503][ T7336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.317653][ T7342] netlink: 156 bytes leftover after parsing attributes in process `syz.0.638'.
[   88.442952][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'.
[   88.732343][ T7367] syzkaller1: tun_chr_ioctl cmd 1074025676
[   88.734368][ T7367] syzkaller1: owner set to 778
[   88.906038][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.653'.
[   89.486575][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[   89.825007][ T7388] netlink: 'syz.0.659': attribute type 10 has an invalid length.
[   90.139266][ T7388] team0: Device ipvlan1 failed to register rx_handler
[   91.009755][ T7394] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[   91.016904][ T7395] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[   91.024507][ T7398] netlink: 'syz.1.663': attribute type 29 has an invalid length.
[   91.187474][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'.
[   91.319818][ T7425] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.676'.
[   91.627671][ T7442] netlink: 13 bytes leftover after parsing attributes in process `syz.1.685'.
[   91.722994][ T7452] netlink: 'syz.2.688': attribute type 1 has an invalid length.
[   91.837119][ T7459] netlink: 'syz.2.693': attribute type 29 has an invalid length.
[   91.845800][ T7459] netlink: 'syz.2.693': attribute type 29 has an invalid length.
[   91.854374][ T7459] netlink: 'syz.2.693': attribute type 29 has an invalid length.
[   91.864861][ T7459] netlink: 'syz.2.693': attribute type 29 has an invalid length.
[   92.104259][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.112010][ T7484] bridge0: entered allmulticast mode
[   92.217132][ T7490] netlink: 'syz.1.708': attribute type 10 has an invalid length.
[   92.219948][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.708'.
[   92.223592][ T7490] ipvlan1: entered promiscuous mode
[   92.225818][ T7490] ipvlan1: entered allmulticast mode
[   92.228076][ T7490] veth0_vlan: entered allmulticast mode
[   92.232017][ T7490] bridge0: port 4(ipvlan1) entered blocking state
[   92.235029][ T7490] bridge0: port 4(ipvlan1) entered disabled state
[   92.240029][ T7490] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   93.306563][ T7522] wg0 speed is unknown, defaulting to 1000
[   93.309473][ T7522] wg0 speed is unknown, defaulting to 1000
[   93.324920][ T7522] wg0 speed is unknown, defaulting to 1000
[   93.381815][ T7522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.503951][ T7522] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   94.127465][ T7536] proc: Unknown parameter 'u'
[   94.159112][ T7522] wg0 speed is unknown, defaulting to 1000
[   94.202666][ T7522] wg0 speed is unknown, defaulting to 1000
[   94.236474][ T7522] wg0 speed is unknown, defaulting to 1000
[   94.412631][ T7559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.735'.
[   94.415646][ T7559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.735'.
[   94.614240][ T7575] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.741'.
[   94.765047][ T7584] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   94.930020][ T7592] C: renamed from team_slave_0 (while UP)
[   95.061209][ T7594] netlink: 14 bytes leftover after parsing attributes in process `syz.0.746'.
[   95.479623][ T7592] validate_nla: 2 callbacks suppressed
[   95.479637][ T7592] netlink: 'syz.0.746': attribute type 4 has an invalid length.
[   95.485560][ T7592] netlink: 116 bytes leftover after parsing attributes in process `syz.0.746'.
[   95.490075][ T7592] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   96.220305][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.754'.
[   96.227179][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.0.754'.
[   96.485718][ T7619] netlink: 'syz.1.761': attribute type 11 has an invalid length.
[   96.490628][ T7619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.761'.
[   96.568947][ T7624] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.762'.
[   96.753578][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[   96.756903][ T7632] openvswitch: netlink: IPv6 tunnel dst address is zero
[   96.848821][ T7643] netlink: 'syz.2.772': attribute type 12 has an invalid length.
[   97.943481][ T7658] netlink: 'syz.1.779': attribute type 10 has an invalid length.
[   97.948715][ T7658] batman_adv: batadv0: Adding interface: virt_wifi0
[   97.952997][ T7658] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.974559][ T7658] batman_adv: batadv0: Interface activated: virt_wifi0
[   98.047271][ T7667] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[   98.225834][ T7678] netlink: 'syz.2.789': attribute type 21 has an invalid length.
[   98.322037][ T7685] IPv6: Can't replace route, no match found
[   98.330570][ T7685] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   99.264652][ T7723] D`: renamed from hsr_slave_1 (while UP)
[   99.454583][ T7732] __nla_validate_parse: 7 callbacks suppressed
[   99.455338][ T7732] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.814'.
[  102.735704][ T7774] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  102.738417][ T7774] D`: hsr_addr_subst_dest: Unknown node
[  103.145381][ T7808] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.846'.
