last executing test programs:

2m12.210671529s ago: executing program 0 (id=54):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

2m12.1491806s ago: executing program 0 (id=55):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r1, 0x0, 0x7, &(0x7f0000000000)='][}(}#\x00'}, 0x30)

2m12.056221904s ago: executing program 1 (id=56):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000300)=@in6={0xa, 0x4e63, 0x41d, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x3c50}}, @timestamping={{0x18, 0x1, 0x25, 0x1}}], 0x30}, 0x80)

2m11.965938191s ago: executing program 1 (id=58):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b55f8ff00000000bfa1002ee7f8c700070100eff7ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m11.882936189s ago: executing program 1 (id=61):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0)

2m11.881190241s ago: executing program 0 (id=62):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001002cbd7000fcdbdf25040000000600040080ff0000060003"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x240400c0)

2m11.805407689s ago: executing program 1 (id=64):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x5}, {0x6}]})

2m11.804968216s ago: executing program 0 (id=65):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x400000000000005e, 0x70bd2d, 0x70bd2a, 0x70bd2b, 0x70bd2b, 0x8, [0x7]}}]}, 0x158}}, 0x24000058)

2m11.734087237s ago: executing program 0 (id=67):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfe1b)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x94004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3, 0xffffffff, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)

2m11.656784374s ago: executing program 1 (id=68):
r0 = socket$kcm(0x1e, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x3}}, 0x80, 0x0}, 0x0)

2m11.465330045s ago: executing program 0 (id=69):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e000000040106491200fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16978ca49a3d8f7f67d0a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000000000be00", 0xd8}], 0x1}, 0x0)

2m11.313428394s ago: executing program 32 (id=69):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e000000040106491200fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16978ca49a3d8f7f67d0a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000000000be00", 0xd8}], 0x1}, 0x0)

2m11.26435097s ago: executing program 1 (id=71):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x0, 0x0, 0x0, 0xc, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x48000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x9, 0x60000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m11.258499841s ago: executing program 33 (id=71):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x0, 0x0, 0x0, 0xc, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x48000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x9, 0x60000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

23.996452883s ago: executing program 3 (id=1211):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0)

23.841769846s ago: executing program 3 (id=1215):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x8, 0x0, 0x62)

23.776307913s ago: executing program 3 (id=1220):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x2000c004)

23.776021345s ago: executing program 3 (id=1221):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.725058788s ago: executing program 3 (id=1224):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

22.435993108s ago: executing program 3 (id=1242):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x41}, 0x20)

7.4434523s ago: executing program 34 (id=1242):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x61]}}, 0x0, 0x41}, 0x20)

2.337655082s ago: executing program 2 (id=1404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="05000000000000001f110000000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a67880141cca555077e3a159110193dd2df1fa7c3205bfedbe9116eb423cdacfa7e32fe02313615b2e1a38d522be18b000048b043ccc42646d25dfd73bb6d7535f7866907dc6751dfced1fd8accae669e173a649c1cfd6587d47578f4c35235138d5521f9453559c35d9560ebe8efbc6f342a3e3173d466a0f06c54c3a4903ef31c4d4a01010000009f2f0517ccca0e1823a2971a50f713d4e21b9436f1ae0796f23526ec0fd97f734c783bcaecd4596f2e91af6565902716314c815bf697e6bd25eac36d4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b07789d99b3d0124f39dc092440010000000000000f7049db5cb19d7962fed44e00f39ed8c15a11fa798de504e2865cd81f2b77fdd76c67700000000000000db3947c8dc7b1b4c4554ffdca8b75d82706ba9cbeeffbc83fb05000000000000593d60abc9b3e67d127e9d5c4c560256f3d3759dcfeb820634fd4d419e0500000005b2d5a2008a600484511b6efaad206335a3ebf6b9e01446a6285f4665a7fe37da0049f8bf4064726dc32add75e0f435f28fbeda75cf971d54a9698cf7270f420edc858176070bfff7b09413f3fbd3ced3284db730b368ddca654dd7836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ecbe5cb0417d33d35faee6b2d905d30dfe64d05ac37ed015494d9d10e36e603129e9a726579ac7d672cacd581b7e2fc7a5758fcfb822de1dacc357341e000c604cc34c49914f1aa198a77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e00ad3711a66d91254a6f911b1449c62a6e1e3f9ce19a9d173663570d884b0cb462e0b45853673df72dc813f7454ae62d79ac48034282f03040350f886e9644179dcf66d93907cedd49e0c5752f755849953957143a0380d1f62ae63b29fe177745448ccc92577007c12cf90da9200df6bb669d5a57dd74df817eaa92000000000001b08b3ac52db204399eae4a2f105d4544d9a3000000000000001ff2e8afd7913007fe44950233feb5303b2617668a0e45846436ad643fb999180644298458d40002a06f4853d99af16764b8e59e04d02835f803f66307fbeef5b7e97b6d0ef2c62215c259c7796a158d662b1adfae1d24e109e52378b3f1f8ee8965dedd20abc5b7a73d9501bf3f5a2ae19d7ddf8daf3691d1879e225395c0925ec1fe4ca8fd6fc11c8db3cd0d7206531366a5f6150d9d1a6eab622821378f2827fac5c7f82dad8f4ed4367c3a4f20304432f0a154147c7af7569ff2ed248dafc1aa13afe3d17c8f2f720e1a12c4cd230f3f29a390b44a3bf66b5c8fc4a026fe6ea8edf871da290c4d9457fccdc6a8f5944e47f742cfd7b0c5f5b00fc0921c6951541f2dda75be07cb0097e25e4a30000346c782264139540c5f260495abee91019e816aabc7c9b1e3862de6c6cf6d5cdead6a42b519619ff9c2f5600d95d34d50667901373f32a1fc0b7299aadbcc96958dff4a229c8a78864ea0ae3289a04249d2f790745374fea0687a32b8c9731226a085c71f6b35f8db44f30ed778ca2cd4ebb7929ff7845e9bdfba5caf2cae0fbc83999790441bc991f5c8acb6ba3deb94f52f7a74c33ab7106054a8eb839ab2ff7acbcc8f875acc552ba92df8f649598f9eba605729db380c130e00"/1247], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.335543205s ago: executing program 2 (id=1406):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

911.858026ms ago: executing program 4 (id=1414):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x2121, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffedc, 0x0, 0x0, 0x40000}, 0x40d5)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b706588665f6576656e74baeb6766f56a967a0dafe3bc9b359320"], 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0}, 0x30004001)
r4 = socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000fc0)='ns/pid\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x48080)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

704.44466ms ago: executing program 4 (id=1415):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)

620.644833ms ago: executing program 4 (id=1416):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

520.70452ms ago: executing program 4 (id=1417):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

459.943893ms ago: executing program 2 (id=1418):
socket$kcm(0x1e, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680))
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001540)=""/155}, 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

286.987794ms ago: executing program 4 (id=1419):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket(0x10, 0x803, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

286.516134ms ago: executing program 2 (id=1420):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x31, 0x0, 0x0)

88.57005ms ago: executing program 4 (id=1421):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff83076003008cb89e08f086dd", 0x0, 0xbe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

88.215503ms ago: executing program 2 (id=1422):
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xacc}, 0x0, 0xfff, 0xfffffe01, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xf7)

