last executing test programs:

2.132566504s ago: executing program 0 (id=173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.062278611s ago: executing program 0 (id=175):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777277"], 0xa)

1.920289968s ago: executing program 1 (id=180):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r0, 0x21)

1.856502003s ago: executing program 1 (id=181):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x8)

1.856304083s ago: executing program 0 (id=182):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x5}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x182d, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.644307294s ago: executing program 1 (id=183):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.644030582s ago: executing program 1 (id=184):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

1.052268891s ago: executing program 1 (id=186):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000404000000000000000000611233000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0xd, 0x8}, {0x1, 0x4, 0xd, 0x8}, {0x3, 0x2, 0x10, 0xc}, {0x5, 0x2, 0xb, 0x1}, {0x1, 0x2, 0xe, 0x2}, {0x1, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x3, 0x4}, {0x2, 0x3, 0xb}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$kcm(0x29, 0x7, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008000000010000008000000096c709b16707be355d6a49d11ed0fe29c6bc4fd2953dfe525a731595e6f2c6641666decbbaa436acadd29bd407ed07f6146787f0d84b3aa0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x159300, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
close(0x3)
close(r3)

1.051962862s ago: executing program 0 (id=187):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x4, &(0x7f0000000040)=r0, 0x4)

970.485647ms ago: executing program 0 (id=189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

748.188108ms ago: executing program 2 (id=191):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)

663.671331ms ago: executing program 2 (id=192):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

574.201123ms ago: executing program 2 (id=193):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x61, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0)

504.708428ms ago: executing program 2 (id=194):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

122.867412ms ago: executing program 0 (id=195):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x30822cce, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x13, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r3 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf78", 0x87}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x891a, &(0x7f0000000000)={'netpci0\x00', @random="0200ff7fffff"})
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
close(r6)
sendmsg$kcm(r5, 0x0, 0x8000)

122.114066ms ago: executing program 2 (id=196):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r0, &(0x7f0000002400)={&(0x7f0000000e00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e80)=""/223, 0xdf}, {&(0x7f0000000f80)=""/70, 0x46}, {&(0x7f0000001000)=""/241, 0xf1}, {&(0x7f0000001100)=""/232, 0xe8}, {&(0x7f0000001200)=""/84, 0x54}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x6, &(0x7f0000002300)=""/236, 0xec}, 0x10060)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002b000b00000000fff400e8ff07000000040003000c0001800600000088480000080002"], 0x2c}}, 0x40)

