last executing test programs:

3m24.978773556s ago: executing program 2 (id=111):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x100}, 0x11efa, 0x4, 0x9a, 0xb, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004000)

3m23.702723152s ago: executing program 2 (id=117):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000680)=@newtaction={0x5c, 0x31, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_gact={0x44, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "1a3ccf0dfcb172b025d7121387846d8941"}, {0xc, 0x3}, {0xc}}}]}]}, 0x5c}}, 0x0)

3m23.554134641s ago: executing program 2 (id=121):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

3m23.07838943s ago: executing program 2 (id=129):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c0001800600060086dd"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
write$cgroup_int(r4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000200))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x2, 0x2, 0x73)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33)

3m22.765636678s ago: executing program 2 (id=135):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x7, r0, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000808500000022000000180100002020702500000b00000020207b0af8ff00000000bfa10800000007decceb57010000f8fffff9b702000008950000b70300000000000085000020080000009580e82feb03b615f7606a34e9fb34819833e619774fc42c086138c9fe163b100657e17f84116e9d0b3cdb428d01fe8bafa94ad379be6b60fd8ac9f401d7b31475f49b5d5f9fe92e31f1f7c0e2bd550b4412a547fb90c544ea225d86a766342a08657813c4068f5742ea6e"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x80000000000c, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

3m22.485976379s ago: executing program 2 (id=136):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000006d000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m22.297762167s ago: executing program 32 (id=136):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000006d000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m49.834303525s ago: executing program 3 (id=411):
r0 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000100)={r0})

2m49.834087386s ago: executing program 3 (id=412):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x6, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x981}, 0x94)

2m49.770710605s ago: executing program 3 (id=413):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0xa100, 0xc8, 0x80000003, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810003"], 0xfdef)

2m49.770364105s ago: executing program 3 (id=414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x84)

2m49.555371848s ago: executing program 3 (id=417):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

2m49.483389299s ago: executing program 3 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)

2m34.40209368s ago: executing program 33 (id=419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)

2m21.596430747s ago: executing program 0 (id=684):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m18.4277807s ago: executing program 0 (id=685):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x14)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4084, 0xff4}, {&(0x7f0000002080)=""/4078, 0xfee}, {&(0x7f0000001040)=""/4128, 0x1020}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000340)=""/171, 0xab}], 0x6}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit]}, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})

2m17.37685368s ago: executing program 0 (id=687):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008110000b703000002000000850000001700000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m17.08715539s ago: executing program 0 (id=692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26)
mkdir(0x0, 0x90)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a\x00'], 0x10)
close(0x3)
close(r1)

2m16.838865436s ago: executing program 0 (id=694):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x100000001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m15.010857628s ago: executing program 0 (id=705):
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)

2m0.01005811s ago: executing program 34 (id=705):
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)

4.376001433s ago: executing program 4 (id=2214):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
socket$kcm(0x11, 0x200000000000003, 0x300)

4.309473089s ago: executing program 4 (id=2216):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000080020017000000000002"], 0x60}, 0x1, 0x7}, 0x0)

4.308924273s ago: executing program 4 (id=2218):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0)

4.249192957s ago: executing program 4 (id=2219):
r0 = socket$kcm(0x2, 0x5, 0x84)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94)
r1 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, 0x0, 0x24000010)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000e00)="be", 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000000), 0x8)

3.389507524s ago: executing program 4 (id=2237):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f"], 0xfdef)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x2d}, {0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x8202)

3.389019356s ago: executing program 1 (id=2238):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000c06010400000000000000000200000005000100070000000900020073797a300000000005000100070000000900020073797a320000000005000100070000000900020073797a31000000003326b02ae24a7eccf6b39216f2f8f6431c9d8e77a73c9136fe941b45f7e3ecdc"], 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.38863377s ago: executing program 5 (id=2239):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7}, 0x22c0, 0x8000000006, 0x0, 0x0, 0x1ff, 0x8110, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

3.300756472s ago: executing program 5 (id=2240):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)

3.250414019s ago: executing program 5 (id=2241):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

3.249901126s ago: executing program 5 (id=2242):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffd13, 0x0, 0x1b}, 0x4000004)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044090}, 0x20000800)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)={0x14, 0x48, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x2000c800)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000024000480200001800d00010073796e70726f7879"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

2.641152129s ago: executing program 1 (id=2243):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4001040)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4040)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.909314466s ago: executing program 1 (id=2244):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000000)=r2, 0xff7b)

1.909090416s ago: executing program 1 (id=2245):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.607077674s ago: executing program 1 (id=2246):
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, 0x0, 0xe1d8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20)

234.244019ms ago: executing program 5 (id=2247):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x10000)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004891}, 0x8000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0)
close(r2)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random})

232.333831ms ago: executing program 1 (id=2248):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

142.389137ms ago: executing program 4 (id=2249):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a", 0x3b}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xfdef)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xffbf)