0s ago: executing program 2 (id=1423):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53730' (ED25519) to the list of known hosts.
syzkaller login: [   55.369493][ T5774] cgroup: Unknown subsys name 'net'
[   55.442705][ T5774] cgroup: Unknown subsys name 'cpuset'
[   55.457576][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.297988][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.547020][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.358659][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.363200][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.366520][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.369755][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.374524][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.417241][ T5887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.422618][ T5887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.426719][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.430975][ T5887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.435730][ T5887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.491640][ T5887] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.495378][ T5887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.500185][ T5887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.515570][ T5887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.519334][ T5887] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.852223][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   70.939742][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   71.033740][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.037490][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.041722][ T5885] bridge_slave_0: entered allmulticast mode
[   71.045850][ T5885] bridge_slave_0: entered promiscuous mode
[   71.065183][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.068514][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.072697][ T5885] bridge_slave_1: entered allmulticast mode
[   71.076472][ T5885] bridge_slave_1: entered promiscuous mode
[   71.132712][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.136151][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   71.161410][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.169539][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.173298][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.176332][ T5888] bridge_slave_0: entered allmulticast mode
[   71.182750][ T5888] bridge_slave_0: entered promiscuous mode
[   71.216661][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.219681][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.224081][ T5888] bridge_slave_1: entered allmulticast mode
[   71.227554][ T5888] bridge_slave_1: entered promiscuous mode
[   71.256978][ T5885] team0: Port device team_slave_0 added
[   71.276293][ T5885] team0: Port device team_slave_1 added
[   71.311604][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.331835][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.336213][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.338383][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.348774][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.374755][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.377419][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.387111][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.405019][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.407566][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.459230][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.463346][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.466184][ T5891] bridge_slave_0: entered allmulticast mode
[   71.471116][ T5891] bridge_slave_0: entered promiscuous mode
[   71.477471][ T5888] team0: Port device team_slave_0 added
[   71.502383][ T5885] hsr_slave_0: entered promiscuous mode
[   71.505621][ T5885] hsr_slave_1: entered promiscuous mode
[   71.508845][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.512179][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.514676][ T5891] bridge_slave_1: entered allmulticast mode
[   71.518514][ T5891] bridge_slave_1: entered promiscuous mode
[   71.537442][ T5888] team0: Port device team_slave_1 added
[   71.567377][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.605720][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.615755][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.618593][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.628533][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.654951][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.657511][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.667578][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.720373][ T5888] hsr_slave_0: entered promiscuous mode
[   71.723237][ T5888] hsr_slave_1: entered promiscuous mode
[   71.725494][ T5888] debugfs: 'hsr0' already exists in 'hsr'
[   71.727856][ T5888] Cannot create hsr debugfs directory
[   71.734512][ T5891] team0: Port device team_slave_0 added
[   71.758202][ T5891] team0: Port device team_slave_1 added
[   71.851404][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.853767][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.863181][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.885045][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.887773][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.898145][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.998682][ T5891] hsr_slave_0: entered promiscuous mode
[   72.002666][ T5891] hsr_slave_1: entered promiscuous mode
[   72.004838][ T5891] debugfs: 'hsr0' already exists in 'hsr'
[   72.006701][ T5891] Cannot create hsr debugfs directory
[   72.107259][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.118818][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.148718][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.178836][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.260763][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.275251][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.298034][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.312418][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.356058][ T5891] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.368641][ T5891] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.377230][ T5891] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.384968][ T5891] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.450974][ T5887] Bluetooth: hci0: command tx timeout
[   72.503734][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.520834][ T5887] Bluetooth: hci1: command tx timeout
[   72.545069][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.555272][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   72.584873][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.588306][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.597869][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   72.602376][ T5887] Bluetooth: hci2: command tx timeout
[   72.629885][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.632830][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.638114][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.641050][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.646646][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.649418][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.679154][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.753692][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   72.771821][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.774949][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.798888][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.801513][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.959302][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.004553][ T5885] veth0_vlan: entered promiscuous mode
[   73.014201][ T5885] veth1_vlan: entered promiscuous mode
[   73.056729][ T5885] veth0_macvtap: entered promiscuous mode
[   73.065161][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.072642][ T5885] veth1_macvtap: entered promiscuous mode
[   73.106725][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.120285][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.126416][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.138542][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.157006][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.179390][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.183507][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.207251][ T5888] veth0_vlan: entered promiscuous mode
[   73.238322][ T5888] veth1_vlan: entered promiscuous mode
[   73.272603][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.275957][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.347281][ T5891] veth0_vlan: entered promiscuous mode
[   73.352532][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.357320][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.363711][ T5888] veth0_macvtap: entered promiscuous mode
[   73.387809][ T5891] veth1_vlan: entered promiscuous mode
[   73.414443][ T5888] veth1_macvtap: entered promiscuous mode
[   73.443694][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.460914][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.484545][ T5912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.488118][ T5912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.504731][ T5891] veth0_macvtap: entered promiscuous mode
[   73.520899][ T5912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.525701][ T5891] veth1_macvtap: entered promiscuous mode
[   73.543110][ T5912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.573452][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.608926][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.648133][ T5895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.659147][ T5895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.666723][ T5895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.677976][ T5895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.772048][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.775757][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.841020][ T5954] netlink: 'syz.2.19': attribute type 3 has an invalid length.
[   73.852118][ T5954] netlink: 'syz.2.19': attribute type 1 has an invalid length.
[   73.860670][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.863117][ T5954] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.19'.
[   73.870523][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.897438][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.908075][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.912977][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.916110][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.028707][ T5959] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.14'.
[   74.483357][ T5972] netlink: 'syz.0.26': attribute type 39 has an invalid length.
[   74.521362][ T5887] Bluetooth: hci0: command tx timeout
[   74.600777][ T5887] Bluetooth: hci1: command tx timeout
[   74.646052][ T5978] netlink: 'syz.0.29': attribute type 7 has an invalid length.
[   74.688531][ T5887] Bluetooth: hci2: command tx timeout
[   74.828151][ T5985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.32'.
[   75.058030][ T5887] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   75.266253][ T6003] netlink: 'syz.0.41': attribute type 39 has an invalid length.
[   75.271810][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40'.
[   75.272110][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39'.