392.592µs ago: executing program 1 (id=197):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 2 (id=198):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14316' (ED25519) to the list of known hosts.
syzkaller login: [   57.049468][ T5830] cgroup: Unknown subsys name 'net'
[   57.156992][ T5830] cgroup: Unknown subsys name 'cpuset'
[   57.163843][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.388877][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.445173][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.449190][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.452562][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.456051][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.459454][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.481552][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.484987][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.487971][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.491279][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.494477][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.554377][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.557600][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.560849][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.565916][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.570257][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.906958][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.938616][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.041981][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.143099][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.146090][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.149144][ T5852] bridge_slave_0: entered allmulticast mode
[   65.152833][ T5852] bridge_slave_0: entered promiscuous mode
[   65.171743][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.174834][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.177919][ T5848] bridge_slave_0: entered allmulticast mode
[   65.181567][ T5848] bridge_slave_0: entered promiscuous mode
[   65.192914][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.195707][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.198468][ T5852] bridge_slave_1: entered allmulticast mode
[   65.203204][ T5852] bridge_slave_1: entered promiscuous mode
[   65.226702][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.229550][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.232669][ T5848] bridge_slave_1: entered allmulticast mode
[   65.236362][ T5848] bridge_slave_1: entered promiscuous mode
[   65.267538][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.270527][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.273832][ T5856] bridge_slave_0: entered allmulticast mode
[   65.277625][ T5856] bridge_slave_0: entered promiscuous mode
[   65.307880][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.310692][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.314164][ T5856] bridge_slave_1: entered allmulticast mode
[   65.317777][ T5856] bridge_slave_1: entered promiscuous mode
[   65.348970][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.355185][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.365269][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.384368][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.418989][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.440239][ T5848] team0: Port device team_slave_0 added
[   65.445283][ T5848] team0: Port device team_slave_1 added
[   65.465262][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.510323][ T5852] team0: Port device team_slave_0 added
[   65.515044][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.517791][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.527757][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.537201][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.539976][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.549899][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.569324][ T5852] team0: Port device team_slave_1 added
[   65.573762][ T5856] team0: Port device team_slave_0 added
[   65.597680][ T5856] team0: Port device team_slave_1 added
[   65.636688][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.639420][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.650649][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.681675][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.685393][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.694247][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.705036][ T5848] hsr_slave_0: entered promiscuous mode
[   65.708835][ T5848] hsr_slave_1: entered promiscuous mode
[   65.712586][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.715278][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.726099][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.751272][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.754191][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.764365][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.837286][ T5852] hsr_slave_0: entered promiscuous mode
[   65.840535][ T5852] hsr_slave_1: entered promiscuous mode
[   65.844394][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.846693][ T5852] Cannot create hsr debugfs directory
[   65.938393][ T5856] hsr_slave_0: entered promiscuous mode
[   65.941652][ T5856] hsr_slave_1: entered promiscuous mode
[   65.944796][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.946963][ T5856] Cannot create hsr debugfs directory
[   66.218443][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.237819][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.248616][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.268328][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.324269][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.330596][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.346167][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.356836][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.448960][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.461943][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.470090][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.480245][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.533212][ T5236] Bluetooth: hci1: command tx timeout
[   66.535526][ T5236] Bluetooth: hci0: command tx timeout
[   66.580899][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.612802][   T54] Bluetooth: hci2: command tx timeout