0s ago: executing program 5 (id=2250):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x9, 0x0, 0xffffffffffffffd, 0xfffffffffffffffe}, {0x0, 0x4}, {0x0, 0x2000}, 0x0, 0x0, 0xa, 0x1, 0x6, 0x30}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20059' (ED25519) to the list of known hosts.
syzkaller login: [   62.457078][ T5842] cgroup: Unknown subsys name 'net'
[   62.571778][ T5842] cgroup: Unknown subsys name 'cpuset'
[   62.576055][ T5842] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.299044][ T5842] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.505300][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.542435][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.545167][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.617692][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.623413][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.921792][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   69.018548][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.021281][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.023540][ T5888] bridge_slave_0: entered allmulticast mode
[   69.026300][ T5888] bridge_slave_0: entered promiscuous mode
[   69.030505][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.032791][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.035348][ T5888] bridge_slave_1: entered allmulticast mode
[   69.038463][ T5888] bridge_slave_1: entered promiscuous mode
[   69.072587][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.077072][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.112981][ T5888] team0: Port device team_slave_0 added
[   69.116410][ T5888] team0: Port device team_slave_1 added
[   69.133997][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.136293][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.145099][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.150349][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.152924][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.161030][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.207235][ T5888] hsr_slave_0: entered promiscuous mode
[   69.209640][ T5888] hsr_slave_1: entered promiscuous mode
[   69.333930][ T5888] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.340771][ T5888] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.345605][ T5888] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.354353][ T5888] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.375059][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.377551][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.380525][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.382946][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.421788][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.431797][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.435026][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.443559][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   69.452077][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.454322][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.460727][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.462954][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.561109][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.587190][ T5888] veth0_vlan: entered promiscuous mode
[   69.593179][ T5888] veth1_vlan: entered promiscuous mode
[   69.613192][ T5888] veth0_macvtap: entered promiscuous mode
[   69.617636][ T5888] veth1_macvtap: entered promiscuous mode
[   69.627247][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.634945][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.643080][ T5897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.646944][ T5712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.655003][ T5712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.660376][ T5712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.442128][ T5917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.446357][ T5917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.450359][ T5917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.454679][ T5917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.457911][ T5917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.506146][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.515784][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.520152][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.522912][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.523666][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.530878][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.571232][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.574846][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.578449][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.582938][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.586124][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.620835][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.684109][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.913413][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   71.031641][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   71.107918][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.112827][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.115817][ T5918] bridge_slave_0: entered allmulticast mode
[   71.120179][ T5918] bridge_slave_0: entered promiscuous mode
[   71.142456][ T5920] chnl_net:caif_netlink_parms(): no params data found
[   71.156445][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.159658][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.162701][ T5918] bridge_slave_1: entered allmulticast mode
[   71.166074][ T5918] bridge_slave_1: entered promiscuous mode
[   71.274041][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.276830][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.280578][ T5915] bridge_slave_0: entered allmulticast mode
[   71.283941][ T5915] bridge_slave_0: entered promiscuous mode
[   71.303567][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.311648][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.325674][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.328378][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.331874][ T5915] bridge_slave_1: entered allmulticast mode
[   71.335047][ T5915] bridge_slave_1: entered promiscuous mode
[   71.398507][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.402630][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.405179][ T5920] bridge_slave_0: entered allmulticast mode
[   71.409150][ T5920] bridge_slave_0: entered promiscuous mode
[   71.426161][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.428961][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.446932][ T5918] team0: Port device team_slave_0 added
[   71.451402][ T5918] team0: Port device team_slave_1 added
[   71.463962][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.467027][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.470160][ T5920] bridge_slave_1: entered allmulticast mode
[   71.473353][ T5920] bridge_slave_1: entered promiscuous mode
[   71.480795][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.500854][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.503345][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.512190][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.546379][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.550123][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.552763][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.562929][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.576774][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.614182][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.619931][ T5915] team0: Port device team_slave_0 added
[   71.625279][ T5915] team0: Port device team_slave_1 added
[   71.694236][ T5920] team0: Port device team_slave_0 added
[   71.698501][ T5920] team0: Port device team_slave_1 added