[  103.334963][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[  103.888515][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  104.073834][ T7822] netlink: 176 bytes leftover after parsing attributes in process `syz.2.853'.
[  104.234969][ T7824] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  104.253527][ T7828] netlink: 56429 bytes leftover after parsing attributes in process `syz.0.856'.
[  104.331585][ T7833] netlink: 'syz.0.856': attribute type 2 has an invalid length.
[  104.378304][ T7832] netlink: 260 bytes leftover after parsing attributes in process `syz.2.858'.
[  104.384603][ T7832] netlink: 'syz.2.858': attribute type 1 has an invalid length.
[  104.413771][ T7835] netlink: 'syz.1.859': attribute type 13 has an invalid length.
[  105.620074][ T7885] netlink: 64 bytes leftover after parsing attributes in process `syz.0.879'.
[  105.653908][ T7885] sock: sock_timestamping_bind_phc: sock not bind to device
[  105.789215][ T7894] C: renamed from team_slave_0 (while UP)
[  105.800409][ T7894] netlink: 152 bytes leftover after parsing attributes in process `syz.1.883'.
[  105.940612][ T7903] raw_sendmsg: syz.1.885 forgot to set AF_INET. Fix it!
[  106.878275][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.891'.
[  107.242552][ T7930] netlink: 'syz.2.899': attribute type 2 has an invalid length.
[  107.313538][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'.
[  107.573260][ T7949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.909'.
[  107.625177][ T7954] netlink: 'syz.1.910': attribute type 29 has an invalid length.
[  107.629393][ T7954] netlink: 'syz.1.910': attribute type 29 has an invalid length.
[  107.811325][ T7963] netlink: 'syz.1.915': attribute type 2 has an invalid length.
[  107.814627][ T7963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.915'.
[  108.236105][ T7982] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.923'.
[  108.389284][ T7994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'.
[  108.402927][ T7994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.929'.
[  109.167590][ T8004] netlink: 'syz.2.932': attribute type 10 has an invalid length.
[  109.300246][ T8003] netlink: 'syz.2.932': attribute type 29 has an invalid length.
[  109.488782][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'.
[  109.488814][ T8010] netlink: 'syz.1.934': attribute type 2 has an invalid length.
[  110.585370][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.590160][ T8004] team0: Port device bond0 added
[  110.780520][ T8032] netlink: 168 bytes leftover after parsing attributes in process `syz.2.945'.
[  114.490425][ T5850] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  114.610036][ T8060] netlink: 'syz.0.956': attribute type 40 has an invalid length.
[  115.273810][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.278171][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.284685][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.289843][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.294074][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.325813][ T8084] wg0 speed is unknown, defaulting to 1000
[  115.489604][ T8084] chnl_net:caif_netlink_parms(): no params data found
[  116.298880][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.303543][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.306118][ T8084] bridge_slave_0: entered allmulticast mode
[  116.309496][ T8084] bridge_slave_0: entered promiscuous mode
[  116.324440][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.327904][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.330851][ T8084] bridge_slave_1: entered allmulticast mode
[  116.334842][ T8084] bridge_slave_1: entered promiscuous mode
[  116.365893][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.373551][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.406686][ T8084] team0: Port device team_slave_0 added
[  116.412133][ T8084] team0: Port device team_slave_1 added
[  116.441530][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.444336][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.454920][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.460404][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.463633][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.474271][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.521378][   T54] Bluetooth: hci1: command tx timeout
[  116.524649][ T8084] hsr_slave_0: entered promiscuous mode
[  116.527424][ T8084] hsr_slave_1: entered promiscuous mode
[  116.530096][ T8084] debugfs: 'hsr0' already exists in 'hsr'
[  116.538769][ T8106] netlink: 'syz.0.973': attribute type 10 has an invalid length.
[  116.544615][ T8084] Cannot create hsr debugfs directory
[  116.561611][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.565358][ T8106] bond0: entered promiscuous mode
[  116.567402][ T8106] bond_slave_0: entered promiscuous mode
[  116.569784][ T8106] bond_slave_1: entered promiscuous mode
[  116.574939][ T8106] bond0: entered allmulticast mode
[  116.576961][ T8106] bond_slave_0: entered allmulticast mode
[  116.579348][ T8106] bond_slave_1: entered allmulticast mode
[  116.583188][ T8106] team0: Port device bond0 added
[  116.913502][ T8084] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  116.929100][ T8084] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  116.944916][ T8084] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  116.950558][ T8084] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  116.976206][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.978918][ T8084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.981773][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.984456][ T8084] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.025335][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.055245][ T1401] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.058542][ T1401] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.072422][ T8084] 8021q: adding VLAN 0 to HW filter on device team0
[  117.082916][ T1401] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.085542][ T1401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.090304][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.092772][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.163167][ T8132] syzkaller0: entered promiscuous mode
[  117.165276][ T8132] syzkaller0: entered allmulticast mode
[  117.211231][ T8135] netlink: 'syz.2.982': attribute type 10 has an invalid length.