[   66.621262][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.633264][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.651644][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.654818][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.675598][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.678414][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.703628][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.720124][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.722945][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.737533][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.744809][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.747033][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.789500][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.793952][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.831295][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.844121][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.847036][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.881475][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.884437][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.034414][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.044232][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.091618][ T5852] veth0_vlan: entered promiscuous mode
[   67.112947][ T5848] veth0_vlan: entered promiscuous mode
[   67.127229][ T5852] veth1_vlan: entered promiscuous mode
[   67.148388][ T5848] veth1_vlan: entered promiscuous mode
[   67.179593][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.189018][ T5852] veth0_macvtap: entered promiscuous mode
[   67.197890][ T5852] veth1_macvtap: entered promiscuous mode
[   67.216122][ T5848] veth0_macvtap: entered promiscuous mode
[   67.234662][ T5848] veth1_macvtap: entered promiscuous mode
[   67.243052][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.271112][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.285720][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.293044][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.306583][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.310271][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.328951][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.337184][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.340670][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.353121][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.356578][ T5856] veth0_vlan: entered promiscuous mode
[   67.360243][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.367347][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.405803][ T5856] veth1_vlan: entered promiscuous mode
[   67.493950][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.496630][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.519040][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.522479][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.548806][ T5856] veth0_macvtap: entered promiscuous mode
[   67.562352][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.565265][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.578519][ T5856] veth1_macvtap: entered promiscuous mode
[   67.610980][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.617381][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.626090][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.633613][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.649931][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.666417][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.680377][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.696865][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.710107][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.796676][ T5915] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.870617][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.874200][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.935757][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.939679][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.403456][ T5934] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET)
[   68.408199][ T5934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.491734][ T5934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.613839][   T54] Bluetooth: hci0: command tx timeout
[   68.617029][   T54] Bluetooth: hci1: command tx timeout
[   68.674377][ T5934] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10'.
[   68.684492][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.696967][ T5236] Bluetooth: hci2: command tx timeout
[   68.752005][    C0] hrtimer: interrupt took 48589 ns
[   69.167603][ T5966] netlink: 'syz.2.25': attribute type 5 has an invalid length.
[   69.181061][ T5966] netlink: 'syz.2.25': attribute type 15 has an invalid length.
[   69.372198][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.375843][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.379337][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.28'.
[   69.564542][ T5983] netlink: 'syz.1.34': attribute type 2 has an invalid length.
[   69.576687][ T5983] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34'.
[   69.581933][ T5983] nbd: must specify a device to reconfigure
[   69.585544][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   69.634916][ T5991] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.637975][ T5991] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.674829][ T5992] Zero length message leads to an empty skb
[   70.703994][ T6017] netlink: 'syz.1.47': attribute type 4 has an invalid length.
[   70.709456][ T6017] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.732320][ T5236] Bluetooth: hci1: command tx timeout
[   70.734573][ T5236] Bluetooth: hci0: command tx timeout
[   71.259458][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.262463][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.347551][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1655204605 wd_nsec: 1655204548
[   72.355200][   T54] Bluetooth: hci2: command tx timeout
[   72.774866][ T5236] Bluetooth: hci1: command tx timeout
[   72.777195][   T54] Bluetooth: hci0: command tx timeout
[   74.376265][   T54] Bluetooth: hci2: command tx timeout
[   77.587995][ T6040] =======================================================
[   77.587995][ T6040] WARNING: The mand mount option has been deprecated and
[   77.587995][ T6040]          and is ignored by this kernel. Remove the mand
[   77.587995][ T6040]          option from the mount to silence this warning.
[   77.587995][ T6040] =======================================================
[   77.802943][ T6048] __nla_validate_parse: 2 callbacks suppressed
[   77.802955][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.0.59'.
[   77.816323][ T6048] unsupported nlmsg_type 40
[   77.899855][ T5877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.991909][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.059673][ T6053] : renamed from veth0_to_bond (while UP)
[   78.094575][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.189177][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.248041][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   78.254044][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   78.335824][ T5877] bridge_slave_1: left allmulticast mode
[   78.339310][ T5877] bridge_slave_1: left promiscuous mode
[   78.344416][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.345727][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.351884][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.355104][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.359355][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.362873][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.370860][ T5877] bridge_slave_0: left allmulticast mode