[   71.713388][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.715580][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.724666][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.731513][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.733790][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.744129][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.755296][ T5918] hsr_slave_0: entered promiscuous mode
[   71.758469][ T5918] hsr_slave_1: entered promiscuous mode
[   71.763410][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[   71.765914][ T5918] Cannot create hsr debugfs directory
[   71.808246][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.826176][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.831486][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.841886][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.880874][ T5915] hsr_slave_0: entered promiscuous mode
[   71.884728][ T5915] hsr_slave_1: entered promiscuous mode
[   71.887438][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   71.890257][ T5915] Cannot create hsr debugfs directory
[   71.892614][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.895379][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.904716][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.024654][ T5920] hsr_slave_0: entered promiscuous mode
[   72.027788][ T5920] hsr_slave_1: entered promiscuous mode
[   72.031208][ T5920] debugfs: 'hsr0' already exists in 'hsr'
[   72.033595][ T5920] Cannot create hsr debugfs directory
[   72.244665][ T5918] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.253778][ T5918] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.261804][ T5918] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.269245][ T5918] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.330664][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.338337][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.349629][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.356501][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.452402][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.482862][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   72.504528][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.507483][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.512670][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.515322][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.535291][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.540188][   T55] Bluetooth: hci0: command tx timeout
[   72.595973][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   72.605049][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.607821][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.620010][ T5917] Bluetooth: hci1: command tx timeout
[   72.622233][   T55] Bluetooth: hci2: command tx timeout
[   72.627025][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.629987][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.802746][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.856990][ T5897] bridge_slave_1: left allmulticast mode
[   72.867536][ T5897] bridge_slave_1: left promiscuous mode
[   72.871387][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.880718][ T5897] bridge_slave_0: left allmulticast mode
[   72.882814][ T5897] bridge_slave_0: left promiscuous mode
[   72.885277][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.250324][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.255873][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.262353][ T5897] bond0 (unregistering): Released all slaves
[   73.311686][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.402851][ T5897] hsr_slave_0: left promiscuous mode
[   73.405510][ T5897] hsr_slave_1: left promiscuous mode
[   73.410545][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.413063][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.416751][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.420554][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.434675][ T5897] veth1_macvtap: left promiscuous mode
[   73.437486][ T5897] veth0_macvtap: left promiscuous mode
[   73.444103][ T5897] veth1_vlan: left promiscuous mode
[   73.446424][ T5897] veth0_vlan: left promiscuous mode
[   73.856842][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   73.902568][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   74.371091][ T5918] veth0_vlan: entered promiscuous mode
[   74.403526][ T5915] veth0_vlan: entered promiscuous mode
[   74.415325][ T5918] veth1_vlan: entered promiscuous mode
[   74.452871][ T5915] veth1_vlan: entered promiscuous mode
[   74.615445][ T5915] veth0_macvtap: entered promiscuous mode
[   74.620502][   T55] Bluetooth: hci0: command tx timeout
[   74.642060][ T5918] veth0_macvtap: entered promiscuous mode
[   74.649956][ T5918] veth1_macvtap: entered promiscuous mode
[   74.656281][ T5915] veth1_macvtap: entered promiscuous mode
[   74.665789][ T5920] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.691286][ T5920] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.703832][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.711797][   T55] Bluetooth: hci2: command tx timeout
[   74.714279][   T55] Bluetooth: hci1: command tx timeout
[   74.723080][ T5920] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.740125][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.745125][ T5920] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.775500][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.780928][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.791765][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.797262][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.804317][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.812109][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.889586][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.936981][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.943182][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.947218][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.045757][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.054618][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.093194][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.098914][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.102213][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.188778][ T5920] 8021q: adding VLAN 0 to HW filter on device team0
[   75.195147][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.198419][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.213785][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.216470][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.242184][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.245399][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.253987][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.256894][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.354407][ T5920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.583481][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.645971][ T5920] veth0_vlan: entered promiscuous mode
[   75.664777][ T5920] veth1_vlan: entered promiscuous mode
[   75.706048][ T5920] veth0_macvtap: entered promiscuous mode
[   75.711301][ T5920] veth1_macvtap: entered promiscuous mode
[   75.724442][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.751678][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.770713][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.774172][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.790067][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.805040][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.808647][    C0] hrtimer: interrupt took 87021 ns
[   75.879734][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.883112][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.976061][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.985895][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.112605][ T6025] netlink: 'syz.1.30': attribute type 21 has an invalid length.
[   76.116503][ T6025] netlink: 168 bytes leftover after parsing attributes in process `syz.1.30'.
[   76.701943][ T5917] Bluetooth: hci0: command tx timeout
[   76.781300][ T5917] Bluetooth: hci1: command tx timeout
[   76.784420][   T55] Bluetooth: hci2: command tx timeout
