last executing test programs:

1m42.85776537s ago: executing program 1 (id=2):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1m42.728087481s ago: executing program 1 (id=4):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x2, @perf_config_ext={0x3, 0x98fa}, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_devices(r1, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x4b810, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "1d88d56a159a45"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3)
socket$kcm(0x21, 0x2, 0x2)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))

1m42.607003382s ago: executing program 0 (id=1):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@deltaction={0x44, 0x18, 0x1, 0x70bd27, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

1m42.480065086s ago: executing program 2 (id=3):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a48000000060a010400000000000000000a0000050900010073797a31000000001c0004801800018008000100647570000c00028008000140240000080900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

1m42.36820606s ago: executing program 0 (id=5):
r0 = socket$inet6(0xa, 0x1, 0x100)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)

1m42.269847347s ago: executing program 0 (id=6):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x7c000, 0x7ee9e3ad, 0x20}, 0x48)

1m42.16956452s ago: executing program 0 (id=7):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
close(r9)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r7, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r11 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r6, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r12, 0x5, &(0x7f0000000300)=[r5], &(0x7f0000000980)=[{0x2, 0x3, 0xa, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x2, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

1m40.439111973s ago: executing program 2 (id=8):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d805000100fec04d1b34ca3b808de2abea6c110000983cfcce7657581d5f602f3a000000080005007a010401a80016002000034011000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbae5dc92b7f9f15284bd38d150e2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f4e278d8016a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9a", 0xd8}], 0x1}, 0x20008854)

1m40.214356861s ago: executing program 2 (id=9):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/44)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
sendmsg$inet(r5, &(0x7f0000001580)={&(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000240)="8ce5839b2d76ad", 0x7}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="00a838e5332865eb8211a03451d03c8162cd89d57ab6914a11684fafa2ab746f96b25ca121038e4b65801b940097ba433a1f670e00a4a2ac22b8b2912ccdb49bc111e0ac147df1b2f3d80ea16f1b96df762d8c2b625562", 0x57}, {&(0x7f0000001300)="a1ee47d14e3da09c45dae8f813344ad0e6065aa511950685695bb876f61f82ded2c7", 0x22}], 0x5, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @broadcast}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x41, [@multicast2, @local]}, @generic={0x89, 0x9, "58d2b2e57fe6e7"}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0xd, "f26672b1da2da9881dafac"}, {0x7, 0x5, "7469f2"}, {0x1, 0x5, "8296ce"}, {0x6, 0xd, "f8b6e3093f885788951cfe"}]}, @cipso={0x86, 0x52, 0x3, [{0x0, 0x12, "b8e1ec493d9120d91c27d1567bf8af4e"}, {0x0, 0x6, "93d0399e"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0xa, "c9a72019ac7e443a"}, {0x0, 0x11, "37726fc77ba9799acb469da05c3b3d"}, {0x1, 0x7, "42aa4d6af6"}, {0x1, 0xe, "5d63433546aaa3cff6b1d7da"}]}, @noop, @rr={0x7, 0x13, 0xfb, [@private=0xa010101, @local, @multicast1, @private=0xa010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x138}, 0x20000000)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1m39.012724846s ago: executing program 1 (id=10):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x1, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010102}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

1m38.329038574s ago: executing program 1 (id=11):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1m22.711893676s ago: executing program 32 (id=7):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(r4, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6)
close(r9)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r7, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r11 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r6, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r12, 0x5, &(0x7f0000000300)=[r5], &(0x7f0000000980)=[{0x2, 0x3, 0xa, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x2, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

1m18.280130404s ago: executing program 33 (id=9):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(r0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000080)=""/44)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
sendmsg$inet(r5, &(0x7f0000001580)={&(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000240)="8ce5839b2d76ad", 0x7}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="00a838e5332865eb8211a03451d03c8162cd89d57ab6914a11684fafa2ab746f96b25ca121038e4b65801b940097ba433a1f670e00a4a2ac22b8b2912ccdb49bc111e0ac147df1b2f3d80ea16f1b96df762d8c2b625562", 0x57}, {&(0x7f0000001300)="a1ee47d14e3da09c45dae8f813344ad0e6065aa511950685695bb876f61f82ded2c7", 0x22}], 0x5, &(0x7f0000001400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @broadcast}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x41, [@multicast2, @local]}, @generic={0x89, 0x9, "58d2b2e57fe6e7"}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0xd, "f26672b1da2da9881dafac"}, {0x7, 0x5, "7469f2"}, {0x1, 0x5, "8296ce"}, {0x6, 0xd, "f8b6e3093f885788951cfe"}]}, @cipso={0x86, 0x52, 0x3, [{0x0, 0x12, "b8e1ec493d9120d91c27d1567bf8af4e"}, {0x0, 0x6, "93d0399e"}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0xa, "c9a72019ac7e443a"}, {0x0, 0x11, "37726fc77ba9799acb469da05c3b3d"}, {0x1, 0x7, "42aa4d6af6"}, {0x1, 0xe, "5d63433546aaa3cff6b1d7da"}]}, @noop, @rr={0x7, 0x13, 0xfb, [@private=0xa010101, @local, @multicast1, @private=0xa010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x138}, 0x20000000)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1m18.279959552s ago: executing program 34 (id=11):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.467837642s ago: executing program 3 (id=561):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x20040084)

3.250858157s ago: executing program 3 (id=567):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff45f5a36a1144ee57", 0x29}, {&(0x7f00000001c0)="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", 0xf12}], 0x2}, 0x9cdc2384256b08bc)

830.146405ms ago: executing program 5 (id=600):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

711.240384ms ago: executing program 5 (id=602):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)={0x60, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4c, 0x12, 0x0, 0x1, [@nested={0x47, 0xf8, 0x0, 0x1, [@generic="ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4d4dcf811"]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r2, 0x1000000}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)

630.360785ms ago: executing program 4 (id=604):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b)

628.957192ms ago: executing program 4 (id=605):
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)
close(r0)

527.429086ms ago: executing program 3 (id=567):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff45f5a36a1144ee57", 0x29}, {&(0x7f00000001c0)="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", 0xf12}], 0x2}, 0x9cdc2384256b08bc)

481.771137ms ago: executing program 5 (id=606):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2a001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x800000000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0xfd37)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
close(r2)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

481.525039ms ago: executing program 3 (id=607):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e80000001000010026bd70009475cb7861757468656e63287368613235362d73737365332c"], 0xe8}, 0x1, 0x0, 0x0, 0x20004090}, 0x20004000)

401.061761ms ago: executing program 4 (id=608):
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x50622, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
socket$kcm(0x29, 0x0, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x36)
recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00')
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r5 = socket$kcm(0x1e, 0x4, 0x0)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0)=r6, 0xffffffffffffff0f)
close(0x4)

185.353538ms ago: executing program 3 (id=609):
socket$kcm(0x2, 0x3, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)