[   75.285092][ T5999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39'.
[   75.296901][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.39'.
[   75.407458][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'.
[   75.422243][ T6006] wg2: entered promiscuous mode
[   75.432084][ T6006] wg2: entered allmulticast mode
[   75.627780][ T6011] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.633305][    C0] hrtimer: interrupt took 35267 ns
[   75.997571][ T6026] netlink: 176 bytes leftover after parsing attributes in process `syz.1.51'.
[   76.610079][ T5238] Bluetooth: hci0: command tx timeout
[   76.680045][ T5238] Bluetooth: hci1: command tx timeout
[   76.762811][ T5238] Bluetooth: hci2: command tx timeout
[   76.919245][ T5912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.982478][ T5912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.049649][ T5912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.137206][ T5912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.283660][ T5912] bridge_slave_1: left allmulticast mode
[   77.286179][ T5912] bridge_slave_1: left promiscuous mode
[   77.289663][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.298767][ T5912] bridge_slave_0: left allmulticast mode
[   77.302533][ T5912] bridge_slave_0: left promiscuous mode
[   77.304946][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.638978][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.648019][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.653652][ T5912] bond0 (unregistering): Released all slaves
[   77.909012][ T5912] hsr_slave_0: left promiscuous mode
[   77.911997][ T5912] hsr_slave_1: left promiscuous mode
[   77.914810][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.918006][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.932603][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.937207][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.955626][ T5912] veth1_macvtap: left promiscuous mode
[   77.957946][ T5912] veth0_macvtap: left promiscuous mode
[   77.963700][ T5912] veth1_vlan: left promiscuous mode
[   77.966147][ T5912] veth0_vlan: left promiscuous mode
[   78.368598][ T5887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.384084][ T5887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.387865][ T5912] team0 (unregistering): Port device team_slave_1 removed
[   78.388203][ T5887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.396282][ T5887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.410196][ T5887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.422024][ T5912] team0 (unregistering): Port device team_slave_0 removed
[   78.680450][ T5887] Bluetooth: hci0: command tx timeout
[   78.902371][ T6098] chnl_net:caif_netlink_parms(): no params data found
[   79.012852][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.016210][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.019243][ T6098] bridge_slave_0: entered allmulticast mode
[   79.024083][ T6098] bridge_slave_0: entered promiscuous mode
[   79.029068][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.032890][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.036017][ T6098] bridge_slave_1: entered allmulticast mode
[   79.041894][ T6098] bridge_slave_1: entered promiscuous mode
[   79.075056][ T6098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.085118][ T6098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.211894][ T6098] team0: Port device team_slave_0 added
[   79.217697][ T6098] team0: Port device team_slave_1 added
[   79.285358][ T6117] netlink: 268 bytes leftover after parsing attributes in process `syz.2.73'.
[   79.302255][ T6117] unsupported nla_type 65024
[   79.348972][ T5912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.358671][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.362593][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.366249][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.372052][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.375644][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.398285][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.404501][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.415107][ T6098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.439202][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.450060][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.470441][ T6098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.507972][ T5912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.644068][ T5912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.708527][ T6098] hsr_slave_0: entered promiscuous mode
[   79.715252][ T6098] hsr_slave_1: entered promiscuous mode
[   79.717809][ T6098] debugfs: 'hsr0' already exists in 'hsr'
[   79.723521][ T6098] Cannot create hsr debugfs directory
[   79.764646][ T5912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.938300][ T6136] netlink: 'syz.2.78': attribute type 10 has an invalid length.
[   80.154792][ T6136] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   80.167267][ T6136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   80.174587][ T6136] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   80.226022][ T6118] chnl_net:caif_netlink_parms(): no params data found
[   80.390959][ T5912] bridge_slave_1: left allmulticast mode
[   80.393130][ T5912] bridge_slave_1: left promiscuous mode
[   80.396290][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.405419][ T5912] bridge_slave_0: left allmulticast mode
[   80.407708][ T5912] bridge_slave_0: left promiscuous mode
[   80.410763][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.440260][ T5887] Bluetooth: hci1: command tx timeout
[   81.015505][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.030475][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.035650][ T5912] bond0 (unregistering): Released all slaves
[   81.076403][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.080446][ T6154] netlink: 'syz.2.82': attribute type 8 has an invalid length.
[   81.085224][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.094055][ T6154] netlink: 'syz.2.82': attribute type 3 has an invalid length.
[   81.098113][ T6118] bridge_slave_0: entered allmulticast mode
[   81.100762][ T6154] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.82'.
[   81.106614][ T6118] bridge_slave_0: entered promiscuous mode
[   81.150496][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.153642][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.156311][ T6118] bridge_slave_1: entered allmulticast mode
[   81.161851][ T6118] bridge_slave_1: entered promiscuous mode
[   81.264995][ T6118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.270207][ T6098] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.292960][ T6118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.296734][ T6098] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.307476][ T6098] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.315363][ T6098] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.383996][ T5912] hsr_slave_0: left promiscuous mode
[   81.389671][ T5912] hsr_slave_1: left promiscuous mode
[   81.394682][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.397707][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.401222][ T5887] Bluetooth: hci2: command tx timeout
[   81.407808][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.412233][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.427196][ T5912] veth1_macvtap: left promiscuous mode
[   81.429296][ T5912] veth0_macvtap: left promiscuous mode
[   81.432475][ T5912] veth1_vlan: left promiscuous mode
[   81.434295][ T5912] veth0_vlan: left promiscuous mode
[   81.903715][ T5912] team0 (unregistering): Port device team_slave_1 removed
[   81.937243][ T5912] team0 (unregistering): Port device team_slave_0 removed
[   82.350090][ T6118] team0: Port device team_slave_0 added
[   82.386436][ T6118] team0: Port device team_slave_1 added
[   82.462063][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.472691][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.489474][ T6118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.500855][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.503804][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.520117][ T5887] Bluetooth: hci1: command tx timeout
[   82.524312][ T6118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.641948][ T6118] hsr_slave_0: entered promiscuous mode
[   82.645157][ T6118] hsr_slave_1: entered promiscuous mode
[   82.647524][ T6118] debugfs: 'hsr0' already exists in 'hsr'
[   82.649634][ T6118] Cannot create hsr debugfs directory
[   82.864039][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.917992][ T6098] 8021q: adding VLAN 0 to HW filter on device team0
[   82.941935][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.944993][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.970327][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.973217][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.047330][ T6118] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.051616][ T6194] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   83.070685][ T6118] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.078950][ T6118] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.100140][ T6118] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.349121][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.371093][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.397577][ T6118] 8021q: adding VLAN 0 to HW filter on device team0
[   83.434329][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.437547][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.465190][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.468375][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.480332][ T5887] Bluetooth: hci2: command tx timeout
[   83.774601][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.785876][ T6098] veth0_vlan: entered promiscuous mode
[   83.806142][ T6098] veth1_vlan: entered promiscuous mode
[   83.876815][ T6235] netlink: 830 bytes leftover after parsing attributes in process `syz.2.93'.
[   83.902877][ T6118] veth0_vlan: entered promiscuous mode
[   83.922515][ T6118] veth1_vlan: entered promiscuous mode
[   83.945128][ T6098] veth0_macvtap: entered promiscuous mode
[   83.958319][ T6098] veth1_macvtap: entered promiscuous mode
[   83.993822][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.000967][ T6118] veth0_macvtap: entered promiscuous mode
[   84.023939][ T6118] veth1_macvtap: entered promiscuous mode
[   84.034827][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.062007][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.080369][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.083907][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.107436][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.145199][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.161887][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.197290][ T5912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.202804][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.97'.
[   84.210808][ T5912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.214837][ T5912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.258848][ T5912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.293263][ T6250] syz.2.98 uses obsolete (PF_INET,SOCK_PACKET)
[   84.362817][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.366337][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.434305][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.437755][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.458622][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.487337][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.610706][ T5887] Bluetooth: hci1: command tx timeout