[   77.131312][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'.
[   77.709542][ T6082] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.178099][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.230198][ T6108] sctp: [Deprecated]: syz.1.62 (pid 6108) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.230198][ T6108] Use struct sctp_sack_info instead
[   78.273175][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.2.64'.
[   78.495837][ T6114] netlink: 'syz.2.66': attribute type 16 has an invalid length.
[   78.499905][ T6114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.66'.
[   78.522441][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.643765][   T10] cfg80211: failed to load regulatory.db
[   78.687997][ T6119] netlink: 'syz.0.68': attribute type 22 has an invalid length.
[   78.720873][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[   78.779861][ T5917] Bluetooth: hci0: command tx timeout
[   78.871417][ T5917] Bluetooth: hci1: command tx timeout
[   78.873764][ T5917] Bluetooth: hci2: command tx timeout
[   79.065962][ T6133] netlink: 'syz.1.75': attribute type 4 has an invalid length.
[   79.074726][ T6133] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.75'.
[   79.455109][ T6140] netlink: 'syz.1.78': attribute type 8 has an invalid length.
[   79.470593][ T6140] netlink: 'syz.1.78': attribute type 3 has an invalid length.
[   79.473701][ T6140] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.78'.
[   79.520883][ T6144] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   79.703116][ T6156] netlink: 268 bytes leftover after parsing attributes in process `syz.1.85'.
[   79.707091][ T6156] unsupported nla_type 65024
[   79.748354][ T6158] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.757889][ T6158] : renamed from gre0 (while UP)
[   80.633714][ T6158] syz.1.87 (6158) used greatest stack depth: 19256 bytes left
[   81.132739][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   81.660300][ T6195] 0: renamed from bond_slave_1 (while UP)
[   81.710263][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'.
[   83.613465][ T6241] =======================================================
[   83.613465][ T6241] WARNING: The mand mount option has been deprecated and
[   83.613465][ T6241]          and is ignored by this kernel. Remove the mand
[   83.613465][ T6241]          option from the mount to silence this warning.
[   83.613465][ T6241] =======================================================
[   83.904270][ T6250] syz.1.128 uses obsolete (PF_INET,SOCK_PACKET)
[   84.037955][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'.
[   84.071695][ T6258] : renamed from vlan0 (while UP)
[   84.126251][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'.
[   84.137453][ T6264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.133'.
[   84.535520][ T5897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.632841][ T5897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.725603][ T5897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.783843][ T5897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.915661][ T5897] bridge_slave_1: left allmulticast mode
[   84.922534][ T5897] bridge_slave_1: left promiscuous mode
[   84.928067][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.936535][ T5897] bridge_slave_0: left promiscuous mode
[   84.941075][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.453270][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.460967][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.466026][ T5897] bond0 (unregistering): Released all slaves
[   85.477818][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.482430][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.486609][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.497267][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.503398][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.163731][ T5897] hsr_slave_0: left promiscuous mode
[   86.173006][ T5897] hsr_slave_1: left promiscuous mode
[   86.177347][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.187281][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.205578][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.216696][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.253276][ T5897] veth1_macvtap: left promiscuous mode
[   86.256012][ T5897] veth0_macvtap: left promiscuous mode
[   86.259849][ T5897] veth1_vlan: left promiscuous mode
[   86.262263][ T5897] veth0_vlan: left promiscuous mode
[   86.509049][ T6323] Zero length message leads to an empty skb
[   86.983832][   T55] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[   87.503043][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   87.546204][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   87.588812][   T55] Bluetooth: hci1: command tx timeout
[   88.350975][ T6341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.355134][ T6341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.427278][ T6289] chnl_net:caif_netlink_parms(): no params data found
[   88.488020][ T6341] syz.1.161 (6341) used greatest stack depth: 18000 bytes left
[   88.842796][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.846651][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.850003][ T6289] bridge_slave_0: entered allmulticast mode
[   88.853506][ T6289] bridge_slave_0: entered promiscuous mode
[   88.886945][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.905070][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.914993][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.918349][ T6289] bridge_slave_1: entered allmulticast mode
[   88.924759][ T6289] bridge_slave_1: entered promiscuous mode
[   89.168180][ T6289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.235790][ T6289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.296531][ T6289] team0: Port device team_slave_0 added
[   89.304386][ T6289] team0: Port device team_slave_1 added
[   89.466950][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.480450][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.500063][ T6289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.557073][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.581969][ T6289] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.588751][ T6289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.613014][ T6289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.658806][   T55] Bluetooth: hci1: command tx timeout
[   89.681133][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.793134][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.854153][ T6289] hsr_slave_0: entered promiscuous mode
[   89.856795][ T6289] hsr_slave_1: entered promiscuous mode
[   89.978555][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.089626][ T5917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.093330][ T5917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.097235][ T5917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.102660][ T5917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.106045][ T5917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.411729][ T5897] bridge_slave_1: left allmulticast mode
[   90.417960][ T5897] bridge_slave_1: left promiscuous mode
[   90.422190][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.432999][ T5897] bridge_slave_0: left allmulticast mode
[   90.435397][ T5897] bridge_slave_0: left promiscuous mode
[   90.437941][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.975021][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.982813][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.987731][ T5897] bond0 (unregistering): Released all slaves
[   91.304076][ T6289] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.430991][ T6289] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.444220][ T6289] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.485474][ T5897] hsr_slave_0: left promiscuous mode
[   91.490021][ T5897] hsr_slave_1: left promiscuous mode
[   91.499095][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.502551][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.506482][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.510080][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.532410][ T5897] veth1_macvtap: left promiscuous mode