184.493253ms ago: executing program 3 (id=610):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x2, 0xae, 0x80, 0x40000, 0x1, 0xffffff81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=<r1=>r0, 0x20, 0x0, 0xfffffffb, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)}, 0x4000081)
close(r2)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e0000000101e290328bd7000fedbdf25647262675f6e6f70725f6374725f61657332353600000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001290aaa0c304dc1410001000000000000000000000000000000000000000000abdaa2d000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400"], 0xe0}, 0x1, 0x0, 0x0, 0x48804}, 0x240440c0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x801, 0x0, 0x0, {0xdbfa284ca5356c, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x4d, 0x7, 0x1, 0x0, "0272004c2140f01847951fb1aba708e826322660288f879120f8efc8d86e98e4348913b1fa85896d8055049a0644e8845cdde8810e7c6dc309573acb5c2e2fc71f9bd374399d378413"}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFT_MSG_DELRULE={0x168, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x39}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xe5, 0x7, 0x1, 0x0, "c2ddf5b47f7a289d8dc739e0c8efae86297ee1cb0e9ebfb925854010ff352d353a289e49e5852f31b1541b0f997b791706c01fb0bfff2f38aeee59997144ece273aad5b85b7688d5758bd72828381c1be152ab67be43b1867e50c3d292179457643deacd9933cb60f7d64a1e5120cda69ecebc4d0854c774d3a4debf65d5c4704f166c1fd6e46349139825cbbb18c796491b75de28f69afd8ec5cc3c14e28fccaed39edd9cb06aad4ea8ec077992cbe77638dab9e72e30aa5f3705ae3f4c0fd945958628600c97451d99393eb46b57b9efaeb7d63c3c3f14af58911a15e56991cd"}]}, @NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x27, 0x6, "8a386468e744ab866f20bb4cd11eb00ff05eab0677a8032d5c4d74bd7d07cd00c07935"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x214, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x180, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9f}]}}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2b0}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10001}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x49}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x594}}, 0x8000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$qrtr(0x2a, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000a00050015002200000005000500020000000500010006"], 0x64}}, 0x0)

183.96354ms ago: executing program 5 (id=611):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b70800e7ff0000007b8af8ff00000000aa080000000000007b8af0ff00000000bfa100000000000007010000f8d1e222e8215affffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
setsockopt$sock_attach_bpf(r3, 0x6, 0x5, &(0x7f0000000040)=r4, 0x4)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=@gettaction={0x124, 0x32, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x69d}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd0000000}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4090}, 0x4800)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r9 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r9, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r9, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0)

64.336713ms ago: executing program 4 (id=612):
r0 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff)

1.200538ms ago: executing program 5 (id=613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4048851}, 0x490)

686.074µs ago: executing program 4 (id=614):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)

370.007µs ago: executing program 5 (id=615):
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(0x3)