[   84.624724][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.638411][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.722277][ T6258] netlink: 'syz.4.100': attribute type 15 has an invalid length.
[   84.726857][ T6258] netlink: 'syz.4.100': attribute type 7 has an invalid length.
[   84.737274][ T6258] netlink: 52 bytes leftover after parsing attributes in process `syz.4.100'.
[   84.869139][ T6267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.103'.
[   85.580359][ T5887] Bluetooth: hci2: command tx timeout
[   85.642781][ T5887] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[   85.756315][ T6294] wg2: entered promiscuous mode
[   85.758432][ T6294] wg2: entered allmulticast mode
[   85.955630][ T6304] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.119'.
[   85.959499][ T6304] tc_dump_action: action bad kind
[   86.680015][ T5887] Bluetooth: hci1: command tx timeout
[   86.764549][ T1272] cfg80211: failed to load regulatory.db
[   87.348147][ T6328] =======================================================
[   87.348147][ T6328] WARNING: The mand mount option has been deprecated and
[   87.348147][ T6328]          and is ignored by this kernel. Remove the mand
[   87.348147][ T6328]          option from the mount to silence this warning.
[   87.348147][ T6328] =======================================================
[   87.898148][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.002079][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.421926][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.425266][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.428844][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.432952][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.435597][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.906208][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.025561][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.144311][ T6370] netlink: 'syz.4.148': attribute type 11 has an invalid length.
[   89.190636][ T6370] netlink: 'syz.4.148': attribute type 6 has an invalid length.
[   89.653244][   T13] bridge_slave_1: left allmulticast mode
[   89.655645][   T13] bridge_slave_1: left promiscuous mode
[   89.658162][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.674008][   T13] bridge_slave_0: left allmulticast mode
[   89.676351][   T13] bridge_slave_0: left promiscuous mode
[   89.692016][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.805134][ T6390] netlink: 148 bytes leftover after parsing attributes in process `syz.2.155'.
[   90.226545][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.235213][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.243978][   T13] bond0 (unregistering): Released all slaves
[   90.265553][ T6359] chnl_net:caif_netlink_parms(): no params data found
[   90.555308][ T5238] Bluetooth: hci2: command tx timeout
[   90.693546][ T6404] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.704534][ T6404] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.779533][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.786453][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.806305][ T6359] bridge_slave_0: entered allmulticast mode
[   90.827899][ T6359] bridge_slave_0: entered promiscuous mode
[   90.889563][   T13] hsr_slave_0: left promiscuous mode
[   90.896541][   T13] hsr_slave_1: left promiscuous mode
[   90.899726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.921322][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.931009][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.935636][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.999452][   T13] veth1_macvtap: left promiscuous mode
[   91.007943][   T13] veth0_macvtap: left promiscuous mode
[   91.015779][   T13] veth1_vlan: left promiscuous mode
[   91.018445][   T13] veth0_vlan: left promiscuous mode
[   91.196096][ T6404] syz.2.162 (6404) used greatest stack depth: 18424 bytes left
[   91.565365][ T6438] netlink: 17 bytes leftover after parsing attributes in process `syz.4.172'.
[   91.570713][ T6438] netlink: zone id is out of range
[   91.573442][ T6438] netlink: zone id is out of range
[   91.575558][ T6438] netlink: zone id is out of range
[   91.577713][ T6438] netlink: zone id is out of range
[   91.585644][ T6438] netlink: zone id is out of range
[   91.587876][ T6438] netlink: zone id is out of range
[   91.603449][ T6438] netlink: zone id is out of range
[   91.605659][ T6438] netlink: zone id is out of range
[   91.608792][ T6438] netlink: zone id is out of range
[   91.615968][ T6438] netlink: zone id is out of range
[   91.822975][   T13] team0 (unregistering): Port device team_slave_1 removed
[   91.869119][   T13] team0 (unregistering): Port device team_slave_0 removed
[   91.874548][ T6444] netlink: 211 bytes leftover after parsing attributes in process `syz.4.175'.
[   92.706710][ T5238] Bluetooth: hci2: command tx timeout
[   92.779311][ T6446] delete_channel: no stack
[   92.783360][ T6446] delete_channel: no stack
[   93.348460][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.352136][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.355719][ T6359] bridge_slave_1: entered allmulticast mode
[   93.361171][ T6359] bridge_slave_1: entered promiscuous mode
[   93.445993][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.454980][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.552382][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'.
[   93.589127][ T6359] team0: Port device team_slave_0 added
[   93.598433][ T6359] team0: Port device team_slave_1 added
[   93.721935][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.734687][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.750470][ T6464] netlink: 92 bytes leftover after parsing attributes in process `syz.4.182'.
[   93.753480][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.757271][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'.
[   93.762876][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.762902][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.762921][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.799479][ T6473] netlink: 14 bytes leftover after parsing attributes in process `syz.2.184'.
[   93.847847][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'.
[   93.862580][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'.
[   93.974876][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.182'.
[   94.018775][ T6359] hsr_slave_0: entered promiscuous mode
[   94.024465][ T6359] hsr_slave_1: entered promiscuous mode
[   94.027322][ T6359] debugfs: 'hsr0' already exists in 'hsr'
[   94.030100][ T6359] Cannot create hsr debugfs directory
[   94.760708][ T5238] Bluetooth: hci2: command tx timeout
[   94.771940][ T6359] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.835014][ T6359] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.867310][ T6359] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.915676][ T6359] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.044107][ T6516] __nla_validate_parse: 1 callbacks suppressed
[   95.044124][ T6516] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.191'.
[   95.457673][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.573062][ T6359] 8021q: adding VLAN 0 to HW filter on device team0
[   95.671772][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.674707][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.702673][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.705683][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.798689][ T6530] netlink: 176 bytes leftover after parsing attributes in process `syz.2.193'.
[   95.969623][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.037191][ T6542] veth0_vlan: entered allmulticast mode
[   96.319238][ T6547] veth0_vlan: left promiscuous mode
[   96.326639][ T6547] veth0_vlan: entered promiscuous mode
[   96.524885][ T6359] veth0_vlan: entered promiscuous mode
[   96.531391][ T6542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.196'.
[   96.556651][ T6359] veth1_vlan: entered promiscuous mode
[   96.615636][ T6359] veth0_macvtap: entered promiscuous mode
[   96.633934][ T6359] veth1_macvtap: entered promiscuous mode
[   96.667971][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.683161][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.707954][ T5912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.724961][ T6165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.758658][ T6165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.796813][ T6165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.842525][ T5238] Bluetooth: hci2: command tx timeout
[   96.899686][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.912899][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.973063][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.978286][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.276864][ T6580] : renamed from team_slave_1 (while UP)
[   97.927015][ T6597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.210'.
[   97.933186][ T6597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.210'.
[   98.129381][ T5238] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[   99.790695][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.224'.
[   99.796762][ T6642] unsupported nlmsg_type 40
[  101.119120][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'.
[  101.281129][ T6679] Zero length message leads to an empty skb
[  101.805078][ T6693] netlink: 'syz.3.242': attribute type 32 has an invalid length.
[  101.808661][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'.
[  103.143470][ T6577] net_ratelimit: 13 callbacks suppressed
[  103.143499][ T6577] Set syz1 is full, maxelem 65536 reached
[  103.735478][ T5238] Bluetooth: hci0: Dropping invalid advertising data
[  103.739521][ T5238] Bluetooth: hci0: unknown advertising packet type: 0xff
[  104.775093][ T6757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.270'.
[  104.792823][ T6757] D`: renamed from hsr_slave_1 (while UP)
[  104.809246][ T6759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.271'.
[  105.077895][ T6771] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  105.078277][ T6771] netlink: 'syz.4.276': attribute type 3 has an invalid length.
[  105.094070][ T6771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.276'.
[  105.408185][ T6785] netlink: 'syz.2.282': attribute type 12 has an invalid length.
[  105.412674][ T6785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.282'.
[  105.561865][ T6789] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[  105.565169][ T6789] netlink: 17 bytes leftover after parsing attributes in process `syz.4.283'.
[  105.640854][ T6792] netlink: 'syz.2.285': attribute type 10 has an invalid length.
[  105.644376][ T6792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.285'.
[  105.648037][ T6792] dummy0: entered promiscuous mode
[  105.652625][ T6792] bridge0: port 3(dummy0) entered blocking state
[  105.655808][ T6792] bridge0: port 3(dummy0) entered disabled state
[  105.658817][ T6792] dummy0: entered allmulticast mode
[  105.665341][ T6792] bridge0: port 3(dummy0) entered blocking state
[  105.668233][ T6792] bridge0: port 3(dummy0) entered forwarding state
[  105.929083][ T6806] netlink: 'syz.3.291': attribute type 7 has an invalid length.
[  105.935280][ T6806] netlink: 140 bytes leftover after parsing attributes in process `syz.3.291'.
[  106.008454][ T6811] netlink: 176 bytes leftover after parsing attributes in process `syz.3.294'.