[   78.385435][ T5877] bridge_slave_0: left promiscuous mode
[   78.388152][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.724708][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.737434][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.742903][ T5877] bond0 (unregistering): Released all slaves
[   78.755180][ T6072] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.70'.
[   78.765733][ T6074] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.70'.
[   79.162148][ T5877] hsr_slave_0: left promiscuous mode
[   79.169784][ T5877] hsr_slave_1: left promiscuous mode
[   79.173441][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.176430][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.185774][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.188780][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.198129][ T6090] netlink: 7 bytes leftover after parsing attributes in process `syz.1.76'.
[   79.201903][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.76'.
[   79.218724][ T5877] veth1_macvtap: left promiscuous mode
[   79.221413][ T5877] veth0_macvtap: left promiscuous mode
[   79.226570][ T5877] veth1_vlan: left promiscuous mode
[   79.232876][ T5877] veth0_vlan: left promiscuous mode
[   79.452921][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   79.569455][ T6106] netlink: 13 bytes leftover after parsing attributes in process `syz.0.83'.
[   79.707927][ T5877] team0 (unregistering): Port device team_slave_1 removed
[   79.721051][ T6110] netlink: 'syz.0.85': attribute type 10 has an invalid length.
[   79.725661][ T6110] netlink: 'syz.0.85': attribute type 19 has an invalid length.
[   79.729593][ T6110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.85'.
[   79.744874][ T5877] team0 (unregistering): Port device team_slave_0 removed
[   80.108737][ T6064] chnl_net:caif_netlink_parms(): no params data found
[   80.248381][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.262671][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.265359][ T6064] bridge_slave_0: entered allmulticast mode
[   80.269148][ T6064] bridge_slave_0: entered promiscuous mode
[   80.277028][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.280223][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.285785][ T6064] bridge_slave_1: entered allmulticast mode
[   80.293480][ T6064] bridge_slave_1: entered promiscuous mode
[   80.351194][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.365939][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.375503][ T5236] Bluetooth: hci1: command tx timeout
[   80.423176][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0d
[   80.451349][ T6064] team0: Port device team_slave_0 added
[   80.464232][ T6064] team0: Port device team_slave_1 added
[   80.531052][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.542419][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.553940][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.560713][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.564016][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.573878][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.658586][ T6137] netlink: 'syz.1.96': attribute type 39 has an invalid length.
[   80.673273][ T6064] hsr_slave_0: entered promiscuous mode
[   80.675692][ T6064] hsr_slave_1: entered promiscuous mode
[   80.678324][ T6064] debugfs: 'hsr0' already exists in 'hsr'
[   80.680446][ T6064] Cannot create hsr debugfs directory
[   80.977541][ T6149] netlink: 'syz.1.101': attribute type 11 has an invalid length.
[   81.263584][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.540271][ T6064] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.554572][ T6064] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.564191][ T6064] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.570606][ T6064] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.666777][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.680752][ T6064] 8021q: adding VLAN 0 to HW filter on device team0
[   81.687056][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.689396][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.699890][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.702241][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.721901][ T6175] netlink: 'syz.1.109': attribute type 39 has an invalid length.
[   81.730192][ T6175] veth0_macvtap: left promiscuous mode
[   81.890618][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.931978][ T6064] veth0_vlan: entered promiscuous mode
[   81.940112][ T6064] veth1_vlan: entered promiscuous mode
[   81.964617][ T6064] veth0_macvtap: entered promiscuous mode
[   81.970245][ T6064] veth1_macvtap: entered promiscuous mode
[   81.981559][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.991836][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.000453][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.006505][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.011034][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015365][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.065659][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.068362][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.091065][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.095448][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.217647][ T6186] cgroup2: Unknown parameter 'u'
[   82.435791][ T6194] netlink: 'syz.0.115': attribute type 4 has an invalid length.
[   82.453487][ T5236] Bluetooth: hci1: command tx timeout
[   82.501626][ T6196] netlink: 'syz.0.116': attribute type 10 has an invalid length.
[   83.004263][ T6233] __nla_validate_parse: 4 callbacks suppressed
[   83.004285][ T6233] netlink: 6 bytes leftover after parsing attributes in process `syz.0.134'.
[   83.016714][ T6233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.177852][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'.
[   83.214928][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.310511][ T6237] bridge_slave_0 (unregistering): left allmulticast mode
[   83.318889][ T6237] bridge_slave_0 (unregistering): left promiscuous mode
[   83.406494][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.660443][ T6243] netlink: 232 bytes leftover after parsing attributes in process `syz.0.138'.
[   83.873171][ T6254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'.
[   83.875330][ T6253] netlink: 'syz.1.143': attribute type 2 has an invalid length.
[   83.879603][ T6253] netlink: 'syz.1.143': attribute type 8 has an invalid length.
[   83.880134][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.882928][ T6253] netlink: 44 bytes leftover after parsing attributes in process `syz.1.143'.
[   83.905765][ T6254] bridge_slave_0 (unregistering): left allmulticast mode
[   83.908321][ T6254] bridge_slave_0 (unregistering): left promiscuous mode