[  117.215087][ T8135] veth1_vlan: entered allmulticast mode
[  117.238304][ T8135] team0: Device veth1_vlan failed to register rx_handler
[  117.321955][   T54] Bluetooth: hci0: command tx timeout
[  118.585338][ T8146] netlink: 'syz.2.986': attribute type 29 has an invalid length.
[  118.589934][ T8147] netlink: 'syz.2.986': attribute type 29 has an invalid length.
[  118.635166][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.685829][ T8084] veth0_vlan: entered promiscuous mode
[  118.693315][ T8084] veth1_vlan: entered promiscuous mode
[  118.716891][ T8084] veth0_macvtap: entered promiscuous mode
[  118.724012][ T8084] veth1_macvtap: entered promiscuous mode
[  118.742541][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.765072][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.782241][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.791739][ T5888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.805526][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.809931][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.921622][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.924931][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.945234][  T326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.948308][  T326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.011641][ T8174] openvswitch: netlink: Message has 4 unknown bytes.
[  119.168008][ T8190] netlink: 'syz.2.1006': attribute type 21 has an invalid length.
[  119.174707][ T8190] netlink: 'syz.2.1006': attribute type 4 has an invalid length.
[  119.178512][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1006'.
[  119.191405][ T8193] netlink: 'syz.0.1007': attribute type 11 has an invalid length.
[  119.317949][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'.
[  119.385691][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'.
[  119.395590][   T54] Bluetooth: hci0: command tx timeout
[  119.426473][ T8217] netlink: 'syz.3.1020': attribute type 21 has an invalid length.
[  119.429919][ T8217] netlink: 'syz.3.1020': attribute type 6 has an invalid length.
[  119.434577][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1020'.
[  120.534335][ T8240] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.1028'.
[  120.655645][ T8250] netlink: 'syz.2.1033': attribute type 3 has an invalid length.
[  120.674801][ T8251] netlink: 'syz.3.1032': attribute type 1 has an invalid length.
[  120.909494][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'.
[  121.484569][   T54] Bluetooth: hci0: command tx timeout
[  123.551451][   T54] Bluetooth: hci0: command tx timeout
[  126.370357][ T8343] netlink: 'syz.0.1073': attribute type 3 has an invalid length.
[  126.383338][ T8343] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  126.386814][ T8343] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1073'.
[  126.412299][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'.
[  126.694603][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'.
[  126.984431][ T8387] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1092'.
[  127.257157][ T8397] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1097'.
[  127.780484][ T8422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1108'.
[  128.129899][   T54] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9
[  128.182687][ T8459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.187484][ T8459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.260804][ T8467] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1124'.
[  128.263991][ T8467] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1124'.
[  128.751115][ T8479] Dead loop on virtual device ip6_vti0, fix it urgently!
[  129.234455][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'.
[  129.849366][ T8492] netlink: 'syz.2.1134': attribute type 1 has an invalid length.
[  130.035950][ T8509] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1142'.
[  130.926689][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.966465][ T8526] IPv6: NLM_F_CREATE should be specified when creating new route
[  131.143395][ T8536] netlink: 'syz.2.1153': attribute type 10 has an invalid length.
[  131.303206][ T8557] : renamed from hsr0 (while UP)
[  131.308075][ T8559] netlink: 'syz.2.1164': attribute type 2 has an invalid length.
[  131.647956][ T8579] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  131.749517][ T8585] netlink: 'syz.0.1175': attribute type 29 has an invalid length.
[  131.756130][ T8585] netlink: 'syz.0.1175': attribute type 10 has an invalid length.
[  132.102494][ T8595] netlink: 'syz.0.1179': attribute type 27 has an invalid length.
[  132.106831][ T8595] netlink: 'syz.0.1179': attribute type 3 has an invalid length.
[  132.110337][ T8595] __nla_validate_parse: 6 callbacks suppressed
[  132.110347][ T8595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1179'.
[  132.528146][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'.
[  132.539166][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.541583][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.587636][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'.
[  133.348290][ T8638] netlink: 'syz.0.1199': attribute type 23 has an invalid length.
[  134.221971][ T8666] netlink: 'syz.3.1210': attribute type 2 has an invalid length.
[  134.226149][ T8666] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  134.229266][ T8666] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  134.504011][ T8679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1216'.
[  134.540305][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'.