0s ago: executing program 4 (id=616):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13550' (ED25519) to the list of known hosts.
syzkaller login: [   55.904643][ T5826] cgroup: Unknown subsys name 'net'
[   56.034585][ T5826] cgroup: Unknown subsys name 'cpuset'
[   56.040771][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.865894][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.789356][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.792751][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.795541][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.798385][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.802123][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.852896][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.855705][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.858638][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.862273][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.865804][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.913815][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.916727][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.919524][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.924274][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.927903][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.048219][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   63.159407][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   63.253858][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.256823][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.259296][ T5843] bridge_slave_0: entered allmulticast mode
[   63.262824][ T5843] bridge_slave_0: entered promiscuous mode
[   63.278226][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.280990][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.283448][ T5843] bridge_slave_1: entered allmulticast mode
[   63.286211][ T5843] bridge_slave_1: entered promiscuous mode
[   63.336914][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.358522][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.369539][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.373724][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.376036][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.378603][ T5848] bridge_slave_0: entered allmulticast mode
[   63.381576][ T5848] bridge_slave_0: entered promiscuous mode
[   63.385391][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.387704][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.390421][ T5848] bridge_slave_1: entered allmulticast mode
[   63.393179][ T5848] bridge_slave_1: entered promiscuous mode
[   63.465441][ T5843] team0: Port device team_slave_0 added
[   63.493844][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.499093][ T5843] team0: Port device team_slave_1 added
[   63.526031][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.582674][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.585334][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.595783][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.614945][ T5848] team0: Port device team_slave_0 added
[   63.618940][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.622402][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.633420][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.653578][ T5848] team0: Port device team_slave_1 added
[   63.656291][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.659044][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.662066][ T5851] bridge_slave_0: entered allmulticast mode
[   63.665588][ T5851] bridge_slave_0: entered promiscuous mode
[   63.703877][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.706634][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.709323][ T5851] bridge_slave_1: entered allmulticast mode
[   63.714829][ T5851] bridge_slave_1: entered promiscuous mode
[   63.742205][ T5843] hsr_slave_0: entered promiscuous mode
[   63.745376][ T5843] hsr_slave_1: entered promiscuous mode
[   63.778206][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.782842][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.785558][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.795584][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.801392][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.804125][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.814634][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.821500][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.871250][ T5851] team0: Port device team_slave_0 added
[   63.892195][ T5851] team0: Port device team_slave_1 added
[   63.967849][ T5848] hsr_slave_0: entered promiscuous mode
[   63.970416][ T5848] hsr_slave_1: entered promiscuous mode
[   63.972649][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   63.974509][ T5848] Cannot create hsr debugfs directory
[   63.976676][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.978816][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.988759][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.995226][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.998016][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.008368][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.104100][ T5851] hsr_slave_0: entered promiscuous mode
[   64.106856][ T5851] hsr_slave_1: entered promiscuous mode
[   64.109280][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.112442][ T5851] Cannot create hsr debugfs directory
[   64.231715][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.247375][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.272059][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.291465][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.374188][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.385930][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.396812][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.413808][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.474126][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.481701][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.488590][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.499449][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.507694][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.568116][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   64.587920][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.590410][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.611163][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.613393][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.626414][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.678238][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   64.704494][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.722462][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.725303][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.746618][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.762159][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.764983][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.775516][ T2243] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.777973][ T2243] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.807165][ T2243] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.810190][ T2243] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.849424][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.854026][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.870210][   T55] Bluetooth: hci0: command tx timeout
[   64.933066][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.952174][   T55] Bluetooth: hci2: command tx timeout
[   64.954182][   T55] Bluetooth: hci1: command tx timeout
[   64.983949][ T5843] veth0_vlan: entered promiscuous mode
[   64.992849][ T5843] veth1_vlan: entered promiscuous mode
[   65.055179][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.063239][ T5843] veth0_macvtap: entered promiscuous mode
[   65.072277][ T5843] veth1_macvtap: entered promiscuous mode
[   65.100593][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.106528][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.117947][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.142261][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.154134][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.165256][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.168587][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.204214][ T5851] veth0_vlan: entered promiscuous mode
[   65.211687][ T5851] veth1_vlan: entered promiscuous mode
[   65.234850][ T5848] veth0_vlan: entered promiscuous mode
[   65.256811][ T5848] veth1_vlan: entered promiscuous mode
[   65.288422][ T5851] veth0_macvtap: entered promiscuous mode
[   65.293247][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.295578][ T5851] veth1_macvtap: entered promiscuous mode
[   65.299032][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.333366][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.336361][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.345041][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.361388][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.366226][ T5848] veth0_macvtap: entered promiscuous mode
[   65.372046][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.375920][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.388437][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.393555][ T5848] veth1_macvtap: entered promiscuous mode
[   65.399444][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.401944][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.429337][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.451212][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.468553][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.475104][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.484931][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495790][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499480][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.505358][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.533217][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.540735][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.617380][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.621698][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.647599][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.651118][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.781127][ T5912] netlink: 'syz.0.1': attribute type 20 has an invalid length.