[   91.534893][ T5897] veth0_macvtap: left promiscuous mode
[   91.537238][ T5897] veth1_vlan: left promiscuous mode
[   91.540510][ T5897] veth0_vlan: left promiscuous mode
[   91.748729][ T5917] Bluetooth: hci1: command tx timeout
[   91.993826][ T5897] team0 (unregistering): Port device team_slave_1 removed
[   92.032018][ T5897] team0 (unregistering): Port device team_slave_0 removed
[   92.141450][ T5917] Bluetooth: hci2: command tx timeout
[   92.411939][ T6289] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.430797][ T6388] chnl_net:caif_netlink_parms(): no params data found
[   92.681734][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.684618][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.693839][ T6388] bridge_slave_0: entered allmulticast mode
[   92.698133][ T6388] bridge_slave_0: entered promiscuous mode
[   92.724963][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.734193][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.742651][ T6388] bridge_slave_1: entered allmulticast mode
[   92.746583][ T6388] bridge_slave_1: entered promiscuous mode
[   92.823823][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.834768][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.895919][ T6388] team0: Port device team_slave_0 added
[   92.918433][ T6388] team0: Port device team_slave_1 added
[   92.967464][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.981478][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.995772][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.003402][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.018733][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.032762][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.063410][ T6289] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.126140][ T6388] hsr_slave_0: entered promiscuous mode
[   93.129925][ T6388] hsr_slave_1: entered promiscuous mode
[   93.132723][ T6388] debugfs: 'hsr0' already exists in 'hsr'
[   93.134891][ T6388] Cannot create hsr debugfs directory
[   93.241249][ T6289] 8021q: adding VLAN 0 to HW filter on device team0
[   93.310186][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.313808][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.356732][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.360066][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.813583][ T6472] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.190'.
[   93.833253][ T5917] Bluetooth: hci1: command tx timeout
[   93.847446][ T6289] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.029839][ T6388] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.053833][ T6388] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.094544][ T6388] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.111332][ T6388] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.147799][ T6289] veth0_vlan: entered promiscuous mode
[   94.185593][ T6289] veth1_vlan: entered promiscuous mode
[   94.223370][ T5917] Bluetooth: hci2: command tx timeout
[   94.294389][ T6289] veth0_macvtap: entered promiscuous mode
[   94.343766][ T6289] veth1_macvtap: entered promiscuous mode
[   94.371986][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.403852][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.447411][ T6289] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.453627][ T6489] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.191'.
[   94.456918][ T6489] openvswitch: netlink: Message has 6 unknown bytes.
[   94.482008][ T6388] 8021q: adding VLAN 0 to HW filter on device team0
[   94.515838][ T5898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.537763][ T5898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.542644][ T5898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.548830][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.551118][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.570640][ T6494] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.574337][ T6494] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.578005][ T5898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.588947][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.591962][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.723358][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.726846][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.844684][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.851263][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.360453][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.458242][ T6388] veth0_vlan: entered promiscuous mode
[   95.485605][ T6388] veth1_vlan: entered promiscuous mode
[   95.536371][ T6388] veth0_macvtap: entered promiscuous mode
[   95.554835][ T6388] veth1_macvtap: entered promiscuous mode
[   95.588023][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.611535][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.629883][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.639581][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.646403][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.655314][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.732174][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'.
[   96.266873][ T6520] netlink: 'syz.3.198': attribute type 11 has an invalid length.
[   96.279177][ T6520] netlink: 'syz.3.198': attribute type 6 has an invalid length.
[   96.300795][ T5917] Bluetooth: hci2: command tx timeout
[   96.311487][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.314751][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.337431][ T6522] sit0: entered allmulticast mode
[   96.405541][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.406845][ T6522] sit0: entered promiscuous mode
[   96.408203][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.531830][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'.
[   97.033954][ T5917] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   97.704853][ T6541] Illegal XDP return value 3083068928 on prog  (id 74) dev N/A, expect packet loss!
[   98.389976][ T5917] Bluetooth: hci2: command tx timeout
[   98.878940][ T6561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.213'.
[   98.895831][ T6561] unsupported nlmsg_type 40
[  100.263223][ T6578] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.219'.
[  100.290181][ T6580] netlink: 'syz.3.220': attribute type 1 has an invalid length.
[  100.292965][ T6580] netlink: 2 bytes leftover after parsing attributes in process `syz.3.220'.
[  100.373946][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.292954][ T6598] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.226'.
[  101.524386][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.998318][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'.
[  102.522397][ T6641] netlink: 'syz.1.240': attribute type 30 has an invalid length.
[  103.200866][ T6662] netlink: 26 bytes leftover after parsing attributes in process `syz.3.250'.
[  103.709512][ T6687] netlink: 'syz.0.256': attribute type 12 has an invalid length.
[  103.712638][ T6687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.256'.
[  103.840644][ T6690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.843004][ T6690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.860296][ T6690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.862638][ T6690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.200472][ T6703] netlink: 'syz.3.261': attribute type 29 has an invalid length.
[  104.205852][ T6703] netlink: 'syz.3.261': attribute type 29 has an invalid length.
[  104.212500][ T6703] netlink: 500 bytes leftover after parsing attributes in process `syz.3.261'.
[  105.315195][ T5917] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  105.599997][   T55] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  105.727012][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[  106.233859][ T6746] netlink: 'syz.1.280': attribute type 7 has an invalid length.
[  106.237024][ T6746] netlink: 140 bytes leftover after parsing attributes in process `syz.1.280'.
