last executing test programs:

2.490711511s ago: executing program 2 (id=1660):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x9, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x7, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, r0, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYBLOB="bb"], 0x50, 0x82}, 0x24040850) (async)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000006c0)) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000001c0081044e81f782db44b90404000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a000d4003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbfb4c2ee5a7cef4090000001fb391643f6f3a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f7deb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ea1789bf7", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x4801}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x0, r2}, 0x18)
r8 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async)
openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async)
write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

2.388107647s ago: executing program 1 (id=1665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000000b01030000000000000000030000000000008ead00000108000340000000010c5455ff284859a53718a5cd831439473bd623ce15a386155dffe3677394bc24136964c19b1a46"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000000b01030000000000000000030000000000008ead00000108000340000000010c5455ff284859a53718a5cd831439473bd623ce15a386155dffe3677394bc24136964c19b1a46"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043a4fc740267e861f8fc734915cd"], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.386977849s ago: executing program 2 (id=1666):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x80000001, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000002400)=""/4079, 0xfef}, {&(0x7f0000000a00)=""/196, 0xc4}, {&(0x7f00000000c0)=""/98, 0x5b}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/192, 0xc0}, {&(0x7f0000000340)=""/169, 0x93}], 0x8}, 0x120c2)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)

2.320743525s ago: executing program 2 (id=1669):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r0}, 0x10)

1.882341272s ago: executing program 0 (id=1671):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
r4 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="c6", 0x1}], 0x1}, 0x20000850) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000640)={0x6314f53ae4cb53bd, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000008, 0x210, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x7fffffffffffffff}, 0x11efa, 0x4, 0x98, 0x6, 0x8, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000022c0703d7"], 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000c9b69808d21c8aa366cfa2beacaa0b7e33bb14d17d9c61fdcae18ebbdde6bfcb72f1355b6e73339dba3b46ea3ab643476b6945694463773d687c730dbf7716d76e26da93c4974d25d3a72ce2fa158a370fbfaa90a3dde0ec311d7f6738c51ce397e04300c149820b62325f3015d9c2db4d3a1adaf2a3e39dbf67cc0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed02, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r8], 0xc4}}, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xb, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r5, 0x9, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d2", 0x9}], 0x1}, 0x0) (rerun: 32)

1.47449734s ago: executing program 2 (id=1672):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xd}, 0x94)

1.422349958s ago: executing program 2 (id=1673):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='ext4_fc_track_range\x00', r1, 0x0, 0x4a0a}, 0x18)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4001)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.109745971s ago: executing program 0 (id=1674):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007e0000009400000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94)

1.011038416s ago: executing program 0 (id=1675):
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open$cgroup(&(0x7f0000000480)={0x5, 0x80, 0x6, 0x6, 0xb, 0x4, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x342877f456455b0c, 0xf, 0xc9, 0x9, 0x3, 0x4, 0x40, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x6)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0xd, 0x6, 0x5, 0x0, 0x5, 0x40000, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_config_ext={0x3, 0x1}, 0x4404, 0x5, 0x8e, 0x6, 0x80, 0x6, 0x8, 0x0, 0x5, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r1, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000906010100000000000000000300000105000100070000000900020073797ae700000000040008"], 0x2c}, 0x1, 0x0, 0x0, 0x24000895}, 0x880)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="450a0000000000006111a00000000000180000000000000000000077078775660000000000950f00e2ffbba38b79c5ae7257e0387665055feb6617487ad49f3ff0a2f0956cdbb18195fb82bd1b49e27d62ae79601bf01c6ce7948086c090271948a2deffb641f1dd07cb1702792bc183e2ab82c50766288ed3"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r4 = getpid()
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x40, 0xa, 0x6, 0x4, 0x0, 0x7, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x22, 0x4, 0x800, 0x4, 0x3, 0xfa, 0xfa5, 0x0, 0x3d7c0, 0x0, 0x9}, r4, 0xd, 0xffffffffffffffff, 0x1)

1.007856952s ago: executing program 2 (id=1676):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020240}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000040605000000000000000000050000030500010007000000090002000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40002)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bbdffae, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x20af1b11e8b08721, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

1.007242216s ago: executing program 1 (id=1677):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000003e000701feffffff00080000017c0000040042800c00018006000600800a0000100002800c0014800800068004b95e"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008850}, 0x200000c0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
syz_clone(0x1220000, 0x0, 0x0, 0x0, 0x0, 0x0)

773.234511ms ago: executing program 1 (id=1678):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6b, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4080)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000830800024000000005"], 0x8c}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ef000000030000ec747703b64c2d1e208ada07b8e7b4ac867e925139e5ae05ad1c55d455bea7c71750b69757188a37748522a9c5229d080978a90a7ac8e9d313554e8c27128a7ae68fd83d2b6d9dd9721805ea2e1cfaacc0297210bbd2d103c91011d512d1a93201bd0fb3c3153f7ede668d4f50fc11e7"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0x20, &(0x7f0000001b40)={&(0x7f0000000a80)=""/181, 0xb5, <r7=>0x0, &(0x7f0000000b40)=""/4096, 0x1000}}, 0x10)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f91824fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002440)=ANY=[@ANYBLOB="180020000002010500000000000000000a00000904000280"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000200), &(0x7f00000003c0)=r9}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xb, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000600000000000000ff0300008500000049000000851000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000786c6c25000015b193437d43be0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001000008500000006000000184900000800000000000000000000002d0200010400000007400600090000005c9704000100000000190008050000003c48f4ff0400000095"], &(0x7f00000002c0)='GPL\x00', 0x800, 0xee, &(0x7f00000006c0)=""/238, 0x41000, 0x3, '\x00', r6, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r9, 0x0, 0x0, 0x0, 0x10, 0x8d6f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, <r12=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x20)
r13 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f00000003c0)={&(0x7f0000000000)=@pptp={0x2d, 0x2, {0x0, @loopback}}, 0x80, 0x0}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r14, 0x1a, &(0x7f0000000180)}, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)

772.586183ms ago: executing program 1 (id=1679):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x88, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfb, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x2, 0x5, 0x5, 0x0]}]}, 0x58}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r5, 0x541b, 0xf0ff1f00000000)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00'}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x2, 0x14, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x2, 0x0, 0x1, 0x40, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x400, 0x8e, &(0x7f0000000a40)=""/142, 0x41100, 0x1b, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x10, 0xc, 0x80000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000b80)=[r6, r6], &(0x7f0000000bc0)=[{0x0, 0x1, 0x6, 0x1}, {0x0, 0x2, 0x8, 0x3}, {0x2, 0x2, 0x1, 0x1}, {0x2, 0x4, 0x4, 0xa}, {0x2, 0x4, 0x3, 0x6}, {0x3, 0x1, 0x5, 0x9}], 0x10, 0x3fd9}, 0x94)
r8 = openat$cgroup_ro(r7, &(0x7f0000000fc0)='blkio.bfq.io_queued\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000010c0)={&(0x7f0000001000), 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x10, 0x1409, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r7, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x0, 0x0, &(0x7f0000000e00), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x140c, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4830}, 0x20008840)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r1, 0x0, 0x40000020)

123.534084ms ago: executing program 0 (id=1680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x88, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_PKTS={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x24}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x5000000, 0x841}, 0x8000)

117.643581ms ago: executing program 0 (id=1681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x9, 0x0, 0x4, 0x0, 0x0, 0x66, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x2, 0x7f, 0x0, 0x8, 0x3fe, 0x7fffbfff}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5411, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x482900, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x7e, 0x9, 0x0, 0x0, 0x8, 0x2008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xc0}, 0xc68, 0x8001, 0x0, 0x2, 0xfffffffffffffffc, 0x800000, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
r4 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000100), 0x9)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0xfffffffffffffdb5}], 0x1}, 0x4000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a500000001b0a09040000000000000000020000052400048020000180070001007274000014000280080001400000001108000240000000010900010073797a30000000000900030073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0x2)

117.219805ms ago: executing program 1 (id=1682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x13c}}, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002c40)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
socket$kcm(0xf, 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
close(0x3) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000080)='memory.oom.group\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48)

33.433986ms ago: executing program 0 (id=1683):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x4, 0x3fe, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000040), &(0x7f0000000100)=r3}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0500000007000000324900007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b800000000000000f7000072039be3ec4873bb3d276cf78b15b714d515bb047ec8075c4556a7054ad60c1c1291300dbe3185477f993621d50b3bc6955873e187709c56e37451006da2b46723a4169dcf2727568bc4ba93ccd36b886bcbd095eeb95cc405c6505a6eab0aba2bd65efeacb21076ebfd531df9f4b57cf76f571cceea7d5094eb9850305d0dd43b31c8883c80728f138474e3d44f440b6b6b46ba61e8b4492d45d3a747bd68320f93690bbc2050ddd7b822bd1b3578c3b32a5a880c3e60e39592bc278a4ec5eab727f28a35c1a1289831592055d1b0c79f23aaebc43e0cae28ed677aa401a65e"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in=@loopback, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