[  134.575248][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1218'.
[  134.579291][ T8685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.585855][ T8687] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  134.676598][ T8697] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1224'.
[  135.331136][ T8718] netlink: 'syz.2.1233': attribute type 3 has an invalid length.
[  135.333867][ T8718] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1233'.
[  135.387404][ T8726] netlink: 'syz.2.1237': attribute type 10 has an invalid length.
[  135.474701][ T8729] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1237'.
[  135.513631][ T8726] team0 (unregistering): Port device team_slave_0 removed
[  135.519525][ T8726] team0 (unregistering): Port device team_slave_1 removed
[  136.347178][ T8726] team0 (unregistering): Port device geneve1 removed
[  136.363440][ T8726] team0 (unregistering): Port device bond0 removed
[  136.518677][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.566793][ T8751] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1249'.
[  137.178597][ T8802] __nla_validate_parse: 1 callbacks suppressed
[  137.178610][ T8802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1272'.
[  138.363520][ T8821] bridge0: port 3(team0) entered disabled state
[  138.365864][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.386559][ T8821] bridge0: entered allmulticast mode
[  138.402964][ T8821] bridge0: port 3(team0) entered disabled state
[  138.407966][ T8821] bridge_slave_1: left allmulticast mode
[  138.411234][ T8821] bridge_slave_1: left promiscuous mode
[  138.413644][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.425285][ T8821] bridge_slave_0: left allmulticast mode
[  138.427718][ T8821] bridge_slave_0: left promiscuous mode
[  138.430317][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.602997][   T54] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  138.936888][ T8843] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  140.172043][ T8900] validate_nla: 1 callbacks suppressed
[  140.172059][ T8900] netlink: 'syz.0.1314': attribute type 15 has an invalid length.
[  140.177903][ T8900] netlink: 11318 bytes leftover after parsing attributes in process `syz.0.1314'.
[  140.465969][ T8916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1322'.
[  140.493829][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'.
[  140.510763][ T8918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'.
[  140.611385][ T8927] netlink: 'syz.2.1325': attribute type 12 has an invalid length.
[  140.614674][ T8927] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1325'.
[  141.064119][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'.
[  141.090828][ T8957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1339'.
[  141.095609][ T8957] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1339'.
[  141.099682][ T8957] netlink: 'syz.3.1339': attribute type 5 has an invalid length.
[  141.106851][ T8957] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1339'.
[  141.487942][ T8975] netlink: 'syz.2.1348': attribute type 3 has an invalid length.
[  141.948689][ T8991] netlink: 'syz.2.1356': attribute type 7 has an invalid length.
[  142.037220][ T8996] netlink: 'syz.2.1358': attribute type 21 has an invalid length.
[  142.040582][ T8996] netlink: 'syz.2.1358': attribute type 4 has an invalid length.
[  142.044185][ T8996] netlink: 'syz.2.1358': attribute type 5 has an invalid length.
[  142.077164][ T8997] sctp: [Deprecated]: syz.0.1357 (pid 8997) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.077164][ T8997] Use struct sctp_sack_info instead
[  142.912277][ T9036] ksmbd: Unknown IPC event: 1, ignore.
[  142.983546][ T9034] __nla_validate_parse: 4 callbacks suppressed
[  142.983609][ T9034] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1376'.
[  143.133984][ T9058] netlink: 'syz.0.1388': attribute type 1 has an invalid length.
[  143.171498][ T9060] pim6reg0: tun_chr_ioctl cmd 1074025677
[  143.173632][ T9060] pim6reg0: linktype set to 805
[  143.214939][   T54] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  143.324201][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.599510][   T54] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  143.885495][ T9099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1406'.
[  144.685608][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'.
[  144.884105][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  144.887996][ T9145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  144.894224][ T9152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  145.158828][ T9162] ]X: renamed from veth0_vlan (while UP)
[  145.255847][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1438'.
[  146.681351][ T9193] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  146.794023][ T9197] netlink: 'syz.2.1450': attribute type 11 has an invalid length.
[  146.797618][ T9197] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1450'.
[  147.628627][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.650594][ T9212] netlink: 'syz.0.1456': attribute type 1 has an invalid length.
[  148.890303][ T9249] netlink: 'syz.0.1471': attribute type 4 has an invalid length.
[  148.894154][ T9249] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1471'.
[  149.048575][ T9260] sit0: entered allmulticast mode
[  149.056525][ T9260] sit0: entered promiscuous mode
[  149.416652][ T9268] netlink: 'syz.2.1477': attribute type 3 has an invalid length.
[  149.419307][ T9268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1477'.
[  150.915385][ T9304] netlink: 'syz.0.1492': attribute type 39 has an invalid length.