[   65.783498][ T5912] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.796084][ T5913] warning: `syz.1.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.807044][ T5913] Zero length message leads to an empty skb
[   66.129344][    C1] hrtimer: interrupt took 36933 ns
[   67.418416][ T5233] Bluetooth: hci0: command tx timeout
[   67.420272][ T5233] Bluetooth: hci1: command tx timeout
[   67.422266][ T5233] Bluetooth: hci2: command tx timeout
[   67.628077][ T5924] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8'.
[   67.673158][ T5925] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   67.675716][ T5925] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.7'.
[   67.804115][ T5927] netlink: 'syz.2.9': attribute type 10 has an invalid length.
[   69.886417][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 2422979399 wd_nsec: 2422979330
[   69.924787][   T55] Bluetooth: hci2: command tx timeout
[   69.927164][   T55] Bluetooth: hci1: command tx timeout
[   69.929403][   T55] Bluetooth: hci0: command tx timeout
[   71.047688][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.050296][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.001283][   T55] Bluetooth: hci1: command tx timeout
[   72.003337][   T55] Bluetooth: hci2: command tx timeout
[   72.005342][ T5233] Bluetooth: hci0: command tx timeout
[   81.290635][   T10] cfg80211: failed to load regulatory.db
[   81.610190][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.613501][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.616628][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.622592][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.625846][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.555149][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.558539][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.564686][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.567518][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.570450][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.670483][ T5233] Bluetooth: hci3: command tx timeout
[   85.208345][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.211574][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.214341][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.217484][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.222026][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.589891][ T5233] Bluetooth: hci4: command tx timeout
[   85.749956][ T5233] Bluetooth: hci3: command tx timeout
[   87.280433][ T5233] Bluetooth: hci5: command tx timeout
[   87.670129][ T5233] Bluetooth: hci4: command tx timeout
[   87.829927][ T5233] Bluetooth: hci3: command tx timeout
[   89.349858][ T5233] Bluetooth: hci5: command tx timeout
[   89.750173][ T5233] Bluetooth: hci4: command tx timeout
[   89.909997][ T5233] Bluetooth: hci3: command tx timeout
[   91.429964][ T5233] Bluetooth: hci5: command tx timeout
[   91.862381][ T5233] Bluetooth: hci4: command tx timeout
[   93.510076][ T5233] Bluetooth: hci5: command tx timeout
[  100.426819][   T23] sched: DL replenish lagged too much
[  113.455069][ T5943] chnl_net:caif_netlink_parms(): no params data found
[  113.481273][ T5937] chnl_net:caif_netlink_parms(): no params data found
[  113.544300][ T5940] chnl_net:caif_netlink_parms(): no params data found
[  113.569018][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.675849][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.686334][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.689414][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.692560][ T5943] bridge_slave_0: entered allmulticast mode
[  113.695727][ T5943] bridge_slave_0: entered promiscuous mode
[  113.699200][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.701954][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.704162][ T5937] bridge_slave_0: entered allmulticast mode
[  113.706865][ T5937] bridge_slave_0: entered promiscuous mode
[  113.711978][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.714214][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.717051][ T5937] bridge_slave_1: entered allmulticast mode
[  113.720793][ T5937] bridge_slave_1: entered promiscuous mode
[  113.726860][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.729578][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.732830][ T5943] bridge_slave_1: entered allmulticast mode
[  113.737778][ T5943] bridge_slave_1: entered promiscuous mode
[  113.753552][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.795104][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.816326][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.841591][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.852760][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.868749][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.873928][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.876444][ T5940] bridge_slave_0: entered allmulticast mode
[  113.879229][ T5940] bridge_slave_0: entered promiscuous mode
[  113.882983][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.885558][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.888427][ T5940] bridge_slave_1: entered allmulticast mode
[  113.892015][ T5940] bridge_slave_1: entered promiscuous mode
[  113.895957][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.909580][ T5937] team0: Port device team_slave_0 added
[  113.938293][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.951399][ T5937] team0: Port device team_slave_1 added
[  113.967190][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.995366][ T5943] team0: Port device team_slave_0 added
[  114.032544][ T5943] team0: Port device team_slave_1 added
[  114.046036][ T5940] team0: Port device team_slave_0 added
[  114.048703][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.051343][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.060964][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.083528][ T5940] team0: Port device team_slave_1 added
[  114.086121][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.088702][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.098589][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.109021][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.111469][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.123275][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.146302][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.148466][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.159580][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.177904][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.181689][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.189520][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.194906][   T12] bridge_slave_1: left allmulticast mode
[  114.197290][   T12] bridge_slave_1: left promiscuous mode
[  114.200391][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.213192][   T12] bridge_slave_0: left allmulticast mode
[  114.215036][   T12] bridge_slave_0: left promiscuous mode
[  114.217193][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.461880][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.466379][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.470312][   T12] bond0 (unregistering): Released all slaves
[  114.479074][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.482482][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.494493][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.619393][ T5943] hsr_slave_0: entered promiscuous mode
[  114.623000][ T5943] hsr_slave_1: entered promiscuous mode
[  114.625787][ T5943] debugfs: 'hsr0' already exists in 'hsr'
[  114.628088][ T5943] Cannot create hsr debugfs directory
[  114.643219][ T5937] hsr_slave_0: entered promiscuous mode
[  114.646238][ T5937] hsr_slave_1: entered promiscuous mode
[  114.649103][ T5937] debugfs: 'hsr0' already exists in 'hsr'
[  114.652318][ T5937] Cannot create hsr debugfs directory
[  114.680236][ T5940] hsr_slave_0: entered promiscuous mode
[  114.682481][ T5940] hsr_slave_1: entered promiscuous mode
[  114.684565][ T5940] debugfs: 'hsr0' already exists in 'hsr'
[  114.686299][ T5940] Cannot create hsr debugfs directory
[  114.884427][   T12] hsr_slave_0: left promiscuous mode
[  114.887723][   T12] hsr_slave_1: left promiscuous mode
[  114.891460][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.894434][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.898368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.905616][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.925763][   T12] veth1_macvtap: left promiscuous mode
[  114.927759][   T12] veth0_macvtap: left promiscuous mode
[  114.929676][   T12] veth1_vlan: left promiscuous mode
[  114.932045][   T12] veth0_vlan: left promiscuous mode
[  115.304593][   T12] team0 (unregistering): Port device team_slave_1 removed
[  115.330667][   T12] team0 (unregistering): Port device team_slave_0 removed
[  115.878082][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.886611][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.905163][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.918251][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.973817][ T5940] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  115.992710][ T5940] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.004161][ T5940] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.029558][ T5940] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.114957][ T5943] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  116.151372][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.169585][ T5943] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  116.178375][ T5943] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  116.190874][ T5943] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  116.214349][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.265355][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.311244][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.335165][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.383553][ T5937] 8021q: adding VLAN 0 to HW filter on device team0