[   83.910604][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.991951][ T6258] netlink: 'syz.1.144': attribute type 2 has an invalid length.
[   84.043713][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   84.221828][ T6263] netlink: 'syz.1.146': attribute type 21 has an invalid length.
[   84.230298][ T6263] IPv6: NLM_F_CREATE should be specified when creating new route
[   84.237400][ T6263] IPv6: Can't replace route, no match found
[   84.544134][ T5236] Bluetooth: hci1: command tx timeout
[   85.076129][ T6277] xt_limit: Overflow, try lower: 271964/0
[   85.480260][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   86.366085][ T6285] netlink: 763 bytes leftover after parsing attributes in process `syz.1.155'.
[   86.612137][ T5236] Bluetooth: hci1: command tx timeout
[   86.614765][    T9] cfg80211: failed to load regulatory.db
[   86.640861][ T6299] netlink: 'syz.1.161': attribute type 10 has an invalid length.
[   86.646185][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.648884][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.659840][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.662701][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.665429][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.667592][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.681194][ T6299] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   86.734995][ T6303] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   86.910030][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.076734][ T6331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.163322][ T6357] Driver unsupported XDP return value 0 on prog  (id 60) dev N/A, expect packet loss!
[   88.253426][ T6350] syzkaller0: entered promiscuous mode
[   88.256098][ T6350] syzkaller0: entered allmulticast mode
[   88.578586][ T6368] netlink: 64 bytes leftover after parsing attributes in process `syz.2.194'.
[   89.052388][ T6370] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   89.054825][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   89.152590][ T6378] netlink: 'syz.2.198': attribute type 25 has an invalid length.
[   89.155379][ T6378] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.198'.
Connection to localhost closed by remote host.
[   89.679606][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.731629][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.809746][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.908648][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.035378][   T13] bridge_slave_1: left allmulticast mode
[   90.037533][   T13] bridge_slave_1: left promiscuous mode
[   90.039822][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.046608][   T13] bridge_slave_0: left allmulticast mode
[   90.048829][   T13] bridge_slave_0: left promiscuous mode
[   90.051113][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.229084][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   90.365551][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.371354][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.377028][   T13] bond0 (unregistering): Released all slaves
[   90.669213][   T13] hsr_slave_0: left promiscuous mode
[   90.672305][   T13] hsr_slave_1: left promiscuous mode
[   90.674994][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.678020][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.681538][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.684679][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.704295][   T13] veth1_macvtap: left promiscuous mode
[   90.706731][   T13] veth1_vlan: left promiscuous mode
[   90.708967][   T13] veth0_vlan: left promiscuous mode
[   91.084046][   T13] team0 (unregistering): Port device team_slave_1 removed
[   91.108508][   T13] team0 (unregistering): Port device team_slave_0 removed
[   91.684859][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.756658][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.796584][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.868019][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.953512][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.027030][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.074544][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.123285][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.235142][   T13] bridge_slave_1: left allmulticast mode
[   92.237014][   T13] bridge_slave_1: left promiscuous mode
[   92.238850][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.243954][   T13] bridge_slave_1: left allmulticast mode
[   92.245660][   T13] bridge_slave_1: left promiscuous mode
[   92.247506][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.504088][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.508874][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.512674][   T13] bond0 (unregistering): Released all slaves
[   92.747563][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.753365][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.759252][   T13] bond0 (unregistering): Released all slaves
[   93.101200][   T13] hsr_slave_0: left promiscuous mode
[   93.104684][   T13] hsr_slave_1: left promiscuous mode
[   93.106962][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.109405][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.112524][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.115327][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.122228][   T13] hsr_slave_0: left promiscuous mode
[   93.124645][   T13] hsr_slave_1: left promiscuous mode
[   93.126918][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.129385][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.134469][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.136788][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.155371][   T13] veth1_macvtap: left promiscuous mode
[   93.157237][   T13] veth0_macvtap: left promiscuous mode
[   93.159242][   T13] veth1_vlan: left promiscuous mode
[   93.161158][   T13] veth0_vlan: left promiscuous mode
[   93.164595][   T13] veth1_macvtap: left promiscuous mode
[   93.166426][   T13] veth0_macvtap: left promiscuous mode
[   93.168377][   T13] veth1_vlan: left promiscuous mode
[   93.170161][   T13] veth0_vlan: left promiscuous mode
[   93.575014][   T13] team0 (unregistering): Port device team_slave_1 removed
[   93.599816][   T13] team0 (unregistering): Port device team_slave_0 removed
[   94.110083][   T13] team0 (unregistering): Port device team_slave_1 removed
[   94.140322][   T13] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
18:08:13  Registers:
info registers vcpu 0

CPU#0
RAX=e94cf4fae6fc9d00 RBX=ffffffff81969a38 RCX=e94cf4fae6fc9d00 RDX=0000000000000001
RSI=ffffffff8d9ba163 RDI=ffffffff8be33e00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd23436dfc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=13d24298a4111a00 RBX=ffffffff81969a38 RCX=13d24298a4111a00 RDX=0000000000000001
RSI=ffffffff8d9ba163 RDI=ffffffff8be33e00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f323ffc CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000ffff00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