[  151.048221][ T9310] xt_HMARK: spi-set and port-set can't be combined
[  151.134793][ T9314] netlink: 'syz.0.1496': attribute type 29 has an invalid length.
[  151.333751][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  151.337697][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  151.428161][ T9340] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1506'.
[  151.436970][ T9332] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1506'.
[  151.447601][ T9340] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1506'.
[  154.421756][ T9361] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1517'.
[  154.500280][ T9368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1520'.
[  154.578723][ T9376] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.399418][ T9419] C: renamed from team_slave_0
[  155.411801][ T9419] netlink: 'syz.2.1545': attribute type 3 has an invalid length.
[  155.420994][ T9419] netlink: 'syz.2.1545': attribute type 1 has an invalid length.
[  155.424079][ T9419] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  155.915615][ T9444] syzkaller0: entered promiscuous mode
[  155.918239][ T9444] syzkaller0: entered allmulticast mode
[  156.065964][ T9448] netlink: 18316 bytes leftover after parsing attributes in process `syz.3.1558'.
[  156.795190][ T9454] netlink: 'syz.0.1561': attribute type 29 has an invalid length.
[  156.811402][ T9455] netlink: 'syz.0.1561': attribute type 29 has an invalid length.
[  156.815738][ T9456] netlink: 'syz.0.1561': attribute type 29 has an invalid length.
[  156.822965][ T9454] netlink: 'syz.0.1561': attribute type 29 has an invalid length.
[  156.905313][ T9466] netlink: 'syz.0.1566': attribute type 19 has an invalid length.
[  156.907292][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'.
[  157.006650][ T9469] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  157.123362][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'.
[  157.127163][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'.
[  157.139059][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'.
[  157.435185][ T9480] netlink: 'syz.0.1570': attribute type 39 has an invalid length.
[  157.438493][ T9482] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1571'.
[  157.474267][ T9484] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.672564][ T9491] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.825039][ T9491] syzkaller0: entered promiscuous mode
[  157.935400][ T9499] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1575'.
[  157.942593][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'.
[  158.758040][ T9552] netlink: 'syz.3.1600': attribute type 4 has an invalid length.
[  158.829134][ T9556] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  160.133907][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  160.342942][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.530836][ T9656] __nla_validate_parse: 6 callbacks suppressed
[  161.530848][ T9656] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1646'.
[  161.592006][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'.
[  161.619181][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1648'.
[  161.650068][ T9662] netlink: 16038 bytes leftover after parsing attributes in process `syz.2.1649'.
[  161.870249][ T9672] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1652'.
[  162.210773][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'.
[  162.346437][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'.
[  162.361475][    C0] ==================================================================
[  162.364685][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  162.367765][    C0] Read of size 2 at addr ffff88803935ee42 by task ksoftirqd/0/15
[  162.371878][    C0] 
[  162.372836][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  162.372851][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.372858][    C0] Call Trace:
[  162.372863][    C0]  <TASK>
[  162.372869][    C0]  dump_stack_lvl+0x189/0x250
[  162.372885][    C0]  ? __kasan_check_byte+0x12/0x40
[  162.372904][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.372916][    C0]  ? lock_release+0x4b/0x3e0
[  162.372934][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  162.372948][    C0]  print_report+0xca/0x240
[  162.372959][    C0]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  162.372970][    C0]  kasan_report+0x118/0x150
[  162.372986][    C0]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  162.373000][    C0]  __xfrm_state_lookup+0x6ad/0x8d0
[  162.373014][    C0]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  162.373028][    C0]  xfrm_input_state_lookup+0x6e9/0xa60
[  162.373042][    C0]  ? xfrm_input_state_lookup+0xcf/0xa60
[  162.373054][    C0]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  162.373067][    C0]  ? __asan_memset+0x22/0x50
[  162.373106][    C0]  xfrm_input+0x425c/0x72c0
[  162.373128][    C0]  vti_input+0x219/0x330