0s ago: executing program 1 (id=1684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x45, 0x107, 0xfffffffe, 0x25dfdbfb, {0x0, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x6, 0xeb, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48895}, 0xc000) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], 0x0}, 0x94) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, &(0x7f0000000900)='\xe5\xee\x91\xd4\xdc~\x82]0\x9e\x9e\xae0\xfa\x94q\x0eY\x1f\xfa%zu\xf9\xb6\xb4n\x13\xa0G/k5t\xb6{\xa8\xb2\xf3}\xdb\xd7j?\x95\x8dj\xf5|YZ\x1b\xa9\x89$@k\xbe\x14\xf8&\x8d\x98F\xbb\x92\f\xdc\x1dv\x83\x06\x14\xf6\xb5g$\xc4\xcc\xcd6\x83&Y\x9d\xb5S\x19\x83\x1e\xe7dt\xbf\x11\xedu&t\x1f\x84TO\x98jv\xb3?\xec\x10\xf8\xca-\x92\xf2\xe1\xae\xb6O^\xb2s\xa4\x1b$\x06{\xfa\xf32p\xa6\x01\x8a,J\xdb\xf4X\x14.\x8dl\x9c\xaa9\xfd\xe5^\xa3G\x1e\xa9\x8e\xcf\xb2X\xe4\xb4(\xf4T\x92\xc2\x9c\xa36-\xe0\x11>\xa2\x9b\'\xf1~\x18\xc9W\xd14\xd9\xee1Q\xd5m\"\xae\x9c\xd0\xaaB3\x91\x14PK`6\xed\x99j\xae\xc0\x10\n\x80\xa6\x96m\x0ecP\x13>\x8e\x04\x14\xf5\xe3=)\x16/\xe5\xe4\xa4+\x1e\xef\xf3O\xab\x04\xe0os\xd4Xj\xdc\'\xb7,\x1a\xb4\xb9\xf3\xd0\xcbE\x86D\xc8\t\x1d\xeaE;\x84\xb4\x81U\xbfo\x15\xea\x04\x04\xed\xaeS\xbe\xfe[\xce/p\x83\xc2F }B\xd2\xbd\xd7\xc0\x004\xc7\xe4Y\x8f\xf9\x99r\xcaU\x00[\xc5\x03\xdc\xe3\xab\xc1\xc0\xfb\x10Z\xb1\xdb\xe9v\x9e\f)\xe0\x8e\xd2\xb2\xf0\x81\xbc\xfb1[A\xf1{\xcck\xc5k\xcf\x91A\xd2,:\xa8\r\xb2\xeb\xa0\x84y\x7f\xc3\xe0\xe0 \xec\xf2\x18rc\xae1s\xf0h\xa8\xaa\xe6O\xe4\x0f\xbd%\x1c\xfb\x95\x15\xb2\vP\x06\xc3%+\xc7X\xf7\x99\xd8l\x1d>y\xdb\x11\xad') (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x5460, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
close(0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe4, 0x13, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x28, 0x8, "96f7d434c8009f4c60a9513aafc79131e8672ec422d8cb6bc5d3adaeab561fca1721c50e"}, @NFTA_OBJ_USERDATA={0x84, 0x8, "111f4312171bbd1398b54e27eba49804bbc3c1781b6e38b6c70bbeb21f5db1348091a451b81677198bbc92df101ea06e3e98002f63ce974e40a4cb5ef65ed3b98dbd01557285f55aa20de808e1852f046b83121bbdc70face7ee21287582810808041a70a6adc4c9be0e2822907ba8cb36df627d003c64e9167181a6139a0b42"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20004054}, 0x2000c010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58942' (ED25519) to the list of known hosts.
syzkaller login: [   49.292004][ T5786] cgroup: Unknown subsys name 'net'
[   49.376682][ T5786] cgroup: Unknown subsys name 'cpuset'
[   49.380657][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.163822][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.386673][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.389646][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.392285][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.395323][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.398828][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.452367][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.455449][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.458471][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.461220][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.464665][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.467429][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.470323][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.472975][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.486359][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.494276][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.586657][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.731955][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.735683][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.738988][ T5847] bridge_slave_0: entered allmulticast mode
[   55.742933][ T5847] bridge_slave_0: entered promiscuous mode
[   55.781272][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.784948][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.787962][ T5847] bridge_slave_1: entered allmulticast mode
[   55.791781][ T5847] bridge_slave_1: entered promiscuous mode
[   55.849649][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.856374][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.864791][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.871939][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.925780][ T5847] team0: Port device team_slave_0 added
[   55.951488][ T5847] team0: Port device team_slave_1 added
[   56.019429][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.022279][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.032372][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.044830][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.048024][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.050870][ T5851] bridge_slave_0: entered allmulticast mode
[   56.054926][ T5851] bridge_slave_0: entered promiscuous mode
[   56.063578][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.066609][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.075502][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.079177][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.081413][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.084572][ T5851] bridge_slave_1: entered allmulticast mode
[   56.087752][ T5851] bridge_slave_1: entered promiscuous mode
[   56.139449][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.142558][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.146509][ T5852] bridge_slave_0: entered allmulticast mode
[   56.150392][ T5852] bridge_slave_0: entered promiscuous mode
[   56.168512][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.185549][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.188235][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.190740][ T5852] bridge_slave_1: entered allmulticast mode
[   56.193983][ T5852] bridge_slave_1: entered promiscuous mode
[   56.211097][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.236314][ T5847] hsr_slave_0: entered promiscuous mode
[   56.239524][ T5847] hsr_slave_1: entered promiscuous mode
[   56.268907][ T5851] team0: Port device team_slave_0 added
[   56.273969][ T5851] team0: Port device team_slave_1 added
[   56.279660][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.310029][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.381710][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.384566][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.395916][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.407082][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.410077][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.421493][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.427895][ T5852] team0: Port device team_slave_0 added
[   56.455778][ T5852] team0: Port device team_slave_1 added
[   56.508502][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.510823][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.521529][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.528545][ T5851] hsr_slave_0: entered promiscuous mode
[   56.531354][ T5851] hsr_slave_1: entered promiscuous mode
[   56.534921][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.537290][ T5851] Cannot create hsr debugfs directory
[   56.546538][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.549279][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.558231][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.596018][ T5852] hsr_slave_0: entered promiscuous mode
[   56.598572][ T5852] hsr_slave_1: entered promiscuous mode
[   56.600837][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.602822][ T5852] Cannot create hsr debugfs directory
[   56.753540][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.765970][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.774005][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.787260][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.834801][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.847450][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.862527][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.878573][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.882875][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.891552][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.903292][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.909525][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.993512][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.029211][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   57.041645][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.046773][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.049367][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.067616][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.069950][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.076401][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.095686][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.098048][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.111115][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.123028][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.126944][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.140282][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.143381][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.180680][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   57.216149][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.225506][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.227859][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.231679][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.234120][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.257408][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.261473][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.312409][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.369061][ T5847] veth0_vlan: entered promiscuous mode
[   57.384993][ T5847] veth1_vlan: entered promiscuous mode
[   57.404710][ T5856] Bluetooth: hci0: command tx timeout
[   57.408126][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.411948][ T5847] veth0_macvtap: entered promiscuous mode
[   57.420389][ T5847] veth1_macvtap: entered promiscuous mode
[   57.441083][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.451364][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.459835][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.476623][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.485481][ T5856] Bluetooth: hci1: command tx timeout
[   57.494632][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.502759][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.508452][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.526558][ T5851] veth0_vlan: entered promiscuous mode
[   57.539830][ T5851] veth1_vlan: entered promiscuous mode
[   57.563848][ T5856] Bluetooth: hci2: command tx timeout
[   57.568310][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.571685][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.595981][ T5851] veth0_macvtap: entered promiscuous mode
[   57.618052][ T5852] veth0_vlan: entered promiscuous mode
[   57.622644][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.622672][ T5851] veth1_macvtap: entered promiscuous mode
[   57.629170][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.641433][ T5852] veth1_vlan: entered promiscuous mode
[   57.655857][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.676250][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.685124][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.690939][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.694675][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.697527][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.718759][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.731881][ T5852] veth0_macvtap: entered promiscuous mode
[   57.757348][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.759936][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.761209][ T5852] veth1_macvtap: entered promiscuous mode
[   57.796202][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.806423][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.809368][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.810557][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.832823][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.838820][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.842040][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.847785][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.912177][ T5923] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.5'.
[   57.921716][ T5923] openvswitch: netlink: Message has 5588 unknown bytes.
[   57.925982][ T5923] openvswitch: netlink: Actions may not be safe on all matching packets
[   57.963318][ T5923] syzkaller0: entered promiscuous mode
[   57.966836][ T5923] syzkaller0: entered allmulticast mode
[   57.979734][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.982399][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.983214][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.992313][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.001157][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.005429][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.067153][ T5929] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   58.072449][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.648671][ T5856] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[   58.732550][ T5933] Zero length message leads to an empty skb
[   58.740114][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.742997][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.937113][ T5942] netlink: 'syz.1.11': attribute type 5 has an invalid length.
[   59.073151][ T5944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.076795][ T5944] IPv6: NLM_F_CREATE should be set when creating new route
[   59.080211][ T5944] IPv6: NLM_F_CREATE should be set when creating new route
[   59.493901][ T5856] Bluetooth: hci0: command tx timeout
[   59.566152][ T5856] Bluetooth: hci1: command tx timeout
[   59.645526][ T5856] Bluetooth: hci2: command tx timeout
[   60.060292][ T5999] netlink: 'syz.0.23': attribute type 5 has an invalid length.
[   60.142429][ T5990] syz.2.21: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.152301][ T5990] CPU: 1 UID: 0 PID: 5990 Comm: syz.2.21 Not tainted syzkaller #0 PREEMPT(full) 
[   60.152312][ T5990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.152316][ T5990] Call Trace:
[   60.152320][ T5990]  <TASK>
[   60.152324][ T5990]  dump_stack_lvl+0x189/0x250
[   60.152343][ T5990]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.152354][ T5990]  ? __pfx__printk+0x10/0x10
[   60.152368][ T5990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.152378][ T5990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.152391][ T5990]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.152405][ T5990]  warn_alloc+0x214/0x310
[   60.152418][ T5990]  ? stack_depot_save_flags+0x41b/0x860
[   60.152430][ T5990]  ? __pfx_warn_alloc+0x10/0x10
[   60.152444][ T5990]  ? kasan_save_track+0x4f/0x80
[   60.152456][ T5990]  ? xskq_create+0x56/0x170
[   60.152463][ T5990]  ? xsk_init_queue+0xb0/0x110
[   60.152468][ T5990]  ? xsk_setsockopt+0x57b/0x8d0
[   60.152474][ T5990]  ? do_sock_setsockopt+0x17c/0x1b0
[   60.152482][ T5990]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   60.152489][ T5990]  ? do_syscall_64+0xfa/0x3b0
[   60.152496][ T5990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.152516][ T5990]  __vmalloc_node_range_noprof+0x125/0x12f0
[   60.152572][ T5990]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.152590][ T5990]  ? __kasan_kmalloc+0x93/0xb0
[   60.152608][ T5990]  vmalloc_user_noprof+0xad/0xf0
[   60.152617][ T5990]  ? xskq_create+0xbf/0x170
[   60.152628][ T5990]  xskq_create+0xbf/0x170
[   60.152643][ T5990]  xsk_init_queue+0xb0/0x110
[   60.152657][ T5990]  xsk_setsockopt+0x57b/0x8d0
[   60.152671][ T5990]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.152681][ T5990]  ? __pfx_aa_sk_perm+0x10/0x10
[   60.152696][ T5990]  ? __fget_files+0x2a/0x420
[   60.152702][ T5990]  ? aa_sock_opt_perm+0xff/0x1b0
[   60.152718][ T5990]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.152725][ T5990]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.152737][ T5990]  do_sock_setsockopt+0x17c/0x1b0
[   60.152756][ T5990]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.152790][ T5990]  do_syscall_64+0xfa/0x3b0
[   60.152799][ T5990]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.152809][ T5990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.152816][ T5990]  ? exc_page_fault+0x9f/0xf0
[   60.152829][ T5990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.152836][ T5990] RIP: 0033:0x7fd898b8ec29
[   60.152845][ T5990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.152850][ T5990] RSP: 002b:00007fd8999f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.152858][ T5990] RAX: ffffffffffffffda RBX: 00007fd898dd6090 RCX: 00007fd898b8ec29