[  108.174615][ T6861] netlink: 200 bytes leftover after parsing attributes in process `syz.4.310'.
[  108.285415][ T6869] netlink: 182 bytes leftover after parsing attributes in process `syz.3.313'.
[  108.292248][ T6870] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[  109.006042][ T6902] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  110.586774][ T6954] netlink: 'syz.4.351': attribute type 1 has an invalid length.
[  110.590655][ T6954] netlink: 'syz.4.351': attribute type 2 has an invalid length.
[  110.793474][ T6964] openvswitch: netlink: Flow actions attr not present in new flow.
[  110.812339][ T6966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.357'.
[  110.895497][ T5238] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  111.187873][ T6977] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.363'.
[  111.908877][ T7006] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.375'.
[  112.606343][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'.
[  112.648540][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'.
[  112.897780][ T7046] netlink: 'syz.2.393': attribute type 10 has an invalid length.
[  112.905704][ T7047] netlink: 'syz.3.392': attribute type 21 has an invalid length.
[  112.908667][ T7047] netlink: 100 bytes leftover after parsing attributes in process `syz.3.392'.
[  112.919182][ T7046] batman_adv: batadv0: Adding interface: netdevsim0
[  112.924564][ T7046] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.935547][ T7046] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  112.943947][ T7049] netlink: 'syz.4.394': attribute type 1 has an invalid length.
[  113.006805][ T7053] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  113.626961][ T7076] raw_sendmsg: syz.3.405 forgot to set AF_INET. Fix it!
[  113.717112][ T7078] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.407'.
[  113.977724][ T7084] netlink: 'syz.4.408': attribute type 10 has an invalid length.
[  113.982611][ T7084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.408'.
[  114.096552][ T7078] syzkaller0: entered promiscuous mode
[  114.099363][ T7078] syzkaller0: entered allmulticast mode
[  114.142425][ T7084] batadv0: entered promiscuous mode
[  114.145361][ T7084] batadv0: entered allmulticast mode
[  114.200735][ T7084] bridge0: port 3(batadv0) entered blocking state
[  114.212738][ T7084] bridge0: port 3(batadv0) entered disabled state
[  114.403635][ T7084] bridge0: port 3(batadv0) entered blocking state
[  114.409739][ T7084] bridge0: port 3(batadv0) entered forwarding state
[  114.487002][ T6165] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  114.490251][ T6165] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  114.618861][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.697552][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.708898][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.717653][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.722746][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.726494][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.940882][ T7095] netlink: 'syz.4.413': attribute type 2 has an invalid length.
[  115.941815][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.943502][ T7095] netlink: 'syz.4.413': attribute type 8 has an invalid length.
[  115.943512][ T7095] netlink: 132 bytes leftover after parsing attributes in process `syz.4.413'.
[  116.086922][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.176462][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.255645][   T13] batman_adv: batadv0: Removing interface: netdevsim0
[  116.262186][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.326177][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'.
[  116.447517][ T7089] chnl_net:caif_netlink_parms(): no params data found
[  116.516604][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.421'.
[  116.531583][   T13] dummy0: left allmulticast mode
[  116.534843][   T13] bridge0: port 3(dummy0) entered disabled state
[  116.539689][   T13] bridge_slave_1: left allmulticast mode
[  116.546830][   T13] bridge_slave_1: left promiscuous mode
[  116.549271][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.570932][   T13] bridge_slave_0: left allmulticast mode
[  116.573215][   T13] bridge_slave_0: left promiscuous mode
[  116.575587][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.655985][ T7127] netlink: 7 bytes leftover after parsing attributes in process `syz.3.426'.
[  116.666351][ T7127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.426'.
[  116.760055][ T5887] Bluetooth: hci0: command tx timeout
[  116.806567][ T7133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  118.004399][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.013601][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.019505][   T13] bond0 (unregistering): Released all slaves
[  118.170023][ T7141] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  118.349056][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.355140][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.358403][ T7089] bridge_slave_0: entered allmulticast mode
[  118.362601][ T7089] bridge_slave_0: entered promiscuous mode
[  118.428498][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.438418][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.444974][ T7089] bridge_slave_1: entered allmulticast mode
[  118.454643][ T7089] bridge_slave_1: entered promiscuous mode
[  118.579299][   T13] hsr_slave_0: left promiscuous mode
[  118.586267][   T13] D`: left promiscuous mode
[  118.588820][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.591920][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.595843][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.598781][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.633518][   T13] veth1_macvtap: left promiscuous mode
[  118.635359][   T13] veth0_macvtap: left promiscuous mode
[  118.637400][   T13] veth1_vlan: left promiscuous mode
[  118.639321][   T13] veth0_vlan: left promiscuous mode
[  118.840349][ T5887] Bluetooth: hci0: command tx timeout
[  119.164932][   T13] team0 (unregistering): Port device 26 removed
[  119.205105][   T13] team0 (unregistering): Port device team_slave_0 removed
[  119.613396][ T7169] : renamed from bond_slave_0 (while UP)
[  119.623031][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.652504][ T7173] tap0: tun_chr_ioctl cmd 1074025677
[  119.654956][ T7173] tap0: linktype set to 0
[  119.686564][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.794220][ T7089] team0: Port device team_slave_0 added
[  119.813031][ T7089] team0: Port device team_slave_1 added
[  119.885883][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.888357][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.929902][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.941716][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.944358][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.970211][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.046870][ T7089] hsr_slave_0: entered promiscuous mode
[  120.050956][ T7089] hsr_slave_1: entered promiscuous mode
[  120.628632][ T7089] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  120.640185][ T7089] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  120.648762][ T7089] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  120.669385][ T7089] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  120.734577][ T7220] tap0: tun_chr_ioctl cmd 1074025675
[  120.740773][ T7220] tap0: persist enabled
[  120.751920][ T7220] tap0: tun_chr_ioctl cmd 1074025675
[  120.753911][ T7220] tap0: persist enabled
[  120.823312][ T7089] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.843677][ T7089] 8021q: adding VLAN 0 to HW filter on device team0
[  120.866089][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.868767][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.903467][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.906575][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.920832][ T5887] Bluetooth: hci0: command tx timeout
[  120.946658][ T7089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.959863][ T7089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.172554][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.213226][ T7089] veth0_vlan: entered promiscuous mode
[  121.231579][ T7089] veth1_vlan: entered promiscuous mode
[  121.314021][ T7089] veth0_macvtap: entered promiscuous mode
[  121.329170][ T7089] veth1_macvtap: entered promiscuous mode
[  121.359255][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.381956][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.397382][ T5912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.407330][ T5912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.427429][ T7266] syzkaller0: entered promiscuous mode
[  121.429683][ T7266] syzkaller0: entered allmulticast mode
[  121.438159][ T5912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.441724][ T5912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.578625][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.589273][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.617079][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.628862][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.778828][ T7283] netlink: 'syz.2.468': attribute type 27 has an invalid length.
[  121.788623][ T7283] netlink: 164 bytes leftover after parsing attributes in process `syz.2.468'.
[  122.075974][ T7289] netlink: 763 bytes leftover after parsing attributes in process `syz.4.470'.
[  123.000125][ T5887] Bluetooth: hci0: command tx timeout
[  124.237723][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.482'.
[  124.327733][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'.
[  124.330505][ T7337] netlink: 'syz.3.488': attribute type 1 has an invalid length.
[  124.330525][ T7337] netlink: 'syz.3.488': attribute type 4 has an invalid length.
[  124.330535][ T7337] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.488'.
[  127.643249][ T7373] netlink: 'syz.4.505': attribute type 4 has an invalid length.
[  127.852529][ T7384] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.509'.
[  127.875062][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.510'.
[  129.149406][ T7434] netlink: 'syz.2.532': attribute type 31 has an invalid length.
[  129.200430][ T5887] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  129.224059][ T7440] netlink: 'syz.2.535': attribute type 28 has an invalid length.
[  129.227118][ T7440] netlink: 2 bytes leftover after parsing attributes in process `syz.2.535'.
[  129.634277][ T7470] netlink: 'syz.4.550': attribute type 2 has an invalid length.
[  129.638037][ T7470] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.550'.
[  129.643834][ T7470] nbd: must specify at least one socket
[  129.740665][ T7474] netlink: 'syz.3.552': attribute type 1 has an invalid length.
[  129.828978][ T7482] C: renamed from team_slave_0 (while UP)
[  129.837217][ T7482] netlink: 'syz.3.556': attribute type 8 has an invalid length.
[  129.855021][ T7482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  129.863010][ T7481] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.555'.
[  130.002598][ T7492] netlink: 'syz.4.560': attribute type 21 has an invalid length.
[  130.006213][ T7492] netlink: 156 bytes leftover after parsing attributes in process `syz.4.560'.
[  130.277801][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.568'.
[  130.292315][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.568'.
[  130.298981][ T7511] netlink: 60 bytes leftover after parsing attributes in process `syz.4.568'.