[  116.415542][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.418926][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.432712][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.444975][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.448042][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.494536][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[  116.527349][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.529627][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.589217][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.606938][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.610094][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.678725][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.692642][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.733257][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[  116.748048][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.782250][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.784641][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.812045][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.814944][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.836459][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.897710][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.001301][ T5937] veth0_vlan: entered promiscuous mode
[  117.044695][ T5937] veth1_vlan: entered promiscuous mode
[  117.066139][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.123467][   T12] bridge_slave_1: left allmulticast mode
[  117.125274][   T12] bridge_slave_1: left promiscuous mode
[  117.127151][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.164421][   T12] bridge_slave_0: left allmulticast mode
[  117.166437][   T12] bridge_slave_0: left promiscuous mode
[  117.168541][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.197408][   T12] bridge_slave_1: left allmulticast mode
[  117.203099][   T12] bridge_slave_1: left promiscuous mode
[  117.205384][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.210812][   T12] bridge_slave_0: left allmulticast mode
[  117.212950][   T12] bridge_slave_0: left promiscuous mode
[  117.214887][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.541664][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.548989][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.554129][   T12] bond0 (unregistering): Released all slaves
[  117.767929][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.773053][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.777142][   T12] bond0 (unregistering): Released all slaves
[  117.819429][ T5937] veth0_macvtap: entered promiscuous mode
[  117.852837][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.865364][ T5937] veth1_macvtap: entered promiscuous mode
[  117.962858][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.979534][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.030361][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.034512][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.038585][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.114419][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.181608][ T5940] veth0_vlan: entered promiscuous mode
[  118.244819][ T5940] veth1_vlan: entered promiscuous mode
[  118.274889][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.286125][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.359106][ T5943] veth0_vlan: entered promiscuous mode
[  118.363662][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.366150][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.382006][ T5943] veth1_vlan: entered promiscuous mode
[  118.386988][ T5940] veth0_macvtap: entered promiscuous mode
[  118.392831][ T5940] veth1_macvtap: entered promiscuous mode
[  118.412346][   T12] hsr_slave_0: left promiscuous mode
[  118.418599][   T12] hsr_slave_1: left promiscuous mode
[  118.427675][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.431657][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.435536][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.437833][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.448744][   T12] hsr_slave_0: left promiscuous mode
[  118.451222][   T12] hsr_slave_1: left promiscuous mode
[  118.453281][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.455587][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.458316][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.461432][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.479907][   T12] veth1_vlan: left promiscuous mode
[  118.481895][   T12] veth0_vlan: left promiscuous mode
[  118.485199][   T12] veth1_macvtap: left promiscuous mode
[  118.486957][   T12] veth0_macvtap: left promiscuous mode
[  118.489040][   T12] veth1_vlan: left promiscuous mode
[  118.491075][   T12] veth0_vlan: left promiscuous mode
[  118.771122][   T12] team0 (unregistering): Port device team_slave_1 removed
[  118.794229][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.214439][   T12] team0 (unregistering): Port device team_slave_1 removed
[  119.234844][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.512006][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.516431][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.524718][ T5943] veth0_macvtap: entered promiscuous mode
[  119.539505][ T5943] veth1_macvtap: entered promiscuous mode
[  119.569864][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.577021][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.584951][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.587758][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.866076][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.874344][ T6068] -1: renamed from syzkaller0
[  119.919085][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.971784][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.975431][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.989438][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.022716][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.046762][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.055594][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.135375][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.147720][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.253241][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.282336][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.374949][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.386795][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.544515][ T6085] openvswitch: netlink: Duplicate or invalid key (type 0).
[  120.576298][ T6085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.723230][ T6098] netlink: 'syz.3.20': attribute type 8 has an invalid length.
[  120.740303][ T6097] syz.5.21 uses obsolete (PF_INET,SOCK_PACKET)
[  121.024856][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21'.
[  121.175438][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'.
[  121.936282][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27'.
[  122.414418][ T6135] syz.3.29 (6135) used greatest stack depth: 19688 bytes left
[  122.603904][ T6149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34'.
[  122.607475][ T6145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34'.
[  122.614473][ T6149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34'.
[  122.903862][ T6170] netlink: 48 bytes leftover after parsing attributes in process `syz.3.40'.
[  122.972783][ T6173] netlink: 360 bytes leftover after parsing attributes in process `syz.5.42'.
[  123.268387][ T5233] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13
[  123.309635][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.49'.
[  123.328554][ T6196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.49'.
[  123.701760][ T6225] netlink: 'syz.4.58': attribute type 21 has an invalid length.
[  123.873238][ T6236] netlink: 'syz.4.63': attribute type 15 has an invalid length.
[  124.131337][ T6254] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[  124.965238][ T6300] netlink: 'syz.3.87': attribute type 6 has an invalid length.
[  124.968487][ T6300] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.318701][ T6322] netlink: 'syz.5.94': attribute type 11 has an invalid length.
[  126.140224][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.510636][ T6363] dvmrp1: tun_chr_ioctl cmd 35108
[  126.669633][ T6370] =======================================================
[  126.669633][ T6370] WARNING: The mand mount option has been deprecated and
[  126.669633][ T6370]          and is ignored by this kernel. Remove the mand
[  126.669633][ T6370]          option from the mount to silence this warning.
[  126.669633][ T6370] =======================================================
[  126.703083][ T6370] netlink: 'syz.3.106': attribute type 10 has an invalid length.
[  126.707008][ T6370] __nla_validate_parse: 4 callbacks suppressed
[  126.713920][ T6370] netlink: 55 bytes leftover after parsing attributes in process `syz.3.106'.
[  127.360783][ T6379] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.973417][ T6403] tmpfs: Bad value for 'uid'
[  127.974945][ T6403] tmpfs: Bad value for 'uid'
[  128.256281][ T6429] netlink: 'syz.3.122': attribute type 8 has an invalid length.
[  128.279476][ T6429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.122'.
[  128.316643][ T6433] netlink: 'syz.4.126': attribute type 9 has an invalid length.
[  128.327277][ T6433] netlink: 'syz.4.126': attribute type 11 has an invalid length.
[  128.334830][ T6433] netlink: 147436 bytes leftover after parsing attributes in process `syz.4.126'.
[  128.394596][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.5.127'.
[  128.399283][ T6437] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  129.153524][ T6471] netlink: 7 bytes leftover after parsing attributes in process `syz.4.136'.
[  129.156639][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'.
[  130.280217][ T6476] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.283559][ T6476] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.536355][ T6516] netlink: 'syz.4.151': attribute type 17 has an invalid length.