[  106.565320][ T6767] netlink: 6 bytes leftover after parsing attributes in process `syz.3.288'.
[  106.773270][ T6780] netlink: 763 bytes leftover after parsing attributes in process `syz.3.291'.
[  106.968051][ T6790] netlink: 56 bytes leftover after parsing attributes in process `syz.1.298'.
[  107.136865][ T6802] netlink: 140 bytes leftover after parsing attributes in process `syz.3.303'.
[  107.145791][ T6802] netlink: 6 bytes leftover after parsing attributes in process `syz.3.303'.
[  107.267879][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.308'.
[  107.271702][ T6810] D`: renamed from hsr_slave_1 (while UP)
[  107.373538][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'.
[  107.392777][   T55] Bluetooth: hci1: command tx timeout
[  108.614413][ T6847] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  108.653284][ T6849] netlink: 'syz.0.321': attribute type 1 has an invalid length.
[  110.498465][ T6884] netlink: 'syz.0.334': attribute type 10 has an invalid length.
[  110.532184][ T6884] __nla_validate_parse: 1 callbacks suppressed
[  110.532237][ T6884] netlink: 55 bytes leftover after parsing attributes in process `syz.0.334'.
[  111.197795][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.343'.
[  111.207609][ T6903] netlink: 'syz.3.339': attribute type 13 has an invalid length.
[  111.428243][ T6911] openvswitch: netlink: Flow actions attr not present in new flow.
[  111.562631][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.566498][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.971065][ T5897] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.981405][ T5897] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.985400][ T5897] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.000042][ T5897] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.210136][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'.
[  114.215686][ T6964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.025076][   T55] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14
[  115.258344][ T7017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.388'.
[  115.422415][ T7023] sit0: left promiscuous mode
[  115.485992][ T7024] sit0: entered promiscuous mode
[  116.604848][ T7039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.398'.
[  116.613082][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'.
[  116.647770][ T7041] netlink: 'syz.3.399': attribute type 10 has an invalid length.
[  116.657666][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'.
[  116.985189][ T7055] netlink: 7 bytes leftover after parsing attributes in process `syz.1.406'.
[  116.990316][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'.
[  117.404568][ T7078] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.415'.
[  117.408559][ T7078] bridge: RTM_NEWNEIGH with invalid ether address
[  117.454761][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  117.718183][ T7092] netlink: 'syz.1.423': attribute type 21 has an invalid length.
[  117.830811][ T7100] netlink: 'syz.1.427': attribute type 10 has an invalid length.
[  117.834009][ T7100] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.427'.
[  117.907138][ T7104] nftables ruleset with unbound chain
[  120.246497][ T7147] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[  121.527529][ T7163] netlink: 763 bytes leftover after parsing attributes in process `syz.1.454'.
[  122.488988][ T7175] netlink: 'syz.0.459': attribute type 9 has an invalid length.
[  122.492676][ T7175] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.459'.
[  122.782177][ T7184] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  122.948751][   T33] audit: type=1107 audit(1758474001.750:2): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  123.257931][ T7206] netlink: 'syz.0.473': attribute type 10 has an invalid length.
[  123.268490][ T7206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'.
[  124.526884][   T55] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  124.547492][ T7218] xt_limit: Overflow, try lower: 271964/0
[  125.013145][ T7239] delete_channel: no stack
[  125.139436][ T7248] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.493'.
[  125.614845][ T7272] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  125.989120][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'.
[  126.055956][ T7286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.511'.
[  126.063959][ T7286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.511'.
[  128.517288][ T7343] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.538'.
[  128.521656][ T7343] netlink: zone id is out of range
[  128.523978][ T7343] netlink: zone id is out of range
[  128.526247][ T7343] netlink: get zone limit has 8 unknown bytes
[  129.550376][ T7362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.546'.
[  129.953164][ T7369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.548'.
[  129.977763][ T7369] sock: sock_timestamping_bind_phc: sock not bind to device
[  130.277485][   T55] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  130.402788][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.551'.
[  130.410272][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.551'.
[  130.429165][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.551'.
[  130.787873][ T7381] netlink: 'syz.1.555': attribute type 21 has an invalid length.
[  130.791302][ T7381] netlink: 156 bytes leftover after parsing attributes in process `syz.1.555'.
[  131.100575][ T7394] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.560'.
[  131.396068][ T7405] netlink: 'syz.0.565': attribute type 10 has an invalid length.
[  131.400585][ T7405] netlink: 55 bytes leftover after parsing attributes in process `syz.0.565'.
[  131.465913][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  131.990687][ T7415] netlink: 'syz.1.569': attribute type 28 has an invalid length.
[  132.154915][ T5898] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.373551][ T7426] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.888454][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.891844][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.584454][ T7446] netlink: 'syz.1.582': attribute type 39 has an invalid length.
[  134.001782][ T5917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.007187][ T5917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.011702][ T5917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.016035][ T5917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.020839][ T5917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.139559][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1280751573 wd_nsec: 1280751585
[  134.205107][ T7451] netlink: 'syz.0.583': attribute type 14 has an invalid length.
[  134.657126][ T7445] chnl_net:caif_netlink_parms(): no params data found
[  134.791917][ T5897] bridge_slave_1: left allmulticast mode
[  134.795032][ T5897] bridge_slave_1: left promiscuous mode
[  134.798893][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.806455][ T5897] bridge_slave_0: left allmulticast mode
[  134.808476][ T5897] bridge_slave_0: left promiscuous mode
[  134.817755][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.975773][ T7493] __nla_validate_parse: 2 callbacks suppressed
[  134.975789][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'.
[  135.212582][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.218803][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.229082][ T5897] bond0 (unregistering): Released all slaves
[  135.430915][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.435225][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.438330][ T7445] bridge_slave_0: entered allmulticast mode
[  135.460449][ T7445] bridge_slave_0: entered promiscuous mode
[  135.475475][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.490829][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.494344][ T7445] bridge_slave_1: entered allmulticast mode
[  135.501489][ T7445] bridge_slave_1: entered promiscuous mode
[  135.615224][ T7515] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.608'.