[  130.399992][ T7517] netlink: 64 bytes leftover after parsing attributes in process `syz.4.570'.
[  130.417338][ T7517] sock: sock_timestamping_bind_phc: sock not bind to device
[  130.617977][ T7525] netlink: 'syz.4.574': attribute type 1 has an invalid length.
[  130.681845][ T7528] netlink: 'syz.4.575': attribute type 5 has an invalid length.
[  131.933726][ T7560] netlink: 'syz.3.589': attribute type 10 has an invalid length.
[  132.710636][ T7560] veth1_macvtap: left promiscuous mode
[  132.844997][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.853273][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.948716][ T7583] __nla_validate_parse: 7 callbacks suppressed
[  132.948729][ T7583] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.600'.
[  133.086854][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.197481][ T7593] syzkaller0: entered promiscuous mode
[  133.202536][ T7593] syzkaller0: entered allmulticast mode
[  134.909602][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1069775134 wd_nsec: 1069775207
[  136.760605][ T7631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.620'.
[  136.778288][ T7631] netlink: 60 bytes leftover after parsing attributes in process `syz.4.620'.
[  136.897002][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.623'.
[  137.004635][ T7635] netlink: 'syz.3.622': attribute type 10 has an invalid length.
[  137.054580][ T7635] bond0: (slave bond_slave_0): Releasing backup interface
[  137.539469][ T7677] netlink: 'syz.3.640': attribute type 13 has an invalid length.
[  137.765034][ T7675] Set syz1 is full, maxelem 6117 reached
[  137.891654][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.895579][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.191960][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.230979][ T7677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.565998][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.572870][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.576600][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  138.585793][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.316090][ T7727] : entered promiscuous mode
[  140.619492][   T13] syzkaller0: tun_net_xmit 76
[  140.634484][   T13] syzkaller0: tun_net_xmit 48
[  140.643592][ T7783] syzkaller0: tun_chr_ioctl cmd 1074025677
[  140.646106][ T7783] syzkaller0: Linktype set failed because interface is up
[  140.670541][    T9] syzkaller0: tun_net_xmit 76
[  141.202370][ T7789] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  143.811303][ T7841] netlink: 'syz.2.714': attribute type 10 has an invalid length.
[  143.814882][ T7841] netlink: 2 bytes leftover after parsing attributes in process `syz.2.714'.
[  143.828276][ T7841] bond0: entered promiscuous mode
[  143.831716][ T7841] bond_slave_0: entered promiscuous mode
[  143.836722][ T7841] bond_slave_1: entered promiscuous mode
[  143.863277][ T7841] bridge0: port 3(bond0) entered blocking state
[  143.902335][ T7841] bridge0: port 3(bond0) entered disabled state
[  143.914879][ T7841] bond0: entered allmulticast mode
[  143.917863][ T7841] bond_slave_0: entered allmulticast mode
[  143.938583][ T7841] bond_slave_1: entered allmulticast mode
[  143.983327][ T7841] bridge0: port 3(bond0) entered blocking state
[  143.986924][ T7841] bridge0: port 3(bond0) entered forwarding state
[  144.102828][ T7849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.716'.
[  144.133954][ T7849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.716'.
[  144.910552][ T7855] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.719'.
[  144.962840][ T7857] netlink: 220 bytes leftover after parsing attributes in process `syz.2.720'.
[  145.108855][ T7872] netlink: 'syz.3.726': attribute type 2 has an invalid length.
[  145.213916][ T7879] netlink: 152 bytes leftover after parsing attributes in process `syz.4.731'.
[  145.217957][ T7879] tc_dump_action: action bad kind
[  145.238698][ T7876] netlink: 'syz.3.729': attribute type 10 has an invalid length.
[  145.275574][ T7876] team0: Port device geneve1 added
[  145.279548][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.285160][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.289063][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.299687][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.343172][ T7883] bridge0: port 4(ip6gretap0) entered blocking state
[  145.346828][ T7883] bridge0: port 4(ip6gretap0) entered disabled state
[  145.351496][ T7883] ip6gretap0: entered allmulticast mode
[  145.356457][ T7883] ip6gretap0: entered promiscuous mode
[  145.363552][ T7883] bridge0: port 4(ip6gretap0) entered blocking state
[  145.366791][ T7883] bridge0: port 4(ip6gretap0) entered forwarding state
[  145.423319][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'.
[  146.314045][ T7902] netlink: 92 bytes leftover after parsing attributes in process `syz.3.741'.
[  146.627592][ T7914] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[  146.633113][ T7914] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.743'.
[  147.425332][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'.
[  147.694484][ T7937] tc_dump_action: action bad kind
[  151.152883][ T7968] __nla_validate_parse: 2 callbacks suppressed
[  151.152902][ T7968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.770'.
[  151.296036][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  151.494668][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[  151.528611][ T5887] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  151.740251][ T7981] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  151.886922][ T8002] netlink: 'syz.4.786': attribute type 21 has an invalid length.
[  152.033198][ T7981] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  152.450849][ T8022] netlink: 'syz.4.791': attribute type 10 has an invalid length.
[  152.454493][ T8022] netlink: 55 bytes leftover after parsing attributes in process `syz.4.791'.
[  152.543650][ T8028] delete_channel: no stack
[  153.227541][ T8044] netlink: 830 bytes leftover after parsing attributes in process `syz.3.803'.
[  153.479375][ T8060] netlink: 'syz.2.810': attribute type 29 has an invalid length.
[  153.484107][ T8060] netlink: 'syz.2.810': attribute type 29 has an invalid length.
[  156.696868][ T8111] netlink: 'syz.3.831': attribute type 10 has an invalid length.
[  156.701980][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'.
[  157.226098][ T8111] ipvlan1: entered promiscuous mode
[  157.252036][ T8111] ipvlan1: entered allmulticast mode
[  157.254538][ T8111] veth0_vlan: entered allmulticast mode
[  157.322943][ T8111] bridge0: port 3(ipvlan1) entered blocking state
[  157.364478][ T8111] bridge0: port 3(ipvlan1) entered disabled state
[  157.374938][ T8111] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  157.457871][ T8127] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.837'.
[  157.513546][ T8131] netlink: 'syz.3.837': attribute type 2 has an invalid length.
[  157.713264][ T8137] netlink: 'syz.2.841': attribute type 21 has an invalid length.
[  158.271299][ T8148] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.843'.
[  159.797599][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.801654][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.805470][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.809534][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.813328][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.817173][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.821414][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.825277][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.828865][ T8157] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  159.929575][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.846'.
[  159.933721][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.846'.
[  160.359546][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.859'.
[  160.370003][ T8201] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[  160.408782][ T8204] netlink: 'syz.4.863': attribute type 3 has an invalid length.
[  160.415986][ T8204] netlink: 'syz.4.863': attribute type 3 has an invalid length.
[  160.426183][ T8204] netlink: 130500 bytes leftover after parsing attributes in process `syz.4.863'.
[  160.453911][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'.
[  160.459670][ T8207] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[  160.592762][ T8212] netlink: 'syz.2.866': attribute type 23 has an invalid length.
[  160.665689][ T5887] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  160.876006][ T8229] netlink: 'syz.2.873': attribute type 10 has an invalid length.
[  160.969909][ T8232] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.873'.
[  161.030111][ T8229] team0 (unregistering): Port device team_slave_0 removed
[  161.035569][ T8229] team0 (unregistering): Port device team_slave_1 removed
[  161.705938][ T8251] netlink: 'syz.4.881': attribute type 27 has an invalid length.
[  161.709393][ T8251] netlink: 'syz.4.881': attribute type 1 has an invalid length.
[  161.719655][ T8251] bridge0: port 1(bridge_slave_0) entered learning state
[  161.729421][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'.
[  161.758635][ T8243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'.
[  162.357785][ T8286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.894'.
[  162.410532][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'.
[  163.683213][ T8321] validate_nla: 1 callbacks suppressed
[  163.683250][ T8321] netlink: 'syz.3.902': attribute type 39 has an invalid length.
[  163.848152][ T8327] netlink: 277 bytes leftover after parsing attributes in process `syz.4.911'.
[  164.354723][ T8337] netlink: 'syz.2.916': attribute type 39 has an invalid length.
[  164.861560][ T8340] delete_channel: no stack
[  164.996063][ T8347] netlink: 152 bytes leftover after parsing attributes in process `syz.3.921'.
[  165.080889][ T8353] netlink: 'syz.4.924': attribute type 1 has an invalid length.
[  165.516364][ T8388] bridge0: port 4(ip6gretap0) entered disabled state
[  165.519471][ T8388] bridge0: port 3(batadv0) entered disabled state
[  165.523559][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.527163][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.534007][ T8388] bridge0: entered allmulticast mode
[  165.559189][ T8388] ip6gretap0: left allmulticast mode
[  165.562840][ T8388] ip6gretap0: left promiscuous mode
[  165.565352][ T8388] bridge0: port 4(ip6gretap0) entered disabled state
[  165.574360][ T8388] bridge0: port 3(batadv0) entered disabled state
[  165.581085][ T8388] bridge_slave_1: left allmulticast mode
[  165.583132][ T8388] bridge_slave_1: left promiscuous mode
[  165.585877][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.596546][ T8388] bridge_slave_0: left allmulticast mode
[  165.598858][ T8388] bridge_slave_0: left promiscuous mode
[  165.620731][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.738189][ T8394] netlink: 'syz.3.944': attribute type 4 has an invalid length.
[  166.780064][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  166.899204][ T8421] netlink: 'syz.4.953': attribute type 9 has an invalid length.
[  167.040519][ T8421] netlink: 211924 bytes leftover after parsing attributes in process `syz.4.953'.
[  167.725624][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'.
[  168.773759][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'.
[  168.934174][ T8467] netlink: 'syz.3.972': attribute type 21 has an invalid length.
[  169.068856][ T8476] netlink: 'syz.4.976': attribute type 3 has an invalid length.
[  169.075939][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'.