[  130.539431][ T6516] netlink: 'syz.4.151': attribute type 16 has an invalid length.
[  130.548765][ T6516] netlink: 152 bytes leftover after parsing attributes in process `syz.4.151'.
[  130.833953][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'.
[  130.837836][ T6542] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  130.842586][ T6542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.967419][ T6548] netlink: 'syz.3.163': attribute type 23 has an invalid length.
[  131.132808][ T6559] netlink: 'syz.4.168': attribute type 33 has an invalid length.
[  131.136076][ T6559] netlink: 152 bytes leftover after parsing attributes in process `syz.4.168'.
[  131.187061][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.386468][ T6575] veth1_macvtap: left promiscuous mode
[  131.389492][ T6575] macsec0: entered allmulticast mode
[  131.469289][ T6583] netlink: 147608 bytes leftover after parsing attributes in process `syz.3.178'.
[  132.395047][ T6605] macvtap0: refused to change device tx_queue_len
[  132.476123][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.478947][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.649458][ T6625] __nla_validate_parse: 6 callbacks suppressed
[  132.649470][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.188'.
[  132.863314][ T6632] openvswitch: netlink: IPv4 frag type 101 is out of range max 2
[  132.974982][ T6636] netlink: 'syz.5.193': attribute type 33 has an invalid length.
[  132.978167][ T6636] netlink: 152 bytes leftover after parsing attributes in process `syz.5.193'.
[  132.983962][ T6636] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP)
[  132.994081][ T6636] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  133.424897][ T6653] netlink: 'syz.4.201': attribute type 10 has an invalid length.
[  133.589403][ T6670] netlink: 'syz.5.207': attribute type 3 has an invalid length.
[  133.651121][ T6673] netlink: 'syz.5.209': attribute type 2 has an invalid length.
[  133.654267][ T6673] netlink: 'syz.5.209': attribute type 1 has an invalid length.
[  133.657477][ T6673] netlink: 152 bytes leftover after parsing attributes in process `syz.5.209'.
[  133.669119][ T6668] netlink: 14 bytes leftover after parsing attributes in process `syz.4.208'.
[  133.748895][ T6668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.759682][ T6668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.770126][ T6668] bond0 (unregistering): Released all slaves
[  134.038696][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  134.045971][ T6695] netlink: 312 bytes leftover after parsing attributes in process `syz.3.218'.
[  134.049490][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  135.342920][ T6736] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.229'.
[  135.453749][ T6743] netlink: 'syz.5.231': attribute type 10 has an invalid length.
[  136.755772][ T6782] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.247'.
[  136.918059][ T6800] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  136.956205][ T6803] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.257'.
[  136.998822][ T6798] netlink: 'syz.4.254': attribute type 10 has an invalid length.
[  138.829136][ T6837] __nla_validate_parse: 2 callbacks suppressed
[  138.829152][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'.
[  139.156701][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'.
[  139.401562][ T6873] netlink: 'syz.3.279': attribute type 10 has an invalid length.
[  139.404237][ T6873] netlink: 168 bytes leftover after parsing attributes in process `syz.3.279'.
[  139.483736][ T6870] bridge_slave_1: left allmulticast mode
[  139.485984][ T6870] bridge_slave_1: left promiscuous mode
[  139.489578][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.606093][ T6870] bridge_slave_0: left allmulticast mode
[  139.609514][ T6870] bridge_slave_0: left promiscuous mode
[  139.613266][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.729560][ T7020] netlink: 'syz.3.305': attribute type 21 has an invalid length.
[  149.796902][ T7083] netlink: 'syz.5.307': attribute type 1 has an invalid length.
[  151.738353][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'.
[  151.818987][ T7186] netlink: 'syz.5.330': attribute type 1 has an invalid length.
[  151.829229][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.864389][ T7190] netlink: 'syz.5.332': attribute type 10 has an invalid length.
[  151.867207][ T7190] netlink: 168 bytes leftover after parsing attributes in process `syz.5.332'.
[  152.979060][ T7241] netlink: 'syz.5.355': attribute type 4 has an invalid length.
[  152.984400][ T7241] netlink: 'syz.5.355': attribute type 1 has an invalid length.
[  152.986038][ T7237] xt_policy: too many policy elements
[  152.986911][ T7241] netlink: 'syz.5.355': attribute type 2 has an invalid length.
[  152.992224][ T7241] netlink: 198236 bytes leftover after parsing attributes in process `syz.5.355'.
[  153.042037][ T7245] netlink: 763 bytes leftover after parsing attributes in process `syz.3.357'.
[  153.071779][ T7247] netlink: 'syz.5.358': attribute type 5 has an invalid length.
[  153.074633][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.5.358'.
[  153.256042][ T7266] netlink: 'syz.5.367': attribute type 2 has an invalid length.
[  153.256112][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'.
[  153.271290][ T7265] : entered promiscuous mode
[  153.293142][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.368'.
[  153.298325][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.368'.
[  153.301778][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.368'.
[  153.335788][ T7272] netlink: 'syz.5.370': attribute type 21 has an invalid length.
[  153.338483][ T7272] netlink: 156 bytes leftover after parsing attributes in process `syz.5.370'.
[  153.627382][ T7277] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  153.631051][ T7277] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.024144][ T5233] Bluetooth: hci5: unexpected event 0x30 length: 82 > 3
[  155.703271][ T7343] netlink: 'syz.4.403': attribute type 40 has an invalid length.
[  155.762916][ T7350] netlink: 'syz.5.406': attribute type 1 has an invalid length.
[  155.854906][ T7363] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  156.075636][ T7393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.078048][ T7393] IPv6: NLM_F_CREATE should be set when creating new route
[  156.080401][ T7393] IPv6: NLM_F_CREATE should be set when creating new route
[  156.082658][ T7393] IPv6: NLM_F_CREATE should be set when creating new route
[  156.115413][ T7397] netlink: 'syz.5.424': attribute type 10 has an invalid length.
[  156.362566][ T7397] bond0: (slave ): Enslaving as an active interface with an up link
[  157.500363][ T7442] netlink: 'syz.5.446': attribute type 29 has an invalid length.
[  157.504920][ T7442] netlink: 'syz.5.446': attribute type 29 has an invalid length.
[  157.509308][ T7442] __nla_validate_parse: 16 callbacks suppressed
[  157.509321][ T7442] netlink: 500 bytes leftover after parsing attributes in process `syz.5.446'.
[  157.558071][ T7444] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  157.823121][ T5233] Bluetooth: hci5: unexpected subevent 0x05 length: 150 > 12
[  158.307289][ T7462] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  158.430054][ T5233] Bluetooth: hci4: Malformed Event: 0x13
[  158.494705][ T7462] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  159.195195][ T7496] netlink: 14 bytes leftover after parsing attributes in process `syz.3.470'.
[  159.349526][ T7506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'.
[  159.468244][ T7511] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.477'.
[  159.593759][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.481'.
[  159.597194][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.5.481'.
[  159.603288][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.5.481'.
[  159.829991][ T5233] Bluetooth: hci5: command tx timeout
[  160.323393][ T7541] netlink: 'syz.4.489': attribute type 4 has an invalid length.
[  160.438647][ T7548] netlink: 26 bytes leftover after parsing attributes in process `syz.5.491'.
[  160.552117][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'.
[  160.556339][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'.
[  160.559635][ T7550] bridge_slave_0: entered allmulticast mode
[  160.788231][ T7565] netlink: 'syz.5.499': attribute type 13 has an invalid length.
[  161.687667][ T7619] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  161.714049][ T7621] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  161.865672][ T7631] syzkaller0: entered promiscuous mode
[  161.868065][ T7631] syzkaller0: entered allmulticast mode
[  162.562398][ T7651] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  162.713613][ T5233] Bluetooth: hci4: unexpected event 0x32 length: 82 > 9
[  163.512395][ T7649] netlink: 'syz.3.532': attribute type 10 has an invalid length.
[  163.570870][ T7673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.548697][ T7683] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  165.290634][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.294378][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.297228][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.301015][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.304684][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.452864][ T7725] chnl_net:caif_netlink_parms(): no params data found
[  165.503958][ T7733] netlink: 'syz.4.570': attribute type 21 has an invalid length.
[  166.277500][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.281350][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.283621][ T7725] bridge_slave_0: entered allmulticast mode
[  166.286319][ T7725] bridge_slave_0: entered promiscuous mode
[  166.290186][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.292419][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.294765][ T7725] bridge_slave_1: entered allmulticast mode
[  166.298243][ T7725] bridge_slave_1: entered promiscuous mode
[  166.329347][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.335831][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.335959][ T7745] __nla_validate_parse: 7 callbacks suppressed