[   60.152862][ T5990] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[   60.152866][ T5990] RBP: 00007fd898c11e41 R08: 0000000000000004 R09: 0000000000000000
[   60.152870][ T5990] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   60.152874][ T5990] R13: 00007fd898dd6128 R14: 00007fd898dd6090 R15: 00007ffd8d5714c8
[   60.152905][ T5990]  </TASK>
[   60.152908][ T5990] Mem-Info:
[   60.252392][ T6007] netlink: 'syz.0.24': attribute type 8 has an invalid length.
[   60.257318][ T5990] active_anon:5589 inactive_anon:0 isolated_anon:0
[   60.257318][ T5990]  active_file:998 inactive_file:38236 isolated_file:0
[   60.257318][ T5990]  unevictable:1768 dirty:1433 writeback:0
[   60.257318][ T5990]  slab_reclaimable:9479 slab_unreclaimable:50637
[   60.257318][ T5990]  mapped:17964 shmem:2429 pagetables:991
[   60.257318][ T5990]  sec_pagetables:0 bounce:0
[   60.257318][ T5990]  kernel_misc_reclaimable:0
[   60.257318][ T5990]  free:299719 free_pcp:23908 free_cma:0
[   60.297013][ T5990] Node 0 active_anon:13132kB inactive_anon:0kB active_file:768kB inactive_file:132544kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31752kB dirty:4344kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4176kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.308342][ T5990] Node 1 active_anon:9224kB inactive_anon:0kB active_file:3224kB inactive_file:20400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40172kB dirty:1388kB writeback:0kB shmem:4684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7440kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.321186][ T5990] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.333874][ T5990] lowmem_reserve[]: 0 811 811 811 811
[   60.336119][ T5990] Node 0 DMA32 free:298132kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13132kB inactive_anon:0kB active_file:768kB inactive_file:132544kB unevictable:3536kB writepending:4344kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:49752kB local_pcp:19512kB free_cma:0kB
[   60.349083][ T5990] lowmem_reserve[]: 0 0 0 0 0
[   60.351023][ T5990] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   60.367219][ T5990] lowmem_reserve[]: 0 0 854 854 854
[   60.370802][ T5990] Node 1 Normal free:426336kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9224kB inactive_anon:0kB active_file:3224kB inactive_file:20400kB unevictable:3536kB writepending:1388kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46336kB local_pcp:22332kB free_cma:0kB
[   60.421222][ T6010] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.25'.
[   60.425141][ T6010] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.25'.
[   60.442335][ T5990] lowmem_reserve[]: 0 0 0 0 0
[   60.444437][ T5990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.448766][ T5990] Node 0 DMA32: 74*4kB (UM) 61*8kB (UM) 52*16kB (UM) 90*32kB (UM) 4*64kB (UM) 4*128kB (M) 6*256kB (ME) 3*512kB (M) 3*1024kB (ME) 2*2048kB (M) 69*4096kB (M) = 298128kB
[   60.454897][ T5990] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   60.460695][ T5990] Node 1 Normal: 0*4kB 360*8kB (UE) 172*16kB (U) 62*32kB (UE) 12*64kB (U) 3*128kB (UM) 2*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 101*4096kB (M) = 426048kB
[   60.466628][ T5990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.470347][ T5990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.475568][ T5990] 41663 total pagecache pages
[   60.477414][ T5990] 0 pages in swap cache
[   60.478989][ T5990] Free swap  = 124996kB
[   60.480564][ T5990] Total swap = 124996kB
[   60.482177][ T5990] 786301 pages RAM
[   60.483573][ T5990] 0 pages HighMem/MovableOnly
[   60.487210][ T5990] 241356 pages reserved
[   60.488744][ T5990] 0 pages cma reserved
[   60.728115][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'.
[   60.957143][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.31'.
[   61.058992][ T6028] netlink: 'syz.2.31': attribute type 21 has an invalid length.
[   61.062199][ T6028] netlink: 'syz.2.31': attribute type 4 has an invalid length.
[   61.110037][ T6028] netlink: 'syz.2.31': attribute type 5 has an invalid length.
[   61.242957][ T6043] @: renamed from bond_slave_0 (while UP)
[   61.245356][ T6042] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   61.252970][ T6042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   61.332570][ T6043] netlink: 'syz.2.34': attribute type 21 has an invalid length.
[   61.337831][ T6043] netlink: 'syz.2.34': attribute type 4 has an invalid length.
[   61.494724][ T6049] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   61.531937][ T6049] team0: Port device dummy0 added
[   61.564075][ T5856] Bluetooth: hci0: command tx timeout
[   61.646718][ T5856] Bluetooth: hci1: command tx timeout
[   61.724686][ T5856] Bluetooth: hci2: command tx timeout
[   62.096086][    C0] hrtimer: interrupt took 37890 ns
[   62.529089][ T6090] openvswitch: netlink: IP tunnel dst address not specified
[   62.653543][ T6092] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   62.917488][ T6109] siw: device registration error -23
[   62.980386][ T6120] siw: device registration error -23
[   63.043056][ T6122] __nla_validate_parse: 10 callbacks suppressed
[   63.043066][ T6122] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.63'.
[   63.051601][ T6124] bpf: Bad value for 'mode'
[   63.106702][ T6129] openvswitch: netlink: Missing valid actions attribute.
[   63.109149][ T6129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.268931][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[   63.643864][ T5856] Bluetooth: hci0: command tx timeout
[   63.682114][ T6168] netlink: 52 bytes leftover after parsing attributes in process `syz.2.78'.
[   63.689063][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   63.691871][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.78'.
[   63.724228][ T5856] Bluetooth: hci1: command tx timeout
[   63.803769][ T5856] Bluetooth: hci2: command tx timeout
[   63.846854][ T6173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.850896][ T6174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.855823][ T6173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.859525][ T6173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.863100][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   66.017699][ T6267] Driver unsupported XDP return value 0 on prog  (id 67) dev N/A, expect packet loss!
[   66.143289][ T6276] validate_nla: 2 callbacks suppressed
[   66.146220][ T6276] netlink: 'syz.0.109': attribute type 11 has an invalid length.
[   66.439405][ T6289] netlink: 'syz.1.115': attribute type 6 has an invalid length.
[   66.619516][ T6309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.711277][ T6313] =======================================================
[   66.711277][ T6313] WARNING: The mand mount option has been deprecated and
[   66.711277][ T6313]          and is ignored by this kernel. Remove the mand
[   66.711277][ T6313]          option from the mount to silence this warning.
[   66.711277][ T6313] =======================================================
[   66.881741][ T6323] warning: `syz.2.124' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.488338][   T24] cfg80211: failed to load regulatory.db
[   67.701542][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   67.959826][ T6349] netlink: 'syz.2.135': attribute type 46 has an invalid length.
[   68.073905][ T6356] __nla_validate_parse: 11 callbacks suppressed
[   68.073918][ T6356] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.137'.
[   68.080457][ T6356] netlink: 5 bytes leftover after parsing attributes in process `syz.2.137'.
[   68.177580][ T6358] netlink: 798 bytes leftover after parsing attributes in process `syz.2.138'.
[   69.711218][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   69.728462][ T6399] : entered promiscuous mode
[   69.740378][ T6403] netlink: 'syz.2.154': attribute type 3 has an invalid length.
[   69.743032][ T6403] netlink: 'syz.2.154': attribute type 4 has an invalid length.
[   69.753184][ T6403] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.154'.
[   69.974094][ T6416] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   70.084581][ T6416] syz.2.157 (6416) used greatest stack depth: 19904 bytes left
[   70.109755][ T6430] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   70.887230][ T6450] syzkaller0: entered promiscuous mode
[   70.889476][ T6450] syzkaller0: entered allmulticast mode
[   70.923541][ T6451] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   70.926480][ T6451] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   71.065439][ T6454] netlink: 'syz.1.173': attribute type 21 has an invalid length.
[   71.069428][ T6454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.173'.
[   71.142241][ T6457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.174'.
[   71.167293][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.169921][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.290690][ T6472] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   71.482272][ T6479] netlink: 'syz.2.180': attribute type 10 has an invalid length.
[   71.491995][ T6479] team0: Port device macvlan1 added
[   71.754401][ T6500] netlink: 'syz.0.187': attribute type 1 has an invalid length.
[   71.757206][ T6499] netlink: 'syz.0.187': attribute type 1 has an invalid length.
[   71.911013][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[   71.914909][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'.
[   72.823162][ T6534] netlink: 'syz.1.201': attribute type 3 has an invalid length.
[   72.829840][ T6534] netlink: 76 bytes leftover after parsing attributes in process `syz.1.201'.
[   72.991475][ T6540] netlink: 'syz.0.203': attribute type 23 has an invalid length.
[   74.017867][ T6565] openvswitch: netlink: Message has 16 unknown bytes.
[   74.020336][ T6565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.239266][ T6570] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[   74.270796][ T6570] team0: Port device wlan1 added
[   74.836304][ T6581] netlink: 'syz.1.218': attribute type 4 has an invalid length.
[   74.839654][ T6581] __nla_validate_parse: 1 callbacks suppressed
[   74.839665][ T6581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[   74.900987][ T6583] tun0: tun_chr_ioctl cmd 1074025677
[   74.903362][ T6583] tun0: linktype set to 270
[   75.171411][ T6570] syz.0.214 (6570) used greatest stack depth: 19784 bytes left
[   75.404835][ T6607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.224'.
[   75.407675][ T6607] openvswitch: netlink: Missing key (keys=40, expected=100)
[   75.737678][ T6630] netlink: 'syz.1.234': attribute type 8 has an invalid length.
[   75.741057][ T6630] netlink: 'syz.1.234': attribute type 3 has an invalid length.
[   75.744687][ T6630] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.234'.
[   76.379197][ T6646] netlink: 100 bytes leftover after parsing attributes in process `syz.2.240'.
[   76.713788][ T6653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.243'.
[   76.771198][ T6655] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.244'.
[   76.776026][ T6655] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   76.792783][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'.
[   76.918062][ T6663] netlink: 'syz.1.247': attribute type 20 has an invalid length.
[   76.920972][ T6663] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.250441][ T6672] netlink: 152 bytes leftover after parsing attributes in process `syz.2.251'.
[   77.255394][ T6672] netlink: 596 bytes leftover after parsing attributes in process `syz.2.251'.
[   77.551178][ T6680] netlink: 148 bytes leftover after parsing attributes in process `syz.2.253'.
[   78.561251][ T6732] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   78.565348][ T6732] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   78.640234][ T6746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.789178][ T6752] bridge0: port 3(ip6gretap0) entered blocking state
[   78.792120][ T6752] bridge0: port 3(ip6gretap0) entered disabled state
[   78.796803][ T6752] ip6gretap0: entered allmulticast mode
[   78.800138][ T6752] ip6gretap0: entered promiscuous mode
[   78.802468][ T6752] bridge0: port 3(ip6gretap0) entered blocking state
[   78.805318][ T6752] bridge0: port 3(ip6gretap0) entered forwarding state
[   79.232165][ T6773] netlink: 'syz.0.281': attribute type 5 has an invalid length.
[   79.286006][ T6732] syz.2.270 (6732) used greatest stack depth: 17328 bytes left
[   79.532675][ T6796] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[   79.541991][ T6796] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[   79.547705][ T6796] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[   79.552193][ T6796] netlink: 'syz.2.284': attribute type 29 has an invalid length.
[   80.063830][ T6858] __nla_validate_parse: 4 callbacks suppressed
[   80.063845][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'.
[   80.070156][ T6858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'.
[   80.337774][ T6877] netlink: 84 bytes leftover after parsing attributes in process `syz.0.297'.
[   80.817738][ T6886] netlink: 'syz.0.301': attribute type 46 has an invalid length.
[   80.991808][ T6898] netlink: 84 bytes leftover after parsing attributes in process `syz.2.304'.
[   81.030826][ T6900] netlink: 830 bytes leftover after parsing attributes in process `syz.1.305'.
[   81.060616][ T6905] netlink: 204 bytes leftover after parsing attributes in process `syz.2.307'.
[   81.067364][ T6905] netlink: 'syz.2.307': attribute type 46 has an invalid length.
[   81.249705][ T6921] netlink: 'syz.2.311': attribute type 2 has an invalid length.
[   81.267823][ T6921] : entered promiscuous mode
[   81.289697][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   81.364560][ T6924] netlink: 84 bytes leftover after parsing attributes in process `syz.2.313'.
[   82.116739][ T6938] netlink: 1 bytes leftover after parsing attributes in process `syz.0.317'.
[   82.347653][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[   82.541855][ T6951] netlink: 'syz.2.322': attribute type 29 has an invalid length.
[   82.660280][ T6958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.332896][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1228801809 wd_nsec: 1228801940
[   90.281810][ T7059] !: renamed from bond_slave_0 (while UP)
[   90.392060][ T7066] tc_dump_action: action bad kind
[   90.402537][ T7070] __nla_validate_parse: 10 callbacks suppressed
[   90.402546][ T7070] netlink: 72 bytes leftover after parsing attributes in process `syz.2.362'.
[   90.524276][ T7075] netlink: 'syz.2.363': attribute type 4 has an invalid length.
[   90.557248][ T7078] syzkaller0: entered promiscuous mode
[   90.559567][ T7078] syzkaller0: entered allmulticast mode
[   90.576500][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'.
[   91.395708][ T7080] bridge0: port 3(ip6gretap0) entered blocking state
[   91.400149][ T7080] bridge0: port 3(ip6gretap0) entered disabled state
[   91.403102][ T7080] ip6gretap0: entered allmulticast mode
[   91.407699][ T7080] ip6gretap0: entered promiscuous mode
[   91.410922][ T7080] bridge0: port 3(ip6gretap0) entered blocking state
[   91.413852][ T7080] bridge0: port 3(ip6gretap0) entered forwarding state
[   91.488634][ T7083] syzkaller0: entered promiscuous mode
[   91.491206][ T7083] syzkaller0: entered allmulticast mode
[   91.571980][ T7091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.368'.
[   92.782360][ T7115] netlink: 'syz.0.376': attribute type 10 has an invalid length.
[   92.790626][ T7115] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   92.800176][ T7115] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   92.828040][ T7115] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   93.029746][ T7126] syzkaller0: entered promiscuous mode
[   93.035870][ T7126] syzkaller0: entered allmulticast mode
[   93.054998][ T7131] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   93.275945][ T7138] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   93.293088][ T7138] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.385'.
[   94.195560][ T7150] netlink: 14 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.462534][ T7150] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.489814][ T7157] cgroup: Unknown subsys name '0x0000000000000000'
[   95.281548][ T7154] delete_channel: no stack
[   95.432681][ T7188] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.403'.
[   95.648849][ T7197] C: renamed from team_slave_0 (while UP)
[   95.679974][ T7197] netlink: 'syz.1.407': attribute type 3 has an invalid length.
[   95.683202][ T7197] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   95.691624][ T7197] netlink: 116 bytes leftover after parsing attributes in process `syz.1.407'.
[   95.746562][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'.