[  162.373145][    C0]  ? __pfx_vti_input+0x10/0x10
[  162.373164][    C0]  tunnel4_rcv+0xdd/0x2d0
[  162.373176][    C0]  ? __pfx_tunnel4_rcv+0x10/0x10
[  162.373189][    C0]  ip_protocol_deliver_rcu+0x2e0/0x440
[  162.373207][    C0]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  162.373223][    C0]  ip_local_deliver_finish+0x3bb/0x6f0
[  162.373241][    C0]  NF_HOOK+0x30c/0x3a0
[  162.373255][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  162.373270][    C0]  ? NF_HOOK+0x9a/0x3a0
[  162.373285][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  162.373299][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  162.373310][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  162.373326][    C0]  ? skb_dst+0x4f/0xd0
[  162.373335][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  162.373352][    C0]  NF_HOOK+0x30c/0x3a0
[  162.373368][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  162.373377][    C0]  ? NF_HOOK+0x9a/0x3a0
[  162.373392][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  162.373406][    C0]  ? ip_rcv_core+0x7f7/0xd00
[  162.373422][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  162.373434][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  162.373448][    C0]  __netif_receive_skb+0x143/0x380
[  162.373463][    C0]  ? process_backlog+0x2d5/0x14f0
[  162.373478][    C0]  process_backlog+0x60e/0x14f0
[  162.373503][    C0]  ? __pfx_process_backlog+0x10/0x10
[  162.373523][    C0]  __napi_poll+0xc7/0x360
[  162.373536][    C0]  ? net_rx_action+0x46d/0xe30
[  162.373552][    C0]  net_rx_action+0x707/0xe30
[  162.373567][    C0]  ? __lock_acquire+0xab9/0xd20
[  162.373585][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  162.373599][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  162.373617][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  162.373633][    C0]  ? __local_bh_disable_ip+0xf1/0x190
[  162.373646][    C0]  handle_softirqs+0x286/0x870
[  162.373657][    C0]  ? run_ksoftirqd+0x9b/0x100
[  162.373670][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  162.373682][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.373694][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.373702][    C0]  run_ksoftirqd+0x9b/0x100
[  162.373710][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  162.373722][    C0]  smpboot_thread_fn+0x542/0xa60
[  162.373732][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.373744][    C0]  kthread+0x711/0x8a0
[  162.373757][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  162.373769][    C0]  ? __pfx_kthread+0x10/0x10
[  162.373780][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.373794][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.373809][    C0]  ? __pfx_kthread+0x10/0x10
[  162.373821][    C0]  ret_from_fork+0x3fc/0x770
[  162.373831][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  162.373843][    C0]  ? __switch_to_asm+0x39/0x70
[  162.373856][    C0]  ? __switch_to_asm+0x33/0x70
[  162.373869][    C0]  ? __pfx_kthread+0x10/0x10
[  162.373880][    C0]  ret_from_fork_asm+0x1a/0x30
[  162.373897][    C0]  </TASK>
[  162.373902][    C0] 
[  162.519847][    C0] Allocated by task 8565:
[  162.521778][    C0]  kasan_save_track+0x3e/0x80
[  162.523862][    C0]  __kasan_slab_alloc+0x6c/0x80
[  162.525944][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  162.528311][    C0]  xfrm_state_alloc+0x24/0x2f0
[  162.530387][    C0]  __find_acq_core+0x8a7/0x1c00
[  162.532154][    C0]  xfrm_find_acq+0x78/0xa0
[  162.533901][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  162.535593][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.537293][    C0]  netlink_rcv_skb+0x208/0x470
[  162.538913][    C0]  xfrm_netlink_rcv+0x79/0x90
[  162.540577][    C0]  netlink_unicast+0x82f/0x9e0
[  162.542516][    C0]  netlink_sendmsg+0x805/0xb30
[  162.544623][    C0]  __sock_sendmsg+0x21c/0x270
[  162.546614][    C0]  ____sys_sendmsg+0x505/0x830
[  162.548690][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  162.550709][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  162.552790][    C0]  do_syscall_64+0xfa/0x3b0
[  162.554676][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.557174][    C0] 
[  162.558159][    C0] Freed by task 5895:
[  162.559881][    C0]  kasan_save_track+0x3e/0x80
[  162.561942][    C0]  kasan_save_free_info+0x46/0x50
[  162.564111][    C0]  __kasan_slab_free+0x5b/0x80
[  162.566191][    C0]  kmem_cache_free+0x18f/0x400
[  162.568259][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  162.570487][    C0]  process_scheduled_works+0xae1/0x17b0
[  162.572903][    C0]  worker_thread+0x8a0/0xda0
[  162.574952][    C0]  kthread+0x711/0x8a0
[  162.576775][    C0]  ret_from_fork+0x3fc/0x770
[  162.578819][    C0]  ret_from_fork_asm+0x1a/0x30
[  162.580926][    C0] 
[  162.581993][    C0] The buggy address belongs to the object at ffff88803935ed00
[  162.581993][    C0]  which belongs to the cache xfrm_state of size 928
[  162.587751][    C0] The buggy address is located 322 bytes inside of