[  166.335968][ T7745] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.574'.
[  166.364672][ T7725] team0: Port device team_slave_0 added
[  166.368272][ T7725] team0: Port device team_slave_1 added
[  166.405218][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.407413][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.418135][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.431111][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.433288][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.443569][ T7747] netlink: 188 bytes leftover after parsing attributes in process `syz.4.575'.
[  166.473954][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.534126][ T7725] hsr_slave_0: entered promiscuous mode
[  166.536554][ T7725] hsr_slave_1: entered promiscuous mode
[  166.550717][ T7131] wlan1: Trigger new scan to find an IBSS to join
[  166.682675][ T7725] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.762193][ T7725] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.765821][ T7761] netlink: 'syz.5.582': attribute type 10 has an invalid length.
[  166.776325][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.783022][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.792230][ T7761] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  166.829555][ T7725] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.842599][ T7767] netlink: 7 bytes leftover after parsing attributes in process `syz.4.585'.
[  166.846507][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'.
[  166.884164][   T33] audit: type=1107 audit(1757087019.109:2): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  166.884164][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  166.884164][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  166.884164][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  166.898983][ T7769] netlink: 'syz.5.586': attribute type 1 has an invalid length.
[  166.913619][ T7771] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  166.946011][ T7725] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.080178][ T7725] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.085886][ T7725] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.091448][ T7725] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.096382][ T7725] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.192385][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.215488][ T7725] 8021q: adding VLAN 0 to HW filter on device team0
[  167.234087][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.236885][ T7129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.244681][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.247485][ T7129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.293527][ T7725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.351465][ T5233] Bluetooth: hci0: command tx timeout
[  167.449363][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.488523][ T7725] veth0_vlan: entered promiscuous mode
[  167.497919][ T7725] veth1_vlan: entered promiscuous mode
[  167.524622][ T7725] veth0_macvtap: entered promiscuous mode
[  167.541499][ T7725] veth1_macvtap: entered promiscuous mode
[  167.552805][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.563703][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.573972][ T5871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.578020][ T5871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.601417][ T5871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.620508][ T5871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.674822][ T7129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.677423][ T7129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.714182][ T7129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.718044][ T7129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.789644][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'.
[  168.328700][ T7853] ==================================================================
[  168.331735][ T7853] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  168.334674][ T7853] Read of size 2 at addr ffff8880275d1342 by task syz.5.617/7853
[  168.338396][ T7853] 
[  168.339312][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.5.617 Not tainted syzkaller #0 PREEMPT(full) 
[  168.339351][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.339359][ T7853] Call Trace:
[  168.339366][ T7853]  <TASK>
[  168.339386][ T7853]  dump_stack_lvl+0x189/0x250
[  168.339403][ T7853]  ? __kasan_check_byte+0x12/0x40
[  168.339422][ T7853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.339436][ T7853]  ? lock_release+0x4b/0x3e0
[  168.339457][ T7853]  ? __virt_addr_valid+0x4a5/0x5c0
[  168.339474][ T7853]  print_report+0xca/0x240
[  168.339487][ T7853]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.339497][ T7853]  kasan_report+0x118/0x150
[  168.339512][ T7853]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  168.339525][ T7853]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.339538][ T7853]  __xfrm_state_lookup+0x6ad/0x8d0
[  168.339552][ T7853]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  168.339566][ T7853]  ? xfrm_state_lookup+0x45/0x1e0
[  168.339579][ T7853]  xfrm_state_lookup+0x11e/0x1e0
[  168.339594][ T7853]  ipcomp4_init_state+0x205/0xb20
[  168.339607][ T7853]  ? __xfrm_init_state+0x7ef/0x13f0
[  168.339623][ T7853]  __xfrm_init_state+0xa76/0x13f0
[  168.339636][ T7853]  ? __xfrm_init_state+0x7ef/0x13f0
[  168.339651][ T7853]  xfrm_add_sa+0x2f5b/0x4070
[  168.339668][ T7853]  ? __pfx_xfrm_add_sa+0x10/0x10
[  168.339680][ T7853]  ? apparmor_capable+0x137/0x1b0
[  168.339695][ T7853]  ? __nla_parse+0x40/0x60
[  168.339714][ T7853]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.339729][ T7853]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.339741][ T7853]  ? trace_call_bpf+0xb7/0x850
[  168.339763][ T7853]  ? __pfx___mutex_trylock_common+0x10/0x10
[  168.339777][ T7853]  ? rcu_is_watching+0x15/0xb0
[  168.339790][ T7853]  ? trace_contention_end+0x39/0x120
[  168.339803][ T7853]  ? __mutex_lock+0x335/0x1360
[  168.339822][ T7853]  netlink_rcv_skb+0x208/0x470
[  168.339841][ T7853]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.339855][ T7853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.339876][ T7853]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.339892][ T7853]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.339909][ T7853]  xfrm_netlink_rcv+0x79/0x90
[  168.339922][ T7853]  netlink_unicast+0x82f/0x9e0
[  168.339940][ T7853]  ? __pfx_netlink_unicast+0x10/0x10
[  168.339955][ T7853]  ? netlink_sendmsg+0x642/0xb30
[  168.339971][ T7853]  ? skb_put+0x11b/0x210
[  168.339983][ T7853]  netlink_sendmsg+0x805/0xb30
[  168.340023][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.340041][ T7853]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.340060][ T7853]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.340074][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.340092][ T7853]  __sock_sendmsg+0x21c/0x270
[  168.340109][ T7853]  ____sys_sendmsg+0x505/0x830
[  168.340123][ T7853]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.340138][ T7853]  ? import_iovec+0x74/0xa0
[  168.340153][ T7853]  ___sys_sendmsg+0x21f/0x2a0
[  168.340165][ T7853]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.340178][ T7853]  ? irqentry_enter+0x3d/0x60
[  168.340204][ T7853]  ? __x64_sys_sendmsg+0x180/0x260
[  168.340218][ T7853]  __x64_sys_sendmsg+0x19b/0x260
[  168.340230][ T7853]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.340250][ T7853]  do_syscall_64+0xfa/0x3b0
[  168.340266][ T7853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.340278][ T7853]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  168.340292][ T7853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.340304][ T7853] RIP: 0033:0x7f9eac18ebe9
[  168.340315][ T7853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.340351][ T7853] RSP: 002b:00007f9ead0c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.340365][ T7853] RAX: ffffffffffffffda RBX: 00007f9eac3c5fa0 RCX: 00007f9eac18ebe9
[  168.340374][ T7853] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  168.340383][ T7853] RBP: 00007f9eac211e19 R08: 0000000000000000 R09: 0000000000000000
[  168.340391][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.340399][ T7853] R13: 00007f9eac3c6038 R14: 00007f9eac3c5fa0 R15: 00007ffc4342b0b8
[  168.340413][ T7853]  </TASK>
[  168.340418][ T7853] 
[  168.486506][ T7853] Allocated by task 6689:
[  168.488223][ T7853]  kasan_save_track+0x3e/0x80
[  168.490017][ T7853]  __kasan_slab_alloc+0x6c/0x80
[  168.492018][ T7853]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  168.494228][ T7853]  xfrm_state_alloc+0x24/0x2f0
[  168.496196][ T7853]  __find_acq_core+0x8a7/0x1c00
[  168.498187][ T7853]  xfrm_find_acq+0x78/0xa0
[  168.500007][ T7853]  xfrm_alloc_userspi+0x6b3/0xc90
[  168.502051][ T7853]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.504063][ T7853]  netlink_rcv_skb+0x208/0x470
[  168.506020][ T7853]  xfrm_netlink_rcv+0x79/0x90
[  168.507931][ T7853]  netlink_unicast+0x82f/0x9e0
[  168.509785][ T7853]  netlink_sendmsg+0x805/0xb30
[  168.511724][ T7853]  __sock_sendmsg+0x21c/0x270
[  168.513626][ T7853]  ____sys_sendmsg+0x505/0x830
[  168.515596][ T7853]  ___sys_sendmsg+0x21f/0x2a0
[  168.517432][ T7853]  __x64_sys_sendmsg+0x19b/0x260
[  168.519429][ T7853]  do_syscall_64+0xfa/0x3b0
[  168.521280][ T7853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.523584][ T7853] 
[  168.524545][ T7853] Freed by task 9:
[  168.526082][ T7853]  kasan_save_track+0x3e/0x80
[  168.528005][ T7853]  kasan_save_free_info+0x46/0x50
[  168.530015][ T7853]  __kasan_slab_free+0x5b/0x80
[  168.531953][ T7853]  kmem_cache_free+0x18f/0x400
[  168.533816][ T7853]  xfrm_state_gc_task+0x52d/0x6b0
[  168.535765][ T7853]  process_scheduled_works+0xae1/0x17b0
[  168.537877][ T7853]  worker_thread+0x8a0/0xda0
[  168.539758][ T7853]  kthread+0x711/0x8a0
[  168.541414][ T7853]  ret_from_fork+0x3fc/0x770
[  168.543276][ T7853]  ret_from_fork_asm+0x1a/0x30
[  168.545174][ T7853] 
[  168.546119][ T7853] The buggy address belongs to the object at ffff8880275d1200
[  168.546119][ T7853]  which belongs to the cache xfrm_state of size 928