[   95.808636][ T7199] netlink: 'syz.2.406': attribute type 11 has an invalid length.
[   95.811262][ T7199] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.406'.
[   96.477241][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.698146][ T7224] bridge0: port 3(ip6gretap0) entered blocking state
[   96.701110][ T7224] bridge0: port 3(ip6gretap0) entered disabled state
[   96.705000][ T7224] ip6gretap0: entered allmulticast mode
[   96.710343][ T7224] ip6gretap0: entered promiscuous mode
[   96.713316][ T7224] bridge0: port 3(ip6gretap0) entered blocking state
[   96.716294][ T7224] bridge0: port 3(ip6gretap0) entered forwarding state
[   96.851111][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'.
[   96.863499][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'.
[   96.881527][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'.
[   96.984437][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.418'.
[   97.011411][ T7233] netlink: 72 bytes leftover after parsing attributes in process `syz.2.417'.
[   97.122751][ T7241] netlink: 'syz.1.419': attribute type 9 has an invalid length.
[   97.152294][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'.
[   97.237280][ T7247] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   97.240149][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.035953][ T7349] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.042047][ T7349] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.150317][ T7353] sit0: entered allmulticast mode
[   99.343082][ T7356] netlink: 'syz.2.448': attribute type 3 has an invalid length.
[   99.902714][ T7353] sit0: entered promiscuous mode
[  100.029978][ T7363] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[  100.243469][ T5856] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  100.436859][ T7399] sit0: entered allmulticast mode
[  100.500081][ T7399] syzkaller0: entered promiscuous mode
[  100.502950][ T7399] syzkaller0: entered allmulticast mode
[  100.526246][ T7399] sit0: entered promiscuous mode
[  100.618337][ T7404] netlink: 'syz.0.462': attribute type 3 has an invalid length.
[  100.629549][ T7404] __nla_validate_parse: 11 callbacks suppressed
[  100.629626][ T7404] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.462'.
[  105.100492][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[  105.105766][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'.
[  105.900253][ T7437] netlink: 'syz.2.472': attribute type 16 has an invalid length.
[  105.902945][ T7437] netlink: 156 bytes leftover after parsing attributes in process `syz.2.472'.
[  105.906299][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'.
[  105.907770][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'.
[  105.915265][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'.
[  106.132853][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'.
[  106.137277][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'.
[  106.147803][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.482'.
[  106.504525][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[  106.507764][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[  106.731048][ T7502] netlink: 'syz.0.494': attribute type 41 has an invalid length.
[  106.756376][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[  107.305184][ T7528] netlink: 'syz.2.501': attribute type 21 has an invalid length.
[  108.480309][ T7573] netlink: 'syz.1.514': attribute type 29 has an invalid length.
[  108.484737][ T7573] openvswitch: netlink: IPv4 tun info is not correct
[  108.487789][ T7573] netlink: 'syz.1.514': attribute type 29 has an invalid length.
[  108.491453][ T7573] netlink: 'syz.1.514': attribute type 29 has an invalid length.
[  109.277202][ T7629] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  109.282745][ T7629] netlink: 'syz.1.527': attribute type 2 has an invalid length.
[  110.246305][ T7641] netlink: 'syz.2.535': attribute type 21 has an invalid length.
[  110.408334][ T7653] netlink: 'syz.2.540': attribute type 10 has an invalid length.
[  110.433164][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.448791][ T7653] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  110.935356][ T7659] netlink: 'syz.2.543': attribute type 1 has an invalid length.
[  110.938592][ T7659] netlink: 'syz.2.543': attribute type 4 has an invalid length.
[  110.941526][ T7659] __nla_validate_parse: 17 callbacks suppressed
[  110.941745][ T7659] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.543'.
[  111.187659][ T7670] netlink: 'syz.0.546': attribute type 10 has an invalid length.
[  111.240561][ T7671] unsupported nlmsg_type 40
[  111.789023][ T7670] team0 (unregistering): Port device team_slave_0 removed
[  111.924932][ T7670] team0 (unregistering): Port device team_slave_1 removed
[  111.946899][ T7670] team0 (unregistering): Port device dummy0 removed
[  111.979124][ T7670] team0 (unregistering): Port device wlan1 removed
[  112.561546][ T7682] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  112.657271][ T7685] netlink: 'syz.0.550': attribute type 29 has an invalid length.
[  112.871132][ T7705] netlink: 'syz.1.556': attribute type 1 has an invalid length.
[  112.877223][ T7705] netlink: 'syz.1.556': attribute type 2 has an invalid length.
[  112.969697][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[  112.975027][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'.
[  113.134355][ T7717] netlink: 'syz.1.561': attribute type 1 has an invalid length.
[  113.138230][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'.
[  113.649545][ T7728] netlink: 332 bytes leftover after parsing attributes in process `syz.2.566'.
[  114.409877][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.576'.
[  114.742768][ T7775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.584'.
[  114.926581][ T7786] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  115.103475][ T7793] syz.2.592 uses obsolete (PF_INET,SOCK_PACKET)
[  116.340630][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[  116.534606][ T7827] netlink: 'syz.2.603': attribute type 10 has an invalid length.
[  116.537575][ T7827] netlink: 55 bytes leftover after parsing attributes in process `syz.2.603'.
[  116.716084][ T7827] team0: Port device macvlan1 removed
[  117.357300][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[  117.417158][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'.
[  117.889388][ T7850] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  117.892386][ T7850] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  120.304301][ T7871] netlink: 172 bytes leftover after parsing attributes in process `syz.1.617'.
[  120.547896][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'.
[  121.207021][ T7864] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.613'.
[  121.219999][ T7882] netlink: 'syz.2.620': attribute type 33 has an invalid length.
[  121.223156][ T7882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.620'.
[  121.421169][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.424320][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.427187][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.430029][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.432885][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.435991][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.438876][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.441781][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.444710][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.447638][ T7890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  121.707384][ T5856] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  121.710344][ T5856] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  121.732950][ T7903] netlink: 'syz.0.626': attribute type 28 has an invalid length.
[  121.740840][ T7903] netlink: 'syz.0.626': attribute type 3 has an invalid length.
[  121.745762][ T7903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.626'.
[  122.067070][ T7921] netlink: 277 bytes leftover after parsing attributes in process `syz.0.633'.
[  122.388663][ T7930] netlink: 180 bytes leftover after parsing attributes in process `syz.2.636'.
[  122.441017][ T7931] can: request_module (can-proto-3) failed.
[  122.700391][ T7949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'.
[  122.704986][ T7949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'.
[  122.708763][ T7949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.642'.
[  123.064867][ T7954] sctp: [Deprecated]: syz.2.644 (pid 7954) Use of int in maxseg socket option.
[  123.064867][ T7954] Use struct sctp_assoc_value instead
[  123.208960][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'.
[  123.251962][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'.
[  123.256567][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'.
[  123.437725][ T7977] netlink: 332 bytes leftover after parsing attributes in process `syz.2.650'.
[  123.660205][ T7980] syzkaller0: entered promiscuous mode
[  124.167458][ T7993] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[  124.170305][ T7993] netlink: 'syz.0.658': attribute type 29 has an invalid length.
[  124.275110][ T8009] netlink: 'syz.2.661': attribute type 10 has an invalid length.
[  124.557887][ T8022] cgroup: fork rejected by pids controller in /syz1
[  124.890702][ T8009] team0 (unregistering): Port device team_slave_0 removed
[  124.919657][ T8009] team0 (unregistering): Port device team_slave_1 removed
[  125.216641][ T8134] netlink: 'syz.2.667': attribute type 21 has an invalid length.
[  125.309571][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.328544][ T8136] cgroup: fork rejected by pids controller in /syz2
[  125.399707][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.500368][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.588715][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.599548][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.605242][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.609098][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.616762][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.619457][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.667507][ T8151] C: renamed from team_slave_0
[  125.672447][ T8151] netlink: 'syz.0.674': attribute type 3 has an invalid length.
[  125.760566][   T12] ip6gretap0: left allmulticast mode
[  125.762432][   T12] ip6gretap0: left promiscuous mode
[  125.772484][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  125.777664][   T12] bridge_slave_1: left allmulticast mode
[  125.793817][   T12] bridge_slave_1: left promiscuous mode
[  125.795750][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.831008][   T12] bridge_slave_0: left allmulticast mode
[  125.832823][   T12] bridge_slave_0: left promiscuous mode
[  125.839638][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.019336][ T8159] netlink: 'syz.0.677': attribute type 16 has an invalid length.
[  126.022123][ T8159] netlink: 'syz.0.677': attribute type 3 has an invalid length.
[  126.072422][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.076039][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.078684][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.081356][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.084926][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.159037][   T12] bond0 (unregistering): (slave 1!): Releasing backup interface
[  126.165688][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.170301][   T12] bond0 (unregistering): Released all slaves
[  126.188701][ T5316] infiniband syz2: ib_query_port failed (-19)
[  126.269286][   T12] : left promiscuous mode
[  126.559867][ T8146] chnl_net:caif_netlink_parms(): no params data found
[  126.708252][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.711473][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.715484][ T8146] bridge_slave_0: entered allmulticast mode
[  126.719354][ T8146] bridge_slave_0: entered promiscuous mode
[  126.731284][ T8160] chnl_net:caif_netlink_parms(): no params data found
[  126.746626][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.750122][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.753488][ T8146] bridge_slave_1: entered allmulticast mode
[  126.758099][ T8146] bridge_slave_1: entered promiscuous mode
[  126.836556][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.889301][   T12] hsr_slave_0: left promiscuous mode
[  126.892190][   T12] hsr_slave_1: left promiscuous mode
[  126.899470][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.902865][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.911453][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.916184][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.938435][   T12] veth1_macvtap: left promiscuous mode
[  126.940879][   T12] veth0_macvtap: left promiscuous mode
[  126.943302][   T12] veth1_vlan: left promiscuous mode
[  126.954406][   T12] veth0_vlan: left promiscuous mode
[  127.211873][   T12] team0 (unregistering): Port device team_slave_1 removed
[  127.229263][   T12] team0 (unregistering): Port device C removed
[  127.426102][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.449028][ T5911] infiniband syz0: ib_query_port failed (-19)
[  127.458429][ T8205] bridge0: port 3(ip6gretap0) entered disabled state
[  127.461714][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.465444][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.536459][ T8146] team0: Port device team_slave_0 added
[  127.554725][ T8146] team0: Port device team_slave_1 added
[  127.557654][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.560028][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.562439][ T8160] bridge_slave_0: entered allmulticast mode
[  127.567350][ T8160] bridge_slave_0: entered promiscuous mode
[  127.570664][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.573196][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.576211][ T8160] bridge_slave_1: entered allmulticast mode
[  127.579435][ T8160] bridge_slave_1: entered promiscuous mode
[  127.628893][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.631696][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.641006][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.645435][ T5856] Bluetooth: hci2: command tx timeout
[  127.650145][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.653179][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.662126][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.687645][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.721755][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.919342][ T8160] team0: Port device team_slave_0 added
[  127.929932][ T8160] team0: Port device team_slave_1 added
[  127.961601][ T8146] hsr_slave_0: entered promiscuous mode
[  127.965744][ T8146] hsr_slave_1: entered promiscuous mode
[  127.967921][ T8146] debugfs: 'hsr0' already exists in 'hsr'
[  127.970340][ T8146] Cannot create hsr debugfs directory
[  127.986949][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.989206][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.999906][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.015019][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.018143][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.028692][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.107471][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.124555][ T5856] Bluetooth: hci0: command tx timeout
[  128.140718][ T8160] hsr_slave_0: entered promiscuous mode
[  128.143245][ T8160] hsr_slave_1: entered promiscuous mode
[  128.146675][ T8160] debugfs: 'hsr0' already exists in 'hsr'
[  128.148671][ T8160] Cannot create hsr debugfs directory
[  128.168336][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.248498][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.304716][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.486309][   T12] ip6gretap0: left allmulticast mode
[  128.488585][   T12] ip6gretap0: left promiscuous mode
[  128.491317][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  128.499084][   T12] bridge_slave_1: left allmulticast mode
[  128.501458][   T12] bridge_slave_1: left promiscuous mode
[  128.504097][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.509462][   T12] bridge_slave_0: left allmulticast mode
[  128.511797][   T12] bridge_slave_0: left promiscuous mode
[  128.515333][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.782024][   T12] bond0 (unregistering): (slave 5@): Releasing backup interface
[  128.786729][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.790649][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  128.794773][   T12] bond0 (unregistering): Released all slaves
[  128.817015][ T8229] netlink: 'syz.0.686': attribute type 29 has an invalid length.
[  128.845816][ T8232] netlink: 'syz.0.686': attribute type 29 has an invalid length.
[  128.860393][   T12] : left promiscuous mode