[  169.079694][ T8476] netlink: 'syz.4.976': attribute type 3 has an invalid length.
[  169.083326][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'.
[  169.089757][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.976'.
[  169.308850][ T8491] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  169.315928][ T8491] netlink: 'syz.2.984': attribute type 29 has an invalid length.
[  169.436275][ T8497] netlink: 'syz.3.987': attribute type 4 has an invalid length.
[  170.125025][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'.
[  170.128786][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'.
[  170.132760][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'.
[  170.139381][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.996'.
[  171.394030][ T8588] netlink: 'syz.4.1026': attribute type 3 has an invalid length.
[  171.499145][ T8594] dvmrp0: tun_chr_ioctl cmd 2148553947
[  171.660676][ T8609] netlink: 'syz.3.1035': attribute type 25 has an invalid length.
[  171.664547][ T8609] netlink: 'syz.3.1035': attribute type 28 has an invalid length.
[  171.798908][ T8613] net_ratelimit: 55 callbacks suppressed
[  171.798928][ T8613] netlink: set zone limit has 4 unknown bytes
[  172.019113][ T8625] syzkaller0: entered promiscuous mode
[  172.021811][ T8625] syzkaller0: entered allmulticast mode
[  172.164374][ T8626] __nla_validate_parse: 5 callbacks suppressed
[  172.164394][ T8626] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1041'.
[  172.175219][ T8626] : entered promiscuous mode
[  172.177574][ T8626] bond_slave_1: entered promiscuous mode
[  172.920797][ T8671] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1064'.
[  173.256043][ T8685] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  173.942854][ T8700] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[  174.474436][ T8700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.566833][ T8700] batadv0: entered promiscuous mode
[  174.575201][ T8700] batadv0: entered allmulticast mode
[  174.609327][ T8700] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  174.766635][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1080'.
[  174.822560][ T5912] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  174.825758][ T5912] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  174.867264][ T8719] sit0: entered promiscuous mode
[  174.885502][ T8725] : renamed from dummy0 (while UP)
[  174.894888][ T8725] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1086'.
[  175.065658][ T5887] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  176.359469][ T8767] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  176.478668][ T8777] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1109'.
[  176.490254][ T8777] : left promiscuous mode
[  176.492233][ T8777] bond_slave_1: left promiscuous mode
[  176.853995][ T8777] bond0 (unregistering): (slave c1): Releasing backup interface
[  176.863838][ T8777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.876614][ T8777] bond0 (unregistering): Released all slaves
[  177.260843][ T8805] openvswitch: netlink: IP tunnel TTL not specified.
[  177.329328][ T8813] rdma_rxe: rxe_newlink: failed to add erspan0
[  177.753170][ T8815] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  178.164599][ T8815] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  178.167461][ T8815] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  178.171660][ T8815] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  178.355008][ T8835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.037297][ T8841] delete_channel: no stack
[  179.274244][ T8852] netlink: 'syz.3.1143': attribute type 19 has an invalid length.
[  179.394344][ T8860] netlink: 'syz.2.1146': attribute type 21 has an invalid length.
[  179.795859][ T8866] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  179.975581][ T5238] Bluetooth: hci1: ISO packet too small
[  180.048651][ T8882] : renamed from team_slave_1 (while UP)
[  180.184474][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'.
[  180.783428][ T8914] syzkaller0: entered promiscuous mode
[  180.785452][ T8914] syzkaller0: entered allmulticast mode
[  181.081058][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'.
[  181.119501][ T8932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.160840][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  181.347343][ T8940] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1180'.
[  181.884699][   T26] wlan1: Trigger new scan to find an IBSS to join
[  182.410010][ T8937] netlink: 'syz.4.1180': attribute type 29 has an invalid length.
[  182.621914][ T8949] @: renamed from bond_slave_0
[  182.687606][ T8952] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  182.712075][ T8949] netlink: 'syz.3.1184': attribute type 21 has an invalid length.
[  182.717295][ T8949] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1184'.
[  182.722365][ T8949] netlink: 'syz.3.1184': attribute type 4 has an invalid length.
[  182.901454][ T8958] netlink: 'syz.4.1188': attribute type 33 has an invalid length.
[  182.904460][ T8958] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1188'.
[  182.957983][ T8960] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1189'.
[  183.572909][ T8976] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1195'.
[  183.711195][ T8983] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1198'.
[  183.974975][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1202'.
[  184.448945][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'.
[  184.487720][ T9017] netlink: 'syz.4.1213': attribute type 21 has an invalid length.
[  184.659105][ T9035] netlink: 'syz.2.1222': attribute type 6 has an invalid length.
[  184.841304][   T27] wlan1: Trigger new scan to find an IBSS to join
[  185.237015][ T9053] __nla_validate_parse: 5 callbacks suppressed
[  185.237029][ T9053] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1230'.
[  185.279286][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1230'.
[  185.333123][ T9055] netlink: 'syz.4.1231': attribute type 11 has an invalid length.
[  185.517011][ T9066] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1236'.
[  186.655711][ T9098] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1251'.
[  186.754780][ T9106] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1255'.
[  186.771401][ T9106] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  186.774958][ T9106] openvswitch: netlink: Message has 2 unknown bytes.
[  187.022519][ T9116] netlink: 'syz.4.1260': attribute type 4 has an invalid length.
[  187.024955][ T9116] netlink: 'syz.4.1260': attribute type 2 has an invalid length.
[  187.027615][ T9116] netlink: 199408 bytes leftover after parsing attributes in process `syz.4.1260'.
[  187.882659][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  187.972412][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'.
[  188.308488][ T9152] netlink: 'syz.4.1276': attribute type 10 has an invalid length.
[  188.798486][   T29] wlan1: Creating new IBSS network, BSSID ae:07:99:b6:72:0f
[  190.243091][ T9188] netlink: 'syz.4.1291': attribute type 1 has an invalid length.
[  191.132748][ T9213] macvtap0: refused to change device tx_queue_len
[  192.223515][ T9255] netlink: 'syz.2.1323': attribute type 3 has an invalid length.
[  193.498137][ T9276] netlink: 'syz.2.1331': attribute type 6 has an invalid length.
[  193.607484][ T9278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1332'.
[  194.283224][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.285370][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.429576][ T9286] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.1335'.
[  194.434981][ T9286] openvswitch: netlink: Message has 6 unknown bytes.
[  194.516052][ T9294] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  194.525877][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'.
[  195.838182][ T9301] bridge0: port 3(bond0) entered disabled state
[  195.840956][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.844144][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.927921][ T5887] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  195.928260][ T5887] Bluetooth: hci1: connection err: -111
[  196.172076][ T9307] option changes via remount are deprecated (pid=9306 comm=syz.4.1344)
[  197.413826][ T9329] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1355'.
[  197.417159][ T9329] netlink: zone id is out of range
[  197.419718][ T9329] netlink: zone id is out of range
[  197.444847][ T9330] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1354'.
[  197.450750][ T9329] netlink: zone id is out of range
[  197.452870][ T9329] netlink: zone id is out of range
[  197.454939][ T9329] netlink: zone id is out of range
[  197.457042][ T9329] netlink: zone id is out of range
[  197.458970][ T9329] netlink: zone id is out of range
[  197.466618][ T9329] netlink: zone id is out of range
[  197.471258][ T9329] netlink: zone id is out of range
[  197.620956][ T9335] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  197.624043][ T9335] netlink: 'syz.2.1357': attribute type 2 has an invalid length.
[  197.963540][ T9340] syzkaller0: entered promiscuous mode
[  197.965950][ T9340] syzkaller0: entered allmulticast mode
[  198.133908][ T9343] netlink: 'syz.4.1360': attribute type 29 has an invalid length.
[  198.634435][ T9352] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1363'.
[  200.611603][ T9355] netlink: 'syz.4.1364': attribute type 3 has an invalid length.
[  200.659233][ T9357] net_ratelimit: 77 callbacks suppressed
[  200.659251][ T9357] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  200.707960][ T9359] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1366'.
[  200.848038][ T9364] netlink: 'syz.2.1368': attribute type 1 has an invalid length.
[  200.853413][ T9364] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1368'.
[  201.248550][ T9376] C: renamed from team_slave_0
[  201.505516][ T9376] netlink: 'syz.2.1374': attribute type 3 has an invalid length.
[  201.508861][ T9376] netlink: 'syz.2.1374': attribute type 1 has an invalid length.
[  201.521165][ T9376] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1374'.
[  201.533609][ T9376] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  201.576581][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.593983][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.598722][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.604167][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.607972][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.069437][ T5912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.093152][ T9377] chnl_net:caif_netlink_parms(): no params data found
[  203.066267][ T5912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.185722][ T5912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.196841][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.203753][ T9377] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.207042][ T9377] bridge_slave_0: entered allmulticast mode
[  203.221872][ T9377] bridge_slave_0: entered promiscuous mode
[  203.230930][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.233826][ T9377] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.237226][ T9377] bridge_slave_1: entered allmulticast mode
[  203.244802][ T9377] bridge_slave_1: entered promiscuous mode
[  203.271164][ T5912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.325765][ T9377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.334573][ T9377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.398675][ T9377] team0: Port device team_slave_0 added
[  203.409396][ T9377] team0: Port device team_slave_1 added