[  136.070309][ T5917] Bluetooth: hci1: command tx timeout
[  136.365186][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.383450][ T5917] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  136.387033][ T5917] Bluetooth: hci0: Injecting HCI hardware error event
[  136.392030][ T5917] Bluetooth: hci0: hardware error 0x00
[  136.427366][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.501391][ T7445] team0: Port device team_slave_0 added
[  136.517098][ T5897] hsr_slave_0: left promiscuous mode
[  136.520366][ T5897] hsr_slave_1: left promiscuous mode
[  137.120833][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  137.164587][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  137.524302][ T7445] team0: Port device team_slave_1 added
[  137.563212][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.566219][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.579531][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.594121][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.597133][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.623133][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.709304][ T7536] netlink: 'syz.1.613': attribute type 39 has an invalid length.
[  137.839065][ T7445] hsr_slave_0: entered promiscuous mode
[  137.842340][ T7445] hsr_slave_1: entered promiscuous mode
[  138.152842][   T55] Bluetooth: hci1: command tx timeout
[  138.380189][ T7445] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  138.385406][ T7445] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  138.390503][ T7445] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  138.396863][ T7445] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  138.458915][ T5917] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  138.485075][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.505678][ T7445] 8021q: adding VLAN 0 to HW filter on device team0
[  138.513474][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.516182][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.530830][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.533591][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.652999][ T7574] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.656699][ T7574] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.908469][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.234500][ T7445] veth0_vlan: entered promiscuous mode
[  139.246194][ T7445] veth1_vlan: entered promiscuous mode
[  139.285434][ T7445] veth0_macvtap: entered promiscuous mode
[  139.295013][ T7445] veth1_macvtap: entered promiscuous mode
[  139.317112][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.337405][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.355116][ T5897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.361212][ T5897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.435327][ T7605] netlink: 'syz.1.627': attribute type 6 has an invalid length.
[  139.441398][ T7605] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.627'.
[  139.592269][ T7608] netlink: 'syz.1.628': attribute type 13 has an invalid length.
[  139.631099][ T5897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.635786][ T5897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.813068][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.816871][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.243372][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.244116][ T5917] Bluetooth: hci1: command tx timeout
[  140.271805][ T7608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.651108][ T5897] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.671365][ T5897] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.720294][ T5897] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.906907][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.924975][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.974570][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.984335][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.132178][ T7648] netlink: 64 bytes leftover after parsing attributes in process `syz.4.643'.
[  142.210049][ T7607] Set syz1 is full, maxelem 65536 reached
[  142.231586][ T7654] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  142.296114][ T7656] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.647'.
[  142.298777][ T5917] Bluetooth: hci1: command tx timeout
[  143.266734][ T7666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'.
[  143.529291][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.657'.
[  143.534334][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.4.657'.
[  143.641978][ T7687] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.661'.
[  143.695285][ T7689] netlink: 220 bytes leftover after parsing attributes in process `syz.0.662'.
[  143.734442][ T7691] netlink: 'syz.4.663': attribute type 21 has an invalid length.
[  143.750347][ T7691] netlink: 14565 bytes leftover after parsing attributes in process `syz.4.663'.
[  143.787776][ T7695] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.665'.
[  144.194133][ T7720] syzkaller0: tun_chr_ioctl cmd 1074025677
[  144.196944][ T7720] syzkaller0: Linktype set failed because interface is up
[  144.769944][ T5898] syzkaller0: tun_net_xmit 76
[  144.772636][ T5898] syzkaller0: tun_net_xmit 48
[  144.799051][   T10] syzkaller0: tun_net_xmit 76
[  148.754480][ T7746] netlink: 'syz.0.685': attribute type 10 has an invalid length.
[  149.595037][ T7746] bond0: (slave bond_slave_0): Releasing backup interface
[  149.656943][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'.
[  149.856868][ T7761] netlink: 'syz.4.689': attribute type 10 has an invalid length.
[  150.645910][ T7761] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  150.695101][ T5917] Bluetooth: hci2: unexpected event 0x31 length: 82 > 6
[  151.488485][ T7789] netlink: 'syz.4.699': attribute type 3 has an invalid length.
[  151.649021][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.699'.
[  152.402945][ T7827] netlink: 'syz.1.711': attribute type 21 has an invalid length.
[  152.966880][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'.
[  153.291929][ T7844] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  153.657465][ T7844] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  154.013326][ T7860] netlink: 'syz.4.726': attribute type 9 has an invalid length.
[  154.804227][ T7873] netlink: 'syz.4.730': attribute type 13 has an invalid length.
[  155.565562][ T7892] netlink: 'syz.4.738': attribute type 33 has an invalid length.
[  155.584821][ T7892] netlink: 152 bytes leftover after parsing attributes in process `syz.4.738'.
[  155.611537][ T7893] netlink: 10 bytes leftover after parsing attributes in process `syz.1.732'.
[  156.501803][ T7929] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  156.518908][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  157.042129][ T7934] netlink: 'syz.1.751': attribute type 3 has an invalid length.
[  157.051685][ T7934] netlink: 'syz.1.751': attribute type 2 has an invalid length.
[  157.061948][ T7934] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.751'.
[  157.470544][ T7948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.756'.
[  157.497742][ T7948] netlink: 'syz.4.756': attribute type 2 has an invalid length.
[  157.503596][ T7948] netlink: 'syz.4.756': attribute type 8 has an invalid length.
[  157.506906][ T7948] netlink: 132 bytes leftover after parsing attributes in process `syz.4.756'.
[  158.008981][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.210144][ T5917] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  158.313165][ T7971] netlink: 'syz.1.768': attribute type 11 has an invalid length.
[  158.317016][ T7971] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.768'.
[  158.479821][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.599449][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'.
[  159.246248][ T7995] netlink: 'syz.1.779': attribute type 23 has an invalid length.
[  159.382016][ T8001] netlink: 'syz.4.782': attribute type 21 has an invalid length.
[  159.385400][ T8001] netlink: 'syz.4.782': attribute type 1 has an invalid length.