[  129.147154][ T8146] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  129.165196][ T8146] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  129.193034][ T8146] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  129.222540][   T12] hsr_slave_0: left promiscuous mode
[  129.230103][   T12] hsr_slave_1: left promiscuous mode
[  129.232251][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.237078][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.240301][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.242805][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.249426][   T12] veth1_macvtap: left promiscuous mode
[  129.251724][   T12] veth0_macvtap: left promiscuous mode
[  129.617595][ T8146] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  129.670006][ T8160] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  129.680778][ T8160] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  129.700464][ T8160] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  129.717784][ T8160] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  129.723888][ T5856] Bluetooth: hci2: command tx timeout
[  129.951937][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.979765][ T8146] 8021q: adding VLAN 0 to HW filter on device team0
[  129.986834][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.996807][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.999725][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.020205][ T8160] 8021q: adding VLAN 0 to HW filter on device team0
[  130.028968][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.031968][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.054769][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.057782][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.072140][ T8286] __nla_validate_parse: 9 callbacks suppressed
[  130.072153][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'.
[  130.081786][ T8286] netlink: 'syz.0.692': attribute type 2 has an invalid length.
[  130.092486][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.095646][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.102870][ T8286] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.692'.
[  130.158011][ T8160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  130.219718][ T5856] Bluetooth: hci0: command tx timeout
[  130.295034][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.322203][ T8146] veth0_vlan: entered promiscuous mode
[  130.335675][ T8146] veth1_vlan: entered promiscuous mode
[  130.359863][ T8146] veth0_macvtap: entered promiscuous mode
[  130.365741][ T8146] veth1_macvtap: entered promiscuous mode
[  130.379187][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.392419][ T8303] netlink: 'syz.0.694': attribute type 2 has an invalid length.
[  130.396390][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.396799][ T8303] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.694'.
[  130.418093][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.421072][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.424819][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.427946][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.438265][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.479447][ T8160] veth0_vlan: entered promiscuous mode
[  130.497640][ T8308] netlink: 'syz.0.695': attribute type 2 has an invalid length.
[  130.500295][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'.
[  130.500374][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.510770][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.514964][ T8160] veth1_vlan: entered promiscuous mode
[  130.534387][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  130.537286][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.540673][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.547141][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'.
[  130.557700][ T8160] veth0_macvtap: entered promiscuous mode
[  130.562766][ T8160] veth1_macvtap: entered promiscuous mode
[  130.573601][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.595286][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.618777][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.623213][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.636752][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.644027][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.698726][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.701537][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.721927][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.725089][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.063807][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.702'.
[  131.312278][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  131.500697][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  131.629218][ T8376] netlink: 'syz.1.714': attribute type 3 has an invalid length.
[  131.828909][ T5856] Bluetooth: hci2: command tx timeout
[  131.977567][ T8386] netlink: 14 bytes leftover after parsing attributes in process `syz.1.719'.
[  132.275058][ T8386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.283874][ T5856] Bluetooth: hci0: command tx timeout
[  132.291415][ T8386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.298440][ T8386] bond0 (unregistering): Released all slaves
[  132.559543][ T8411] netlink: 'syz.0.726': attribute type 10 has an invalid length.
[  132.562361][ T8411] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  132.572070][ T8411] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  132.578295][ T8411] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  132.617069][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.619738][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.446140][ T8440] netlink: 'syz.0.735': attribute type 2 has an invalid length.
[  133.560556][ T8441] xt_policy: too many policy elements
[  133.651920][ T8441] netlink: 'syz.0.735': attribute type 25 has an invalid length.
[  133.897661][ T5856] Bluetooth: hci2: command tx timeout
[  134.365646][ T5856] Bluetooth: hci0: command tx timeout
[  135.266654][ T8531] netlink: 'syz.0.765': attribute type 13 has an invalid length.
[  135.690016][ T8536] netlink: 'syz.0.767': attribute type 2 has an invalid length.
[  135.693315][ T8536] __nla_validate_parse: 8 callbacks suppressed
[  135.693325][ T8536] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.702207][ T8536] nbd: must specify an index to disconnect
[  135.733222][ T8536] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.948395][ T8544] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.769'.
[  135.953408][ T8544] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.769'.
[  135.964925][ T8550] netlink: 76 bytes leftover after parsing attributes in process `syz.2.771'.
[  136.012219][ T8557] netlink: 'syz.2.772': attribute type 16 has an invalid length.
[  136.015445][ T8557] netlink: 'syz.2.772': attribute type 3 has an invalid length.
[  136.018174][ T8557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.772'.
[  136.021991][ T8557] netlink: 'syz.2.772': attribute type 17 has an invalid length.
[  136.035919][ T8557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.772'.
[  136.221995][ T8569] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  136.227713][ T8569] netlink: 'syz.1.776': attribute type 2 has an invalid length.
[  137.137863][ T8590] netlink: 13 bytes leftover after parsing attributes in process `syz.2.783'.
[  137.621730][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'.
[  137.627094][ T8608] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.790'.
[  138.421154][ T8634] netlink: 'syz.0.799': attribute type 3 has an invalid length.
[  138.512423][ T8637] netlink: 'syz.2.800': attribute type 21 has an invalid length.
[  138.516206][ T8637] netlink: 'syz.2.800': attribute type 5 has an invalid length.
[  138.750612][ T8653] net_ratelimit: 3322 callbacks suppressed
[  138.750621][ T8653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.560292][ T8683] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[  139.596043][ T8679] : port 1(vlan0) entered blocking state
[  139.598708][ T8679] : port 1(vlan0) entered disabled state
[  139.601497][ T8679] vlan0: entered allmulticast mode
[  139.603315][ T8679] veth0_vlan: entered allmulticast mode
[  139.623537][ T8679] vlan0: entered promiscuous mode
[  139.655319][ T8685] : port 1(vlan0) entered blocking state
[  139.657750][ T8685] : port 1(vlan0) entered forwarding state
[  139.809790][ T8690] openvswitch: netlink: Message has 6 unknown bytes.
[  139.909063][ T8697] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.918691][ T8697] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.701316][ T8712] __nla_validate_parse: 7 callbacks suppressed
[  140.701330][ T8712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.822'.
[  140.767017][ T8719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'.
[  140.781740][ T8716] netlink: 'syz.1.823': attribute type 29 has an invalid length.
[  140.786503][ T8716] netlink: 'syz.1.823': attribute type 29 has an invalid length.
[  140.789922][ T8716] netlink: 'syz.1.823': attribute type 29 has an invalid length.
[  140.796142][ T8717] netlink: 'syz.1.823': attribute type 29 has an invalid length.
[  140.808697][ T8719] can: request_module (can-proto-0) failed.
[  141.133396][ T8741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.830'.
[  141.634040][ T8759] netlink: 17 bytes leftover after parsing attributes in process `syz.0.834'.
[  141.640025][ T8759] netlink: zone id is out of range
[  141.644915][ T8759] netlink: zone id is out of range
[  141.649550][ T8759] netlink: zone id is out of range
[  141.655296][ T8759] netlink: zone id is out of range
[  141.661098][ T8759] netlink: zone id is out of range
[  141.674054][ T8759] netlink: zone id is out of range
[  141.676379][ T8759] netlink: zone id is out of range
[  141.680795][ T8759] netlink: zone id is out of range
[  141.683460][ T8762] netlink: 112 bytes leftover after parsing attributes in process `syz.0.834'.
[  141.755831][ T8767] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  141.758256][ T8767] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.836'.
[  141.904835][ T8778] netlink: 'syz.1.839': attribute type 10 has an invalid length.
[  141.907726][ T8778] netlink: 55 bytes leftover after parsing attributes in process `syz.1.839'.
[  142.008419][ T8792] netlink: 10 bytes leftover after parsing attributes in process `syz.1.845'.
[  142.012413][ T8792] netlink: 1 bytes leftover after parsing attributes in process `syz.1.845'.
[  142.084282][ T8800] netlink: 'syz.1.848': attribute type 5 has an invalid length.
[  142.093170][ T8800] : entered promiscuous mode
[  142.128554][ T8800] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  142.131511][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'.
[  143.007483][ T5856] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  143.254030][ T8854] delete_channel: no stack
[  143.258382][ T8854] delete_channel: no stack
[  143.330725][ T8864] netlink: 'syz.1.869': attribute type 2 has an invalid length.
[  144.426133][ T8920] netlink: 'syz.1.886': attribute type 21 has an invalid length.
[  145.998933][ T8977] __nla_validate_parse: 13 callbacks suppressed
[  145.998946][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'.
[  146.581649][ T8959] infiniband syz!: set active
[  146.584085][ T8959] infiniband syz!: added team_slave_0
[  146.587218][ T8959] syz!: rxe_create_cq: returned err = -12
[  146.589208][ T8959] infiniband syz!: Couldn't create ib_mad CQ
[  146.591276][ T8959] infiniband syz!: Couldn't open port 1
[  146.609614][ T8959] RDS/IB: syz!: added
[  146.611703][ T8959] smc: adding ib device syz! with port count 1
[  146.614865][ T8959] smc:    ib device syz! port 1 has pnetid 
[  147.084359][ T5856] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  147.087667][ T5856] Bluetooth: hci1: Injecting HCI hardware error event
[  147.090460][ T5856] Bluetooth: hci1: hardware error 0x00
[  147.198269][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'.
[  147.201315][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'.
[  147.212643][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[  147.234053][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.918'.
[  147.263305][ T9015] net_ratelimit: 79 callbacks suppressed
[  147.263314][ T9015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.390680][ T9025] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  147.407670][ T9025] validate_nla: 2 callbacks suppressed
[  147.407770][ T9025] netlink: 'syz.0.925': attribute type 10 has an invalid length.
[  147.472886][ T9030] netlink: 'syz.0.927': attribute type 33 has an invalid length.
[  147.473125][ T9031] netlink: 'syz.0.927': attribute type 33 has an invalid length.
[  147.482794][ T9031] netlink: 164 bytes leftover after parsing attributes in process `syz.0.927'.
[  147.487528][ T9030] netlink: 164 bytes leftover after parsing attributes in process `syz.0.927'.
[  147.807116][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'.
[  147.810454][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.931'.
[  148.313424][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'.
[  148.508029][ T9083] netlink: 'syz.1.944': attribute type 6 has an invalid length.
[  149.164281][ T5856] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  149.445706][ T9107] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.490371][ T9103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.494893][ T9103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.581955][ T9117] lo speed is unknown, defaulting to 1000
[  149.584488][ T9117] lo speed is unknown, defaulting to 1000
[  149.588521][ T9117] lo speed is unknown, defaulting to 1000
[  149.661386][ T9117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  149.730329][ T9117] lo speed is unknown, defaulting to 1000
[  149.747784][ T9117] lo speed is unknown, defaulting to 1000
[  149.755389][ T9117] lo speed is unknown, defaulting to 1000
[  150.259620][ T9143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.780151][ T9163] netlink: 'syz.0.972': attribute type 1 has an invalid length.
[  151.067654][ T5856] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  151.648788][ T9186] __nla_validate_parse: 21 callbacks suppressed
[  151.648801][ T9186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.981'.
[  151.726042][ T9188] netlink: 'syz.0.981': attribute type 13 has an invalid length.
[  151.729993][ T9188] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  151.733042][ T9188] netlink: 'syz.0.981': attribute type 3 has an invalid length.
[  151.736503][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.981'.
[  151.966522][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'.
[  151.969389][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'.
[  151.979809][ T9192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.982370][ T9192] IPv6: NLM_F_CREATE should be set when creating new route
[  151.985187][ T9192] IPv6: NLM_F_CREATE should be set when creating new route
[  152.155612][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'.
[  153.304620][ T9231] netlink: 'syz.1.997': attribute type 11 has an invalid length.
[  153.764914][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  155.136408][ T9328] pimreg: tun_chr_ioctl cmd 1074025678
[  155.140652][ T9328] pimreg: tun_chr_ioctl cmd 1074025677
[  155.144378][ T9328] pimreg: linktype set to 778
[  155.438930][ T9349] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1040'.
[  155.444966][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  155.449729][ T9352] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  155.452680][ T9352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.391309][ T9367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1048'.
[  156.396605][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1048'.
[  156.545403][ T9384] netlink: 'syz.0.1054': attribute type 10 has an invalid length.
[  156.787099][ T9405] netlink: 'syz.2.1060': attribute type 29 has an invalid length.
[  156.790287][ T9405] netlink: 'syz.2.1060': attribute type 29 has an invalid length.
[  157.212253][ T9429] netlink: 'syz.1.1069': attribute type 10 has an invalid length.
[  157.215877][ T9429] __nla_validate_parse: 3 callbacks suppressed
[  157.215890][ T9429] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1069'.
[  157.322760][ T9439] netlink: 'syz.0.1068': attribute type 21 has an invalid length.
[  157.343094][ T9439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1068'.
[  157.456646][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'.
[  157.505965][ T5856] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  157.541681][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.547973][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.553440][ T9453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.558432][ T9453] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.357096][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[  158.360796][ T9495] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  158.363613][ T9496] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  158.394311][ T9500] tap0: tun_chr_ioctl cmd 1074025678