[  162.587751][    C0]  freed 928-byte region [ffff88803935ed00, ffff88803935f0a0)
[  162.593480][    C0] 
[  162.594553][    C0] The buggy address belongs to the physical page:
[  162.597211][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3935c
[  162.600858][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  162.604425][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  162.607556][    C0] page_type: f5(slab)
[  162.609322][    C0] raw: 00fff00000000040 ffff888104fd9780 dead000000000122 0000000000000000
[  162.612951][    C0] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  162.616542][    C0] head: 00fff00000000040 ffff888104fd9780 dead000000000122 0000000000000000
[  162.620242][    C0] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  162.623875][    C0] head: 00fff00000000002 ffffea0000e4d701 00000000ffffffff 00000000ffffffff
[  162.627556][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  162.631318][    C0] page dumped because: kasan: bad access detected
[  162.634096][    C0] page_owner tracks the page as allocated
[  162.636507][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6266, tgid 6264 (syz.0.160), ts 65096562316, free_ts 65088212435
[  162.644386][    C0]  post_alloc_hook+0x240/0x2a0
[  162.646511][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  162.648905][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  162.651418][    C0]  alloc_pages_mpol+0x232/0x4a0
[  162.653494][    C0]  allocate_slab+0x8a/0x370
[  162.655432][    C0]  ___slab_alloc+0xbeb/0x1410
[  162.657460][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  162.659788][    C0]  xfrm_state_alloc+0x24/0x2f0
[  162.661904][    C0]  __find_acq_core+0x8a7/0x1c00
[  162.664061][    C0]  xfrm_find_acq+0x78/0xa0
[  162.666048][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  162.668337][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.670511][    C0]  netlink_rcv_skb+0x208/0x470
[  162.672628][    C0]  xfrm_netlink_rcv+0x79/0x90
[  162.674707][    C0]  netlink_unicast+0x82f/0x9e0
[  162.676793][    C0]  netlink_sendmsg+0x805/0xb30
[  162.678835][    C0] page last free pid 5888 tgid 5888 stack trace:
[  162.681548][    C0]  __free_frozen_pages+0xbc4/0xd30
[  162.683742][    C0]  stack_depot_save_flags+0x436/0x860
[  162.686060][    C0]  ref_tracker_free+0xfe/0x7d0
[  162.688066][    C0]  __sk_destruct+0x568/0x660
[  162.690055][    C0]  inet_release+0x144/0x190
[  162.692012][    C0]  sock_release+0x85/0x150
[  162.693922][    C0]  ops_undo_list+0x49a/0x990
[  162.695888][    C0]  cleanup_net+0x4c5/0x800
[  162.697770][    C0]  process_scheduled_works+0xae1/0x17b0
[  162.700130][    C0]  worker_thread+0x8a0/0xda0
[  162.702092][    C0]  kthread+0x711/0x8a0
[  162.703827][    C0]  ret_from_fork+0x3fc/0x770
[  162.705769][    C0]  ret_from_fork_asm+0x1a/0x30
[  162.707829][    C0] 
[  162.708899][    C0] Memory state around the buggy address:
[  162.711318][    C0]  ffff88803935ed00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.714704][    C0]  ffff88803935ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.718161][    C0] >ffff88803935ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.721578][    C0]                                            ^
[  162.724208][    C0]  ffff88803935ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.727510][    C0]  ffff88803935ef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.730878][    C0] ==================================================================
[  162.734378][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  162.737335][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  162.741211][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.745509][    C0] Call Trace:
[  162.746940][    C0]  <TASK>
[  162.748258][    C0]  dump_stack_lvl+0x99/0x250
[  162.750190][    C0]  ? __asan_memcpy+0x40/0x70
[  162.752159][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.754304][    C0]  ? __pfx__printk+0x10/0x10
[  162.756237][    C0]  vpanic+0x281/0x750
[  162.757889][    C0]  ? __pfx_vpanic+0x10/0x10
[  162.759788][    C0]  ? irqentry_exit+0x74/0x90
[  162.761773][    C0]  panic+0xb9/0xc0
[  162.763388][    C0]  ? __pfx_panic+0x10/0x10
[  162.765251][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  162.767693][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.770248][    C0]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  162.772440][    C0]  check_panic_on_warn+0x89/0xb0
[  162.774547][    C0]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  162.776798][    C0]  end_report+0x78/0x160
[  162.778592][    C0]  kasan_report+0x129/0x150
[  162.780527][    C0]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  162.782738][    C0]  __xfrm_state_lookup+0x6ad/0x8d0
[  162.784875][    C0]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  162.787260][    C0]  xfrm_input_state_lookup+0x6e9/0xa60
[  162.789651][    C0]  ? xfrm_input_state_lookup+0xcf/0xa60