[  203.454604][ T5887] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  203.461714][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.464612][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.477253][ T9377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.503672][ T9377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.506983][ T9377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.525473][ T9377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.645879][ T5887] Bluetooth: hci3: command tx timeout
[  203.696044][ T9377] hsr_slave_0: entered promiscuous mode
[  203.699722][ T9377] hsr_slave_1: entered promiscuous mode
[  203.704497][ T9377] debugfs: 'hsr0' already exists in 'hsr'
[  203.706961][ T9377] Cannot create hsr debugfs directory
[  204.001864][ T5912] bridge_slave_1: left allmulticast mode
[  204.004266][ T5912] bridge_slave_1: left promiscuous mode
[  204.006985][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.074761][ T5912] bridge_slave_0: left allmulticast mode
[  204.077644][ T5912] bridge_slave_0: left promiscuous mode
[  204.081735][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.913569][ T5912] team0: Port device geneve1 removed
[  205.116847][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'.
[  205.147641][ T9420] netlink: zone id is out of range
[  205.182440][ T9427] netlink: del zone limit has 4 unknown bytes
[  205.218257][ T9420] netlink: zone id is out of range
[  205.221967][ T9420] netlink: zone id is out of range
[  205.283879][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.290421][ T5912] bond0 (unregistering): Released all slaves
[  205.338313][ T9429] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  205.505600][ T9420] netlink: set zone limit has 4 unknown bytes
[  205.720434][ T5887] Bluetooth: hci3: command tx timeout
[  205.722670][ T9377] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  205.765542][ T9377] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  205.817880][ T9377] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  205.829154][ T9377] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  205.918511][ T9462] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  206.019409][ T5912] hsr_slave_0: left promiscuous mode
[  206.022574][ T5912] hsr_slave_1: left promiscuous mode
[  206.024843][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.029254][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.238273][ T5912] team0 (unregistering): Port device team_slave_1 removed
[  207.299520][ T5912] team0 (unregistering): Port device C removed
[  207.303579][ T9485] xt_socket: unknown flags 0x6
[  207.800202][ T5887] Bluetooth: hci3: command tx timeout
[  207.848950][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.864943][ T9377] 8021q: adding VLAN 0 to HW filter on device team0
[  207.908862][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.912163][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.926160][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.929150][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.997387][ T9377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.003038][ T9377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.330714][ T9377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.439062][ T5912] ------------[ cut here ]------------
[  208.441911][ T5912] WARNING: CPU: 0 PID: 5912 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  208.445932][ T5912] Modules linked in:
[  208.447905][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  208.453320][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.457699][ T5912] Workqueue: netns cleanup_net
[  208.460110][ T5912] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  208.462584][ T5912] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 0b 7b 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 35 e1 f7 e8 c4 83 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 83 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  208.471082][ T5912] RSP: 0000:ffffc90003c77898 EFLAGS: 00010293
[  208.473902][ T5912] RAX: ffffffff8a233d9c RBX: ffff88802b1ba440 RCX: ffff888109c09cc0
[  208.477393][ T5912] RDX: 0000000000000000 RSI: ffffffff8dbaa117 RDI: ffff888109c09cc0
[  208.480998][ T5912] RBP: ffffc90003c779b0 R08: ffffffff8fa3b237 R09: 1ffffffff1f47646
[  208.484585][ T5912] R10: dffffc0000000000 R11: fffffbfff1f47647 R12: ffffffff8f633a40
[  208.488215][ T5912] R13: 1ffff9200078ef40 R14: ffff88802b1bb8c0 R15: dffffc0000000000
[  208.491793][ T5912] FS:  0000000000000000(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  208.495630][ T5912] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.498683][ T5912] CR2: 0000001b3231fff8 CR3: 00000000235b0000 CR4: 00000000000006f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  208.502540][ T5912] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  208.506086][ T5912] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  208.509426][ T5912] Call Trace:
[  208.511100][ T5912]  <TASK>
[  208.512524][ T5912]  xfrm_net_exit+0x2d/0x70
[  208.514704][ T5912]  ops_undo_list+0x49a/0x990
[  208.516905][ T5912]  ? __pfx_ops_undo_list+0x10/0x10
[  208.519390][ T5912]  ? do_raw_spin_unlock+0x4d/0x240
[  208.522710][ T5912]  cleanup_net+0x4c5/0x800
[  208.524939][ T5912]  ? __pfx_cleanup_net+0x10/0x10
[  208.527205][ T5912]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.529513][ T5912]  ? process_scheduled_works+0x9ef/0x17b0
[  208.532396][ T5912]  ? process_scheduled_works+0x9ef/0x17b0
[  208.535594][ T5912]  process_scheduled_works+0xae1/0x17b0
[  208.538245][ T5912]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.541592][ T5912]  worker_thread+0x8a0/0xda0
[  208.543971][ T5912]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.547117][ T5912]  ? __kthread_parkme+0x7b/0x200
[  208.549455][ T5912]  kthread+0x711/0x8a0
[  208.551468][ T5912]  ? __pfx_worker_thread+0x10/0x10
[  208.553700][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.555901][ T5912]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.558216][ T5912]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.560726][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.562780][ T5912]  ret_from_fork+0x439/0x7d0
[  208.564772][ T5912]  ? __pfx_ret_from_fork+0x10/0x10
[  208.566914][ T5912]  ? __switch_to_asm+0x39/0x70
[  208.568917][ T5912]  ? __switch_to_asm+0x33/0x70
[  208.571184][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.573289][ T5912]  ret_from_fork_asm+0x1a/0x30
[  208.575161][ T5912]  </TASK>
[  208.576247][ T5912] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  208.578769][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  208.581968][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.585989][ T5912] Workqueue: netns cleanup_net
[  208.587823][ T5912] Call Trace:
[  208.589182][ T5912]  <TASK>
[  208.590392][ T5912]  dump_stack_lvl+0x99/0x250
[  208.592390][ T5912]  ? __asan_memcpy+0x40/0x70
[  208.594455][ T5912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.596688][ T5912]  ? __pfx__printk+0x10/0x10
[  208.598741][ T5912]  vpanic+0x281/0x750
[  208.600511][ T5912]  ? __pfx__printk+0x10/0x10
[  208.602704][ T5912]  ? __pfx_vpanic+0x10/0x10
[  208.605171][ T5912]  ? is_bpf_text_address+0x292/0x2b0
[  208.607674][ T5912]  panic+0xb9/0xc0
[  208.609320][ T5912]  ? __pfx_panic+0x10/0x10
[  208.611181][ T5912]  __warn+0x31b/0x4b0
[  208.612853][ T5912]  ? xfrm_state_fini+0x26d/0x2f0
[  208.614876][ T5912]  ? xfrm_state_fini+0x26d/0x2f0
[  208.617043][ T5912]  report_bug+0x2be/0x4f0
[  208.619078][ T5912]  ? xfrm_state_fini+0x26d/0x2f0
[  208.621386][ T5912]  ? xfrm_state_fini+0x26d/0x2f0
[  208.623602][ T5912]  ? xfrm_state_fini+0x26f/0x2f0
[  208.625794][ T5912]  handle_bug+0x84/0x160
[  208.627640][ T5912]  exc_invalid_op+0x1a/0x50
[  208.629549][ T5912]  asm_exc_invalid_op+0x1a/0x20
[  208.631588][ T5912] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  208.634067][ T5912] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 0b 7b 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 35 e1 f7 e8 c4 83 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 83 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  208.642170][ T5912] RSP: 0000:ffffc90003c77898 EFLAGS: 00010293
[  208.644675][ T5912] RAX: ffffffff8a233d9c RBX: ffff88802b1ba440 RCX: ffff888109c09cc0
[  208.648012][ T5912] RDX: 0000000000000000 RSI: ffffffff8dbaa117 RDI: ffff888109c09cc0
[  208.651219][ T5912] RBP: ffffc90003c779b0 R08: ffffffff8fa3b237 R09: 1ffffffff1f47646
[  208.654530][ T5912] R10: dffffc0000000000 R11: fffffbfff1f47647 R12: ffffffff8f633a40
[  208.657814][ T5912] R13: 1ffff9200078ef40 R14: ffff88802b1bb8c0 R15: dffffc0000000000
[  208.661071][ T5912]  ? xfrm_state_fini+0x26c/0x2f0
[  208.663169][ T5912]  ? xfrm_state_fini+0x26c/0x2f0
[  208.665284][ T5912]  xfrm_net_exit+0x2d/0x70
[  208.667173][ T5912]  ops_undo_list+0x49a/0x990
[  208.669038][ T5912]  ? __pfx_ops_undo_list+0x10/0x10
[  208.671195][ T5912]  ? do_raw_spin_unlock+0x4d/0x240
[  208.673433][ T5912]  cleanup_net+0x4c5/0x800
[  208.675422][ T5912]  ? __pfx_cleanup_net+0x10/0x10
[  208.677647][ T5912]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.679893][ T5912]  ? process_scheduled_works+0x9ef/0x17b0
[  208.682260][ T5912]  ? process_scheduled_works+0x9ef/0x17b0
[  208.684572][ T5912]  process_scheduled_works+0xae1/0x17b0
[  208.686890][ T5912]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.689545][ T5912]  worker_thread+0x8a0/0xda0
[  208.691630][ T5912]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.694396][ T5912]  ? __kthread_parkme+0x7b/0x200
[  208.696587][ T5912]  kthread+0x711/0x8a0
[  208.698367][ T5912]  ? __pfx_worker_thread+0x10/0x10
[  208.700495][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.702338][ T5912]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.704581][ T5912]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.706756][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.708847][ T5912]  ret_from_fork+0x439/0x7d0
[  208.710835][ T5912]  ? __pfx_ret_from_fork+0x10/0x10
[  208.713037][ T5912]  ? __switch_to_asm+0x39/0x70
[  208.715038][ T5912]  ? __switch_to_asm+0x33/0x70
[  208.717059][ T5912]  ? __pfx_kthread+0x10/0x10
[  208.719123][ T5912]  ret_from_fork_asm+0x1a/0x30
[  208.721243][ T5912]  </TASK>
[  208.723430][ T5912] Kernel Offset: disabled
[  208.725386][ T5912] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:01:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003c77030
R8 =ffff888107fa0237 R9 =1ffff11020ff4046 R10=dffffc0000000000 R11=ffffffff855018c0
R12=dffffc0000000000 R13=ffffffff99b038e7 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550193c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3231fff8 CR3=00000000235b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8b771776 ffffffff8b771776 XMM01=ffffffff8b771776 ffffffff8b771776
XMM02=90ff0000000008b7 ffffffff8b771776 XMM03=000000000000a1bf 00000000fff08a7b
XMM04=0000231800000008 000002b7fffffff0 XMM05=0000040700000000 0000a4bffffffff8
XMM06=0000010700000000 0000a1bf00000000 XMM07=fff08a7b90ff0000 000008b700000000
XMM08=0000000000000000 00007fcb44e12ee7 XMM09=0000000000000000 00007fcb44e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8881006b5640 RCX=e95f1285376f5600 RDX=0000000000000000
RSI=ffffffff8dbaa117 RDI=ffffffff8be34280 RBP=ffffc900001b77e0 RSP=ffffc900001b76e8
R8 =ffffffff8fa3b237 R9 =1ffffffff1f47646 R10=dffffc0000000000 R11=fffffbfff1f47647
R12=ffff8881006b6158 R13=ffff88810e0b2300 R14=ffff8881006b6130 R15=0000000000000001
RIP=ffffffff8b7af185 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa425d2dba8 CR3=000000011e61c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