[  158.396084][ T9500] tap0: group set to 0
[  158.632818][ T9510] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1097'.
[  158.836052][ T9516] netlink: 'syz.0.1100': attribute type 29 has an invalid length.
[  158.852504][ T9516] netlink: 'syz.0.1100': attribute type 29 has an invalid length.
[  158.860155][ T9516] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  158.958825][ T9520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.963202][ T9520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.003451][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'.
[  159.008905][ T9523] netlink: 'syz.0.1102': attribute type 64 has an invalid length.
[  159.020633][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1103'.
[  159.030533][ T9522] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1103'.
[  159.161730][ T9535] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1106'.
[  159.443336][ T5856] Bluetooth: hci0: Dropping invalid advertising data
[  159.445755][ T5856] Bluetooth: hci0: Dropping invalid advertising data
[  159.912815][ T9572] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  159.916895][ T9572] netlink: 'syz.0.1119': attribute type 4 has an invalid length.
[  159.920099][ T9572] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1119'.
[  159.925663][ T9572] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  159.928918][ T9572] netlink: 'syz.0.1119': attribute type 4 has an invalid length.
[  161.120746][ T9588] netlink: 'syz.0.1124': attribute type 1 has an invalid length.
[  161.189405][ T9588] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  161.346439][ T9596] veth0_macvtap: left promiscuous mode
[  161.527110][ T9609] netlink: 'syz.1.1127': attribute type 11 has an invalid length.
[  161.810171][ T9613] bridge0: port 3(ip6gretap0) entered blocking state
[  161.812950][ T9613] bridge0: port 3(ip6gretap0) entered forwarding state
[  161.816101][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.818957][ T9613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.822072][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.825113][ T9613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.840196][ T9613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.432030][ T9686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.438959][ T9686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  164.392089][ T5856] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[  164.466570][ T9717] delete_channel: no stack
[  172.325048][ T9776] __nla_validate_parse: 7 callbacks suppressed
[  172.325057][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1181'.
[  172.331021][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1181'.
[  172.341307][ T9776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1181'.
[  172.349411][ T9776] validate_nla: 6 callbacks suppressed
[  172.349418][ T9776] netlink: 'syz.0.1181': attribute type 10 has an invalid length.
[  172.365418][ T9776] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1181'.
[  172.431449][ T9777] netlink: 495 bytes leftover after parsing attributes in process `syz.2.1180'.
[  172.551828][ T9787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1184'.
[  172.670513][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1185'.
[  172.674489][ T9791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1185'.
[  173.699438][ T9808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1190'.
[  174.602855][ T9851] pimreg: tun_chr_ioctl cmd 1074025678
[  174.610043][ T9849] pimreg: tun_chr_ioctl cmd 1074025677
[  174.612576][ T9849] pimreg: linktype set to 778
[  174.737674][ T9858] netlink: 'syz.2.1209': attribute type 21 has an invalid length.
[  174.742442][ T9858] netlink: 'syz.2.1209': attribute type 10 has an invalid length.
[  174.892066][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'.
[  174.903339][ T9874] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  174.911748][ T9874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.072538][ T9875] netlink: 'syz.2.1215': attribute type 21 has an invalid length.
[  175.299044][ T9886] netlink: 'syz.0.1218': attribute type 21 has an invalid length.
[  176.431261][ T9909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.441318][   T24] lo speed is unknown, defaulting to 1000
[  176.920427][ T9930] netlink: 'syz.1.1233': attribute type 1 has an invalid length.
[  176.923485][ T9930] netlink: 'syz.1.1233': attribute type 1 has an invalid length.
[  177.020939][ T9943] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  178.134823][ T9974] netlink: 'syz.1.1246': attribute type 3 has an invalid length.
[  178.178736][ T9965] lo speed is unknown, defaulting to 1000
[  178.468983][ T9992] __nla_validate_parse: 11 callbacks suppressed
[  178.468992][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'.
[  178.475555][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'.
[  178.500600][ T9994] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  178.506459][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  178.763072][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'.
[  178.887643][T10008] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  178.890776][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'.
[  179.696859][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'.
[  179.700773][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1259'.
[  179.996455][T10029] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  180.746077][T10050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1271'.
[  180.791641][T10057] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1272'.
[  180.793279][T10056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1272'.
[  180.810787][T10057] netlink: 'syz.2.1272': attribute type 3 has an invalid length.
[  181.032039][T10060] netlink: 'syz.0.1274': attribute type 21 has an invalid length.
[  181.038629][T10060] netlink: 'syz.0.1274': attribute type 6 has an invalid length.
[  181.391896][T10092] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  181.456448][T10096] netlink: 'syz.0.1285': attribute type 49 has an invalid length.
[  181.478447][T10098] netlink: 'syz.1.1287': attribute type 21 has an invalid length.
[  181.672135][T10123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.675717][T10123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.991538][T10171] @: renamed from bond_slave_0 (while UP)
[  183.171392][T10184] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  186.486771][T10213] __nla_validate_parse: 19 callbacks suppressed
[  186.486826][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'.
[  186.492676][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  186.497019][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1327'.
[  186.501161][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  186.519986][T10216] validate_nla: 3 callbacks suppressed
[  186.520039][T10216] netlink: 'syz.1.1328': attribute type 2 has an invalid length.
[  186.526374][T10218] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  186.528267][T10216] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1328'.
[  186.529437][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  187.649414][T10246] syz.0.1337 (10246) used obsolete PPPIOCDETACH ioctl
[  187.888918][T10273] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1343'.
[  187.913461][T10280] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1345'.
[  187.963882][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1348'.
[  187.969986][T10287] netlink: 'syz.0.1348': attribute type 39 has an invalid length.
[  188.143961][T10300] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1352'.
[  189.775129][T10330] netlink: 'syz.0.1363': attribute type 1 has an invalid length.
[  190.540821][T10334] @: renamed from bond_slave_0 (while UP)
[  191.219032][T10373] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  191.263035][T10373] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  191.265942][T10373] openvswitch: netlink: Key 0 has unexpected len 1 expected 0
[  191.269622][T10373] netlink: 'syz.2.1375': attribute type 3 has an invalid length.
[  191.272215][T10373] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  191.877974][T10386] syzkaller0: entered promiscuous mode
[  191.881395][T10386] syzkaller0: entered allmulticast mode
[  193.332001][T10437] openvswitch: netlink: EtherType 50a is less than min 600
[  193.336557][T10437] __nla_validate_parse: 3 callbacks suppressed
[  193.336565][T10437] netlink: 948 bytes leftover after parsing attributes in process `syz.1.1396'.
[  193.359489][T10437] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1396'.
[  193.364350][T10437] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1396'.
[  194.059531][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.062148][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.246588][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'.
[  194.249687][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'.
[  194.336493][T10495] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  194.645100][T10505] netlink: 'syz.2.1422': attribute type 1 has an invalid length.
[  194.648174][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'.
[  194.888616][T10509] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  195.233865][   T33] audit: type=1107 audit(1758588984.593:2): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iΪ/Qzl2@]߶ʦI=jQRUcQd|jܱ㠾6nͰvڗ)hSvtzlct3ټ9?Fq͛'
[  195.255986][   T33] audit: type=1107 audit(1758588984.593:3): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iΪ/Qzl2@]߶ʦI=jQRUcQd|jܱ㠾6nͰvڗ)hSvtzlct3ټ9?Fq͛'
[  195.823102][T10548] netlink: 'syz.2.1435': attribute type 5 has an invalid length.
[  195.830099][T10548] netlink: 'syz.2.1435': attribute type 5 has an invalid length.
[  196.044540][T10551] netlink: 'syz.0.1437': attribute type 5 has an invalid length.
[  196.137244][T10558] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  196.174836][T10558] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1438'.
[  196.178989][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'.
[  196.191393][T10558] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1438'.
[  196.220719][T10558] netlink: 'syz.1.1438': attribute type 2 has an invalid length.
[  196.229021][T10558] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1438'.
[  197.025791][T10600] netlink: 'syz.2.1451': attribute type 21 has an invalid length.
[  197.141218][T10603] netlink: 'syz.1.1453': attribute type 1 has an invalid length.
[  197.236972][T10612] netlink: 'syz.2.1456': attribute type 6 has an invalid length.
[  197.286136][T10615] Dead loop on virtual device ip6_vti0, fix it urgently!
[  197.348290][T10627] @: renamed from bond_slave_0
[  197.365775][T10627] netlink: 'syz.1.1459': attribute type 10 has an invalid length.
[  197.371264][T10627] team0: Device ipvlan1 failed to register rx_handler
[  198.352366][T10655] __nla_validate_parse: 15 callbacks suppressed
[  198.352382][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'.
[  198.483764][T10655] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1470'.
[  198.778305][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'.
[  198.781822][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'.
[  198.809668][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'.
[  198.813563][T10671] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  198.920256][T10680] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  199.808251][T10717] validate_nla: 1 callbacks suppressed
[  199.808260][T10717] netlink: 'syz.2.1490': attribute type 10 has an invalid length.
[  199.812733][T10717] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1490'.
[  200.171963][T10731] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1493'.
[  200.248119][T10735] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  200.252107][T10735] netlink: 'syz.1.1495': attribute type 5 has an invalid length.
[  200.258007][T10735] netlink: 'syz.1.1495': attribute type 7 has an invalid length.
[  200.261390][T10735] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1495'.
[  200.266378][T10735] openvswitch: netlink: IP tunnel dst address not specified
[  200.297235][T10737] nftables ruleset with unbound set
[  200.316324][T10737] netlink: 'syz.2.1496': attribute type 9 has an invalid length.
[  200.319104][T10737] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.1496'.
[  200.359541][T10747] netlink: 'syz.0.1498': attribute type 39 has an invalid length.
[  200.404955][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'.
[  200.410226][T10750] netlink: 'syz.1.1500': attribute type 10 has an invalid length.
[  200.475487][T10756] netlink: 'syz.1.1500': attribute type 11 has an invalid length.
[  200.669252][T10750] team0 (unregistering): Port device team_slave_0 removed
[  200.720172][T10750] team0 (unregistering): Port device team_slave_1 removed
[  200.788784][T10755] C: renamed from team_slave_0 (while UP)
[  200.788790][ T5316] syz!: Port: 1 Link DOWN
[  200.854654][T10748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.786083][T10806] netlink: 'syz.0.1517': attribute type 2 has an invalid length.
[  202.097039][T10843] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  202.263396][T10869] delete_channel: no stack
[  202.265956][T10869] delete_channel: no stack
[  202.358112][ T5856] Bluetooth: hci2: Malformed Event: 0x13
[  203.238986][T10886] sctp: [Deprecated]: syz.1.1546 (pid 10886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.238986][T10886] Use struct sctp_sack_info instead
[  203.902487][T10893] __nla_validate_parse: 11 callbacks suppressed
[  203.902501][T10893] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1549'.
[  205.136185][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'.
[  205.140090][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'.
[  205.627792][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'.
[  205.631609][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'.
[  205.699232][T10954] netlink: 'syz.0.1569': attribute type 3 has an invalid length.
[  205.702784][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  205.717733][T10954] netlink: 'syz.0.1569': attribute type 10 has an invalid length.
[  205.720287][T10954] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1569'.
[  205.723320][T10954] bond0: entered promiscuous mode
[  205.726535][T10954] @: entered promiscuous mode
[  205.729591][T10954] bond_slave_1: entered promiscuous mode
[  205.732939][T10954] bridge0: port 4(bond0) entered blocking state
[  205.740764][T10954] bridge0: port 4(bond0) entered disabled state
[  205.744789][T10954] bond0: entered allmulticast mode
[  205.746624][T10954] @: entered allmulticast mode
[  205.748419][T10954] bond_slave_1: entered allmulticast mode
[  205.759352][T10954] bridge0: port 4(bond0) entered blocking state
[  205.762888][T10954] bridge0: port 4(bond0) entered forwarding state
[  205.768531][T10956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'.
[  205.773315][T10956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1570'.
[  205.866969][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'.
[  206.088572][T10981] netlink: 'syz.2.1577': attribute type 32 has an invalid length.
[  206.956531][T10994] netlink: 'syz.1.1582': attribute type 32 has an invalid length.
[  207.758326][T11035] netlink: 'syz.1.1594': attribute type 21 has an invalid length.
[  209.276531][T11084] __nla_validate_parse: 9 callbacks suppressed
[  209.276573][T11084] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1610'.
[  209.283273][T11084] netlink: zone id is out of range
[  209.287862][T11084] netlink: zone id is out of range
[  209.289699][T11084] netlink: get zone limit has 8 unknown bytes
[  210.349933][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.353829][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.358020][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.362142][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.366655][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.369719][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.373054][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.377190][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  210.380940][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1620'.
[  211.031501][T11141] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  211.266270][T11147] netlink: 'syz.2.1629': attribute type 6 has an invalid length.
[  211.278222][T11147] netlink: 'syz.2.1629': attribute type 5 has an invalid length.
[  213.931673][T11181] netlink: 'syz.1.1641': attribute type 29 has an invalid length.
[  213.935682][T11181] netlink: 'syz.1.1641': attribute type 29 has an invalid length.