[  162.792004][    C0]  ? __pfx_xfrm_input_state_lookup+0x10/0x10
[  162.794535][    C0]  ? __asan_memset+0x22/0x50
[  162.796465][    C0]  xfrm_input+0x425c/0x72c0
[  162.798375][    C0]  vti_input+0x219/0x330
[  162.800177][    C0]  ? __pfx_vti_input+0x10/0x10
[  162.802181][    C0]  tunnel4_rcv+0xdd/0x2d0
[  162.803966][    C0]  ? __pfx_tunnel4_rcv+0x10/0x10
[  162.806103][    C0]  ip_protocol_deliver_rcu+0x2e0/0x440
[  162.808461][    C0]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  162.810922][    C0]  ip_local_deliver_finish+0x3bb/0x6f0
[  162.813285][    C0]  NF_HOOK+0x30c/0x3a0
[  162.815052][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  162.817631][    C0]  ? NF_HOOK+0x9a/0x3a0
[  162.819412][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  162.821382][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  162.823641][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  162.826186][    C0]  ? skb_dst+0x4f/0xd0
[  162.827927][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  162.830125][    C0]  NF_HOOK+0x30c/0x3a0
[  162.831827][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  162.833932][    C0]  ? NF_HOOK+0x9a/0x3a0
[  162.835722][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  162.837629][    C0]  ? ip_rcv_core+0x7f7/0xd00
[  162.839625][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  162.841765][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  162.843741][    C0]  __netif_receive_skb+0x143/0x380
[  162.845955][    C0]  ? process_backlog+0x2d5/0x14f0
[  162.848190][    C0]  process_backlog+0x60e/0x14f0
[  162.850296][    C0]  ? __pfx_process_backlog+0x10/0x10
[  162.852620][    C0]  __napi_poll+0xc7/0x360
[  162.854543][    C0]  ? net_rx_action+0x46d/0xe30
[  162.856606][    C0]  net_rx_action+0x707/0xe30
[  162.858630][    C0]  ? __lock_acquire+0xab9/0xd20
[  162.860758][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  162.862953][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  162.865219][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  162.867437][    C0]  ? __local_bh_disable_ip+0xf1/0x190
[  162.869672][    C0]  handle_softirqs+0x286/0x870
[  162.871601][    C0]  ? run_ksoftirqd+0x9b/0x100
[  162.873483][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  162.875745][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.877712][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.879345][    C0]  run_ksoftirqd+0x9b/0x100
[  162.880815][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  162.882577][    C0]  smpboot_thread_fn+0x542/0xa60
[  162.884657][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  162.886866][    C0]  kthread+0x711/0x8a0
[  162.888714][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  162.891123][    C0]  ? __pfx_kthread+0x10/0x10
[  162.893174][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.895443][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.897683][    C0]  ? __pfx_kthread+0x10/0x10
[  162.899707][    C0]  ret_from_fork+0x3fc/0x770
[  162.901707][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  162.903909][    C0]  ? __switch_to_asm+0x39/0x70
[  162.905979][    C0]  ? __switch_to_asm+0x33/0x70
[  162.907979][    C0]  ? __pfx_kthread+0x10/0x10
[  162.909965][    C0]  ret_from_fork_asm+0x1a/0x30
[  162.912037][    C0]  </TASK>
[  162.914150][    C0] Kernel Offset: disabled
[  162.916008][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:58:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001268f0
R8 =ffff88801f9c8237 R9 =1ffff11003f39046 R10=dffffc0000000000 R11=ffffffff854f62b0
R12=dffffc0000000000 R13=ffffffff99afc8eb R14=ffffffff99df13a0 R15=0000000000000000
RIP=ffffffff854f632c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8619000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3241fff8 CR3=0000000106ba8000 CR4=000006f0
DR0=ffffffffffffffff DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=7e940a8fd7090813 f212dfdc858298e3
XMM02=a2560b4f514723f9 8afa8a53339eb4e2 XMM03=0590030000000000 00000000ff7ff20f
XMM04=ffffffff04400302 1000300302921000 XMM05=0100100000040100 00020806060168d2
XMM06=0008006003001000 50030fffffffffff XMM07=ff04400302100030 0302921000059003
XMM08=0000000000000000 00ff7ff20fa2560b XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e0b RBX=1ffff11009608341 RCX=ffff88803bccb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002e0f4c0 RSP=ffffc90002e0f340
R8 =ffffffff8fa38937 R9 =1ffffffff1f47126 R10=dffffc0000000000 R11=fffffbfff1f47127
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44df3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c19000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea25a1e38 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f219590d100 00007f2194da7460 XMM05=00007f2194da7478 00007f2194da74c0
XMM06=00007f2194da74b8 00007f2194da74b0 XMM07=00007f2194da74a8 00007f2194da74a0
XMM08=0000000000000000 00007f2194c12ee7 XMM09=0000000000000000 00007f2194c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