[  168.551476][ T7853] The buggy address is located 322 bytes inside of
[  168.551476][ T7853]  freed 928-byte region [ffff8880275d1200, ffff8880275d15a0)
[  168.556965][ T7853] 
[  168.557942][ T7853] The buggy address belongs to the physical page:
[  168.560526][ T7853] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275d1200 pfn:0x275d0
[  168.564529][ T7853] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  168.567804][ T7853] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  168.570841][ T7853] page_type: f5(slab)
[  168.572481][ T7853] raw: 00fff00000000040 ffff8881049d48c0 dead000000000122 0000000000000000
[  168.575938][ T7853] raw: ffff8880275d1200 00000000800e000c 00000000f5000000 0000000000000000
[  168.579439][ T7853] head: 00fff00000000040 ffff8881049d48c0 dead000000000122 0000000000000000
[  168.582902][ T7853] head: ffff8880275d1200 00000000800e000c 00000000f5000000 0000000000000000
[  168.586251][ T7853] head: 00fff00000000002 ffffea00009d7401 00000000ffffffff 00000000ffffffff
[  168.589748][ T7853] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  168.593180][ T7853] page dumped because: kasan: bad access detected
[  168.595771][ T7853] page_owner tracks the page as allocated
[  168.598053][ T7853] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6116, tgid 6112 (syz.3.25), ts 121183169112, free_ts 121100522495
[  168.605502][ T7853]  post_alloc_hook+0x240/0x2a0
[  168.607334][ T7853]  get_page_from_freelist+0x21e4/0x22c0
[  168.609571][ T7853]  __alloc_frozen_pages_noprof+0x181/0x370
[  168.611931][ T7853]  alloc_pages_mpol+0x232/0x4a0
[  168.613868][ T7853]  allocate_slab+0x8a/0x370
[  168.615667][ T7853]  ___slab_alloc+0xbeb/0x1410
[  168.617577][ T7853]  kmem_cache_alloc_noprof+0x283/0x3c0
[  168.619779][ T7853]  xfrm_state_alloc+0x24/0x2f0
[  168.621720][ T7853]  xfrm_add_acquire+0xf7/0xb20
[  168.623658][ T7853]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.625666][ T7853]  netlink_rcv_skb+0x208/0x470
[  168.627609][ T7853]  xfrm_netlink_rcv+0x79/0x90
[  168.629530][ T7853]  netlink_unicast+0x82f/0x9e0
[  168.631453][ T7853]  netlink_sendmsg+0x805/0xb30
[  168.633269][ T7853]  __sock_sendmsg+0x21c/0x270
[  168.635091][ T7853]  ____sys_sendmsg+0x505/0x830
[  168.637057][ T7853] page last free pid 6112 tgid 6112 stack trace:
[  168.639639][ T7853]  __free_frozen_pages+0xbc4/0xd30
[  168.641719][ T7853]  __put_partials+0x156/0x1a0
[  168.643631][ T7853]  put_cpu_partial+0x17c/0x250
[  168.645580][ T7853]  __slab_free+0x2d5/0x3c0
[  168.647398][ T7853]  qlist_free_all+0x97/0x140
[  168.649227][ T7853]  kasan_quarantine_reduce+0x148/0x160
[  168.651421][ T7853]  __kasan_slab_alloc+0x22/0x80
[  168.653406][ T7853]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  168.655631][ T7853]  vm_area_dup+0x2b/0x680
[  168.657373][ T7853]  __split_vma+0x1a9/0xa00
[  168.659178][ T7853]  vma_modify+0x12c3/0x1970
[  168.661030][ T7853]  vma_modify_flags+0x1e8/0x230
[  168.663049][ T7853]  mprotect_fixup+0x407/0x9c0
[  168.664862][ T7853]  do_mprotect_pkey+0x8cd/0xce0
[  168.666693][ T7853]  __x64_sys_mprotect+0x80/0x90
[  168.668518][ T7853]  do_syscall_64+0xfa/0x3b0
[  168.670200][ T7853] 
[  168.671067][ T7853] Memory state around the buggy address:
[  168.673085][ T7853]  ffff8880275d1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.676071][ T7853]  ffff8880275d1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.679042][ T7853] >ffff8880275d1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.682030][ T7853]                                            ^
[  168.684294][ T7853]  ffff8880275d1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.687324][ T7853]  ffff8880275d1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.690267][ T7853] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  168.734092][ T7853] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  168.736962][ T7853] CPU: 0 UID: 0 PID: 7853 Comm: syz.5.617 Not tainted syzkaller #0 PREEMPT(full) 
[  168.740315][ T7853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.743588][ T7853] Call Trace:
[  168.744637][ T7853]  <TASK>
[  168.745571][ T7853]  dump_stack_lvl+0x99/0x250
[  168.747008][ T7853]  ? __asan_memcpy+0x40/0x70
[  168.748638][ T7853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.750618][ T7853]  ? __pfx__printk+0x10/0x10
[  168.752175][ T7853]  vpanic+0x281/0x750
[  168.753466][ T7853]  ? preempt_schedule+0xae/0xc0
[  168.755037][ T7853]  ? __pfx_vpanic+0x10/0x10
[  168.756667][ T7853]  ? preempt_schedule_common+0x83/0xd0
[  168.758648][ T7853]  ? preempt_schedule+0xae/0xc0
[  168.760169][ T7853]  ? __pfx_preempt_schedule+0x10/0x10
[  168.761840][ T7853]  panic+0xb9/0xc0
[  168.763015][ T7853]  ? __pfx_panic+0x10/0x10
[  168.764420][ T7853]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  168.766264][ T7853]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.767924][ T7853]  check_panic_on_warn+0x89/0xb0
[  168.769495][ T7853]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.771131][ T7853]  end_report+0x78/0x160
[  168.772468][ T7853]  kasan_report+0x129/0x150
[  168.773876][ T7853]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  168.776072][ T7853]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.778099][ T7853]  __xfrm_state_lookup+0x6ad/0x8d0
[  168.779905][ T7853]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  168.781664][ T7853]  ? xfrm_state_lookup+0x45/0x1e0
[  168.783240][ T7853]  xfrm_state_lookup+0x11e/0x1e0
[  168.784807][ T7853]  ipcomp4_init_state+0x205/0xb20
[  168.786417][ T7853]  ? __xfrm_init_state+0x7ef/0x13f0
[  168.787978][ T7853]  __xfrm_init_state+0xa76/0x13f0
[  168.789583][ T7853]  ? __xfrm_init_state+0x7ef/0x13f0
[  168.791249][ T7853]  xfrm_add_sa+0x2f5b/0x4070
[  168.792721][ T7853]  ? __pfx_xfrm_add_sa+0x10/0x10
[  168.794256][ T7853]  ? apparmor_capable+0x137/0x1b0
[  168.796117][ T7853]  ? __nla_parse+0x40/0x60
[  168.797895][ T7853]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.799685][ T7853]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.801458][ T7853]  ? trace_call_bpf+0xb7/0x850
[  168.802989][ T7853]  ? __pfx___mutex_trylock_common+0x10/0x10
[  168.804838][ T7853]  ? rcu_is_watching+0x15/0xb0
[  168.806738][ T7853]  ? trace_contention_end+0x39/0x120
[  168.808881][ T7853]  ? __mutex_lock+0x335/0x1360
[  168.810457][ T7853]  netlink_rcv_skb+0x208/0x470
[  168.811879][ T7853]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.813521][ T7853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.815161][ T7853]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.817110][ T7853]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.819141][ T7853]  xfrm_netlink_rcv+0x79/0x90
[  168.821014][ T7853]  netlink_unicast+0x82f/0x9e0
[  168.822949][ T7853]  ? __pfx_netlink_unicast+0x10/0x10
[  168.824732][ T7853]  ? netlink_sendmsg+0x642/0xb30
[  168.826313][ T7853]  ? skb_put+0x11b/0x210
[  168.827636][ T7853]  netlink_sendmsg+0x805/0xb30
[  168.829135][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.830784][ T7853]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.832344][ T7853]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.833977][ T7853]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.835789][ T7853]  __sock_sendmsg+0x21c/0x270
[  168.837610][ T7853]  ____sys_sendmsg+0x505/0x830
[  168.839346][ T7853]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.840974][ T7853]  ? import_iovec+0x74/0xa0
[  168.842408][ T7853]  ___sys_sendmsg+0x21f/0x2a0
[  168.843860][ T7853]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.845542][ T7853]  ? irqentry_enter+0x3d/0x60
[  168.847156][ T7853]  ? __x64_sys_sendmsg+0x180/0x260
[  168.848726][ T7853]  __x64_sys_sendmsg+0x19b/0x260
[  168.850317][ T7853]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.851947][ T7853]  do_syscall_64+0xfa/0x3b0
[  168.853372][ T7853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.855334][ T7853]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  168.857698][ T7853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.859785][ T7853] RIP: 0033:0x7f9eac18ebe9
[  168.861112][ T7853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.866780][ T7853] RSP: 002b:00007f9ead0c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.869301][ T7853] RAX: ffffffffffffffda RBX: 00007f9eac3c5fa0 RCX: 00007f9eac18ebe9
[  168.871812][ T7853] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  168.874150][ T7853] RBP: 00007f9eac211e19 R08: 0000000000000000 R09: 0000000000000000
[  168.876953][ T7853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.879848][ T7853] R13: 00007f9eac3c6038 R14: 00007f9eac3c5fa0 R15: 00007ffc4342b0b8
[  168.882315][ T7853]  </TASK>
[  168.883898][ T7853] Kernel Offset: disabled
[  168.885312][ T7853] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:43:40  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e5701 RBX=ffff88801b0beb38 RCX=ffffffff822e5777 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88801b0beb3c RBP=ffff88801b0beaf0 RSP=ffffc9000619f920
R8 =ffff88801b0beb3f R9 =ffff88801b0beb3f R10=dffffc0000000000 R11=ffffed1003617d67
R12=0000000000000001 R13=0000000000000000 R14=0000000000012623 R15=1ffff11003617d67
RIP=ffffffff822306db RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555f884500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9226996bd0 CR3=0000000027218000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000055555f8847e0 000055555f8847e0 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9226a12e53
XMM06=0000000000000000 00007f9226a12e4d XMM07=0000000000000000 00007f9226a12e61
XMM08=0000000000000000 00007f9226a12ee7 XMM09=0000000000000000 00007f9226a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001416 RDI=0000000000001417 RBP=00000000000003f8 RSP=ffffc9000613e930
R8 =ffff888108a18237 R9 =1ffff11021143046 R10=dffffc0000000000 R11=ffffffff854ef830
R12=dffffc0000000000 R13=ffffffff99af9910 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9ead0c96c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c301df5 CR3=00000001244b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9eac212e53
XMM06=0000000000000000 00007f9eac212e4d XMM07=0000000000000000 00007f9eac212e61
XMM08=0000000000000000 00007f9eac212ee7 XMM09=0000000000000000 00007f9eac212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