[  213.956378][T11181] netlink: 'syz.1.1641': attribute type 29 has an invalid length.
[  214.321802][T11219] __nla_validate_parse: 61 callbacks suppressed
[  214.321874][T11219] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1653'.
[  215.679098][T11262] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.683031][T11262] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.549310][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'.
[  217.051938][T11299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.246800][T11306] netlink: 'syz.1.1678': attribute type 6 has an invalid length.
[  217.250089][T11306] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1678'.
[  218.129073][T11321] ==================================================================
[  218.131777][T11321] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  218.134702][T11321] Read of size 1 at addr ffff88811524d530 by task syz.0.1683/11321
[  218.138205][T11321] 
[  218.139023][T11321] CPU: 1 UID: 0 PID: 11321 Comm: syz.0.1683 Not tainted syzkaller #0 PREEMPT(full) 
[  218.139032][T11321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.139036][T11321] Call Trace:
[  218.139040][T11321]  <TASK>
[  218.139043][T11321]  dump_stack_lvl+0x189/0x250
[  218.139055][T11321]  ? __kasan_check_byte+0x12/0x40
[  218.139066][T11321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.139073][T11321]  ? lock_release+0x4b/0x3e0
[  218.139083][T11321]  ? __virt_addr_valid+0x4a5/0x5c0
[  218.139093][T11321]  print_report+0xca/0x240
[  218.139099][T11321]  ? xfrm_state_find+0x2cf2/0x5400
[  218.139108][T11321]  kasan_report+0x118/0x150
[  218.139114][T11321]  ? xfrm_state_find+0x2cf2/0x5400
[  218.139122][T11321]  xfrm_state_find+0x2cf2/0x5400
[  218.139132][T11321]  ? validate_chain+0x897/0x2140
[  218.139140][T11321]  ? xfrm_state_find+0x1da/0x5400
[  218.139148][T11321]  ? __pfx_xfrm_state_find+0x10/0x10
[  218.139160][T11321]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  218.139175][T11321]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  218.139182][T11321]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  218.139192][T11321]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  218.139199][T11321]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  218.139211][T11321]  ? xfrm_expand_policies+0x41f/0x6a0
[  218.139222][T11321]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  218.139233][T11321]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  218.139243][T11321]  ? __asan_memset+0x22/0x50
[  218.139251][T11321]  xfrm_lookup_route+0x3c/0x1c0
[  218.139257][T11321]  ip_tunnel_xmit+0x96b/0x2390
[  218.139267][T11321]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  218.139272][T11321]  ? gre_build_header+0x31c/0xa40
[  218.139282][T11321]  ? __pfx_gre_build_header+0x10/0x10
[  218.139295][T11321]  ? iptunnel_handle_offloads+0x2fd/0x630
[  218.139304][T11321]  ipgre_xmit+0x89e/0xc50
[  218.139314][T11321]  ? __pfx_ipgre_xmit+0x10/0x10
[  218.139324][T11321]  dev_hard_start_xmit+0x2d7/0x830
[  218.139337][T11321]  __dev_queue_xmit+0x1b8d/0x3b50
[  218.139374][T11321]  ? do_syscall_64+0xfa/0x3b0
[  218.139383][T11321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.139391][T11321]  ? __dev_queue_xmit+0x27b/0x3b50
[  218.139403][T11321]  ? __pfx___dev_queue_xmit+0x10/0x10
[  218.139414][T11321]  ? rcu_is_watching+0x15/0xb0
[  218.139422][T11321]  ? skb_release_data+0x2b6/0x7c0
[  218.139433][T11321]  ? pskb_expand_head+0xa40/0x1150
[  218.139443][T11321]  ? __bpf_redirect+0x56d/0xe40
[  218.139451][T11321]  __bpf_tx_skb+0x18e/0x260
[  218.139461][T11321]  bpf_clone_redirect+0x272/0x3d0
[  218.139469][T11321]  ? bpf_test_run+0x197/0x7b0
[  218.139476][T11321]  bpf_prog_7c64685fc60f7d44+0x5f/0x68
[  218.139482][T11321]  ? perf_output_sample+0x1bd0/0x2050
[  218.139489][T11321]  ? perf_trace_preemptirq_template+0x280/0x340
[  218.139498][T11321]  ? __local_bh_enable_ip+0xce/0x1c0
[  218.139505][T11321]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  218.139515][T11321]  ? __local_bh_disable_ip+0xf1/0x190
[  218.139521][T11321]  ? __pfx___cant_migrate+0x10/0x10
[  218.139527][T11321]  ? __local_bh_enable_ip+0x12d/0x1c0
[  218.139532][T11321]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  218.139541][T11321]  ? bpf_test_timer_continue+0x136/0x350
[  218.139549][T11321]  bpf_test_run+0x318/0x7b0
[  218.139556][T11321]  ? perf_trace_run_bpf_submit+0xee/0x170
[  218.139566][T11321]  ? __pfx_bpf_test_run+0x10/0x10
[  218.139575][T11321]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.139583][T11321]  ? bpf_prog_test_run_skb+0x891/0x1550
[  218.139590][T11321]  ? convert___skb_to_skb+0x3d/0x590
[  218.139597][T11321]  bpf_prog_test_run_skb+0xb4e/0x1550
[  218.139606][T11321]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  218.139613][T11321]  bpf_prog_test_run+0x2c7/0x340
[  218.139623][T11321]  __sys_bpf+0x55a/0x850
[  218.139630][T11321]  ? __pfx___sys_bpf+0x10/0x10
[  218.139640][T11321]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  218.139649][T11321]  ? rcu_is_watching+0x15/0xb0
[  218.139656][T11321]  __x64_sys_bpf+0x7c/0x90
[  218.139663][T11321]  do_syscall_64+0xfa/0x3b0
[  218.139670][T11321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.139676][T11321]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.139683][T11321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.139689][T11321] RIP: 0033:0x7fa786d8ec29
[  218.139695][T11321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.139701][T11321] RSP: 002b:00007fa787b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  218.139709][T11321] RAX: ffffffffffffffda RBX: 00007fa786fd5fa0 RCX: 00007fa786d8ec29
[  218.139714][T11321] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  218.139718][T11321] RBP: 00007fa786e11e41 R08: 0000000000000000 R09: 0000000000000000
[  218.139722][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.139726][T11321] R13: 00007fa786fd6038 R14: 00007fa786fd5fa0 R15: 00007ffc0efa65e8
[  218.139732][T11321]  </TASK>
[  218.139735][T11321] 
[  218.307540][T11321] Allocated by task 8317:
[  218.308987][T11321]  kasan_save_track+0x3e/0x80
[  218.310543][T11321]  __kasan_slab_alloc+0x6c/0x80
[  218.312154][T11321]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  218.313938][T11321]  xfrm_state_alloc+0x24/0x2f0
[  218.315634][T11321]  __find_acq_core+0x8a7/0x1c00
[  218.317282][T11321]  xfrm_find_acq+0x78/0xa0
[  218.318954][T11321]  xfrm_alloc_userspi+0x6b3/0xc90
[  218.321130][T11321]  xfrm_user_rcv_msg+0x7a3/0xab0
[  218.323278][T11321]  netlink_rcv_skb+0x208/0x470
[  218.325310][T11321]  xfrm_netlink_rcv+0x79/0x90
[  218.327044][T11321]  netlink_unicast+0x82f/0x9e0
[  218.328830][T11321]  netlink_sendmsg+0x805/0xb30
[  218.330796][T11321]  __sock_sendmsg+0x21c/0x270
[  218.332355][T11321]  ____sys_sendmsg+0x505/0x830
[  218.333912][T11321]  ___sys_sendmsg+0x21f/0x2a0
[  218.335517][T11321]  __x64_sys_sendmsg+0x19b/0x260
[  218.337208][T11321]  do_syscall_64+0xfa/0x3b0
[  218.338893][T11321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.341445][T11321] 
[  218.342493][T11321] Freed by task 47:
[  218.344150][T11321]  kasan_save_track+0x3e/0x80
[  218.346172][T11321]  kasan_save_free_info+0x46/0x50
[  218.347946][T11321]  __kasan_slab_free+0x5b/0x80
[  218.349576][T11321]  kmem_cache_free+0x18f/0x400
[  218.351166][T11321]  xfrm_state_gc_task+0x52d/0x6b0
[  218.352828][T11321]  process_scheduled_works+0xae1/0x17b0
[  218.354636][T11321]  worker_thread+0x8a0/0xda0
[  218.356183][T11321]  kthread+0x711/0x8a0
[  218.357584][T11321]  ret_from_fork+0x439/0x7d0
[  218.359403][T11321]  ret_from_fork_asm+0x1a/0x30
[  218.361412][T11321] 
[  218.362443][T11321] The buggy address belongs to the object at ffff88811524d200
[  218.362443][T11321]  which belongs to the cache xfrm_state of size 928
[  218.368153][T11321] The buggy address is located 816 bytes inside of
[  218.368153][T11321]  freed 928-byte region [ffff88811524d200, ffff88811524d5a0)
[  218.372681][T11321] 
[  218.373498][T11321] The buggy address belongs to the physical page:
[  218.375583][T11321] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811524d200 pfn:0x11524c
[  218.379138][T11321] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  218.382731][T11321] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  218.385747][T11321] page_type: f5(slab)
[  218.387483][T11321] raw: 057ff00000000040 ffff888104f1e640 dead000000000122 0000000000000000
[  218.390488][T11321] raw: ffff88811524d200 00000000800e0008 00000000f5000000 0000000000000000
[  218.393258][T11321] head: 057ff00000000040 ffff888104f1e640 dead000000000122 0000000000000000
[  218.396065][T11321] head: ffff88811524d200 00000000800e0008 00000000f5000000 0000000000000000
[  218.399113][T11321] head: 057ff00000000002 ffffea0004549301 00000000ffffffff 00000000ffffffff
[  218.402654][T11321] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  218.405441][T11321] page dumped because: kasan: bad access detected
[  218.407529][T11321] page_owner tracks the page as allocated
[  218.409792][T11321] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6327, tgid 6326 (syz.1.126), ts 67528751739, free_ts 67416971103
[  218.416446][T11321]  post_alloc_hook+0x240/0x2a0
[  218.418014][T11321]  get_page_from_freelist+0x21e4/0x22c0
[  218.420361][T11321]  __alloc_frozen_pages_noprof+0x181/0x370
[  218.422705][T11321]  alloc_pages_mpol+0x232/0x4a0
[  218.424304][T11321]  allocate_slab+0x8a/0x370
[  218.425796][T11321]  ___slab_alloc+0xbeb/0x1420
[  218.427332][T11321]  kmem_cache_alloc_noprof+0x283/0x3c0
[  218.429455][T11321]  xfrm_state_alloc+0x24/0x2f0
[  218.431556][T11321]  xfrm_add_sa+0x17d1/0x4070
[  218.433141][T11321]  xfrm_user_rcv_msg+0x7a3/0xab0
[  218.434786][T11321]  netlink_rcv_skb+0x208/0x470
[  218.436416][T11321]  xfrm_netlink_rcv+0x79/0x90
[  218.437973][T11321]  netlink_unicast+0x82f/0x9e0
[  218.439976][T11321]  netlink_sendmsg+0x805/0xb30
[  218.442050][T11321]  __sock_sendmsg+0x21c/0x270
[  218.444024][T11321]  ____sys_sendmsg+0x505/0x830
[  218.445691][T11321] page last free pid 40 tgid 40 stack trace:
[  218.447609][T11321]  __free_frozen_pages+0xbc4/0xd30
[  218.449648][T11321]  free_large_kmalloc+0x13a/0x1f0
[  218.451840][T11321]  htab_map_free+0x7b2/0x980
[  218.453473][T11321]  bpf_map_free_deferred+0x140/0x160
[  218.455187][T11321]  process_scheduled_works+0xae1/0x17b0
[  218.456983][T11321]  worker_thread+0x8a0/0xda0
[  218.458619][T11321]  kthread+0x711/0x8a0
[  218.460391][T11321]  ret_from_fork+0x439/0x7d0
[  218.462388][T11321]  ret_from_fork_asm+0x1a/0x30
[  218.464436][T11321] 
[  218.465227][T11321] Memory state around the buggy address:
[  218.467475][T11321]  ffff88811524d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.470905][T11321]  ffff88811524d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.473578][T11321] >ffff88811524d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.476166][T11321]                                      ^
[  218.478010][T11321]  ffff88811524d580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  218.481395][T11321]  ffff88811524d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  218.484586][T11321] ==================================================================
[  218.487500][T11321] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  218.489866][T11321] CPU: 1 UID: 0 PID: 11321 Comm: syz.0.1683 Not tainted syzkaller #0 PREEMPT(full) 
[  218.492949][T11321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.496198][T11321] Call Trace:
[  218.497283][T11321]  <TASK>
[  218.498305][T11321]  dump_stack_lvl+0x99/0x250
[  218.500297][T11321]  ? __asan_memcpy+0x40/0x70
[  218.502285][T11321]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.504444][T11321]  ? __pfx__printk+0x10/0x10
[  218.505972][T11321]  vpanic+0x281/0x750
[  218.507290][T11321]  ? __pfx_vpanic+0x10/0x10
[  218.508812][T11321]  ? irqentry_exit+0x74/0x90
[  218.510322][T11321]  panic+0xb9/0xc0
[  218.511580][T11321]  ? __pfx_panic+0x10/0x10
[  218.513091][T11321]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  218.515005][T11321]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.516933][T11321]  ? xfrm_state_find+0x2cf2/0x5400
[  218.518747][T11321]  check_panic_on_warn+0x89/0xb0
[  218.520858][T11321]  ? xfrm_state_find+0x2cf2/0x5400
[  218.522978][T11321]  end_report+0x78/0x160
[  218.524820][T11321]  kasan_report+0x129/0x150
[  218.526589][T11321]  ? xfrm_state_find+0x2cf2/0x5400
[  218.528323][T11321]  xfrm_state_find+0x2cf2/0x5400
[  218.529963][T11321]  ? validate_chain+0x897/0x2140
[  218.531630][T11321]  ? xfrm_state_find+0x1da/0x5400
[  218.533436][T11321]  ? __pfx_xfrm_state_find+0x10/0x10
[  218.535170][T11321]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  218.537278][T11321]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  218.539586][T11321]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  218.542397][T11321]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  218.544926][T11321]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  218.547287][T11321]  ? xfrm_expand_policies+0x41f/0x6a0
[  218.549365][T11321]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  218.551571][T11321]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  218.553507][T11321]  ? __asan_memset+0x22/0x50
[  218.554972][T11321]  xfrm_lookup_route+0x3c/0x1c0
[  218.556559][T11321]  ip_tunnel_xmit+0x96b/0x2390
[  218.558137][T11321]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  218.560392][T11321]  ? gre_build_header+0x31c/0xa40
[  218.562567][T11321]  ? __pfx_gre_build_header+0x10/0x10
[  218.564860][T11321]  ? iptunnel_handle_offloads+0x2fd/0x630
[  218.566928][T11321]  ipgre_xmit+0x89e/0xc50
[  218.568513][T11321]  ? __pfx_ipgre_xmit+0x10/0x10
[  218.570635][T11321]  dev_hard_start_xmit+0x2d7/0x830
[  218.572861][T11321]  __dev_queue_xmit+0x1b8d/0x3b50
[  218.574676][T11321]  ? do_syscall_64+0xfa/0x3b0
[  218.576212][T11321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.578228][T11321]  ? __dev_queue_xmit+0x27b/0x3b50
[  218.580420][T11321]  ? __pfx___dev_queue_xmit+0x10/0x10
[  218.582729][T11321]  ? rcu_is_watching+0x15/0xb0
[  218.584580][T11321]  ? skb_release_data+0x2b6/0x7c0
[  218.586233][T11321]  ? pskb_expand_head+0xa40/0x1150
[  218.588091][T11321]  ? __bpf_redirect+0x56d/0xe40
[  218.589743][T11321]  __bpf_tx_skb+0x18e/0x260
[  218.591268][T11321]  bpf_clone_redirect+0x272/0x3d0
[  218.592933][T11321]  ? bpf_test_run+0x197/0x7b0
[  218.594649][T11321]  bpf_prog_7c64685fc60f7d44+0x5f/0x68
[  218.596462][T11321]  ? perf_output_sample+0x1bd0/0x2050
[  218.598253][T11321]  ? perf_trace_preemptirq_template+0x280/0x340
[  218.600942][T11321]  ? __local_bh_enable_ip+0xce/0x1c0
[  218.603162][T11321]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  218.605574][T11321]  ? __local_bh_disable_ip+0xf1/0x190
[  218.607364][T11321]  ? __pfx___cant_migrate+0x10/0x10
[  218.609080][T11321]  ? __local_bh_enable_ip+0x12d/0x1c0
[  218.610831][T11321]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  218.612746][T11321]  ? bpf_test_timer_continue+0x136/0x350
[  218.614680][T11321]  bpf_test_run+0x318/0x7b0
[  218.616554][T11321]  ? perf_trace_run_bpf_submit+0xee/0x170
[  218.618920][T11321]  ? __pfx_bpf_test_run+0x10/0x10
[  218.621112][T11321]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.623274][T11321]  ? bpf_prog_test_run_skb+0x891/0x1550
[  218.625426][T11321]  ? convert___skb_to_skb+0x3d/0x590
[  218.627148][T11321]  bpf_prog_test_run_skb+0xb4e/0x1550
[  218.629213][T11321]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  218.631352][T11321]  bpf_prog_test_run+0x2c7/0x340
[  218.632975][T11321]  __sys_bpf+0x55a/0x850
[  218.634318][T11321]  ? __pfx___sys_bpf+0x10/0x10
[  218.635934][T11321]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  218.638412][T11321]  ? rcu_is_watching+0x15/0xb0
[  218.640329][T11321]  __x64_sys_bpf+0x7c/0x90
[  218.642061][T11321]  do_syscall_64+0xfa/0x3b0
[  218.643522][T11321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.645687][T11321]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  218.648015][T11321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.650288][T11321] RIP: 0033:0x7fa786d8ec29
[  218.652130][T11321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.660028][T11321] RSP: 002b:00007fa787b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  218.663435][T11321] RAX: ffffffffffffffda RBX: 00007fa786fd5fa0 RCX: 00007fa786d8ec29
[  218.666660][T11321] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  218.669706][T11321] RBP: 00007fa786e11e41 R08: 0000000000000000 R09: 0000000000000000
[  218.672923][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.676142][T11321] R13: 00007fa786fd6038 R14: 00007fa786fd5fa0 R15: 00007ffc0efa65e8
[  218.679392][T11321]  </TASK>
[  218.681376][T11321] Kernel Offset: disabled
[  218.683151][T11321] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:56:47  Registers:
info registers vcpu 0

CPU#0
RAX=c02ca5b47a411f00 RBX=ffffffff819695f8 RCX=c02ca5b47a411f00 RDX=0000000000000001
RSI=ffffffff8d9bab7c RDI=ffffffff8be34280 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3b330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7ad3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002c80 CR3=000000001bb14000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa786e12e7b
XMM06=0000000000000000 00007fa786e12e75 XMM07=0000000000000000 00007fa786e12e89
XMM08=0000000000000000 00007fa786e12f0f XMM09=0000000000000000 00007fa786e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000004f157 RDI=000000000004f158 RBP=00000000000003f8 RSP=ffffc90007af61f0
R8 =ffff888108838237 R9 =1ffff11021107046 R10=dffffc0000000000 R11=ffffffff855016c0
R12=dffffc0000000000 R13=ffffffff99b0390c R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550173c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa787b476c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ad71d CR3=000000011851e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=01c4ae40a4703c36 1626f68ff2acaa94
XMM02=139d1ef4ecd71746 0843c0adc028af4c XMM03=a1b970e8ca380d78 a54cfc5d6ed48945
XMM04=e2ac9614c00a6b29 50a40d1938b248df XMM05=0000000000000000 00f47f5f1f6dfa6e
XMM06=8f055ad740c2acc3 26f13d5f231d7ebb XMM07=a083229af7fb4ad1 6d24d4c9ef3ee2ac
XMM08=9614c00a6b2950a4 0d1938b248dfa1b9 XMM09=0000000000000000 00007fa786e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