[  159.416544][ T8003] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.783'.
[  159.660544][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'.
[  161.107581][ T8047] netlink: 'syz.4.801': attribute type 1 has an invalid length.
[  161.547804][ T8066] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  161.695270][ T8073] C: renamed from team_slave_0
[  161.706508][ T8073] __nla_validate_parse: 1 callbacks suppressed
[  161.706525][ T8073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.808'.
[  162.135354][ T8081] sctp: [Deprecated]: syz.1.812 (pid 8081) Use of int in maxseg socket option.
[  162.135354][ T8081] Use struct sctp_assoc_value instead
[  162.218831][ T5917] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  162.222442][ T5917] Bluetooth: hci2: Injecting HCI hardware error event
[  162.225938][ T5917] Bluetooth: hci2: hardware error 0x00
[  162.331287][   T55] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  163.601467][ T8113] netlink: 277 bytes leftover after parsing attributes in process `syz.1.826'.
[  164.298758][ T5917] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  164.368922][ T8118] netlink: 'syz.4.828': attribute type 25 has an invalid length.
[  164.371578][ T8118] netlink: 'syz.4.828': attribute type 28 has an invalid length.
[  164.839914][ T8126] netlink: 'syz.1.832': attribute type 1 has an invalid length.
[  165.976780][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.394018][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.398864][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.403048][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.407584][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.415475][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.527601][ T8164] netlink: 'syz.4.848': attribute type 29 has an invalid length.
[  167.532666][ T8164] netlink: 'syz.4.848': attribute type 3 has an invalid length.
[  167.536354][ T8164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.848'.
[  167.543984][ T5897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.597060][ T8167] netlink: 'syz.4.849': attribute type 29 has an invalid length.
[  167.603395][ T8167] netlink: 'syz.4.849': attribute type 3 has an invalid length.
[  167.606217][ T8167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.849'.
[  167.632139][ T5897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.653852][ T8158] chnl_net:caif_netlink_parms(): no params data found
[  167.697745][ T5897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.777714][ T5897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.853284][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.856589][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.860973][ T8158] bridge_slave_0: entered allmulticast mode
[  167.864443][ T8158] bridge_slave_0: entered promiscuous mode
[  167.990414][ T8170] : entered promiscuous mode
[  168.009286][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.014964][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.021797][ T8158] bridge_slave_1: entered allmulticast mode
[  168.029648][ T8158] bridge_slave_1: entered promiscuous mode
[  168.103886][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.110309][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.179810][ T8177] netlink: 'syz.4.852': attribute type 11 has an invalid length.
[  168.183222][ T8177] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.852'.
[  168.207118][ T8158] team0: Port device team_slave_0 added
[  168.253175][ T8158] team0: Port device team_slave_1 added
[  168.373789][ T5897] bridge_slave_1: left allmulticast mode
[  168.376197][ T5897] bridge_slave_1: left promiscuous mode
[  168.381001][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.396703][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.002418][ T8176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.502641][   T55] Bluetooth: hci0: command tx timeout
[  169.540691][ T5897] bond0 (unregistering): (slave 0): Releasing backup interface
[  169.551430][ T5897] bond0 (unregistering): Released all slaves
[  169.571469][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.573527][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.584974][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.681626][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.685855][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.702961][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.935574][ T8205] netlink: 'syz.4.863': attribute type 29 has an invalid length.
[  169.940602][ T8208] netlink: 'syz.4.863': attribute type 29 has an invalid length.
[  169.967464][ T8158] hsr_slave_0: entered promiscuous mode
[  169.982699][ T8158] hsr_slave_1: entered promiscuous mode
[  169.985690][ T8158] debugfs: 'hsr0' already exists in 'hsr'
[  169.988048][ T8158] Cannot create hsr debugfs directory
[  170.184760][ T5897] hsr_slave_0: left promiscuous mode
[  170.189274][ T5897] D`: left promiscuous mode
[  170.193315][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.202759][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.207906][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.212928][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.243394][ T5897] veth1_macvtap: left promiscuous mode
[  170.245903][ T5897] veth0_macvtap: left promiscuous mode
[  170.638324][ T8233] netlink: 172 bytes leftover after parsing attributes in process `syz.4.869'.
[  170.703894][ T5897] team0 (unregistering): Port device team_slave_1 removed
[  170.772614][ T5897] team0 (unregistering): Port device team_slave_0 removed
[  171.272066][ T8243] syzkaller0: entered promiscuous mode
[  171.274129][ T8243] syzkaller0: entered allmulticast mode
[  171.474937][ T8257] netlink: 531 bytes leftover after parsing attributes in process `syz.4.878'.
[  171.512065][ T8158] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  171.541166][ T8158] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  171.572163][ T8158] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  171.578956][   T55] Bluetooth: hci0: command tx timeout
[  171.604049][ T8158] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  171.837444][ T8158] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.884152][ T8158] 8021q: adding VLAN 0 to HW filter on device team0
[  171.905123][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.908477][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.929628][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.932685][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.123536][ T8289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.131204][ T8289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.276591][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.608115][ T8158] veth0_vlan: entered promiscuous mode
[  172.616010][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'.
[  172.618394][ T8158] veth1_vlan: entered promiscuous mode
[  172.654633][ T8158] veth0_macvtap: entered promiscuous mode
[  172.663383][ T8158] veth1_macvtap: entered promiscuous mode
[  172.682394][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.695459][ T8158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.720868][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.733950][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.742664][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.759307][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.796700][ T8327] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  172.820980][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.824303][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.874349][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.877576][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.001533][ T8337] netlink: 'syz.1.899': attribute type 3 has an invalid length.
[  173.005086][ T8337] netlink: 'syz.1.899': attribute type 1 has an invalid length.
[  173.009444][ T8337] netlink: 116 bytes leftover after parsing attributes in process `syz.1.899'.
[  173.167008][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'.
[  173.658992][   T55] Bluetooth: hci0: command tx timeout
[  173.667771][ T8368] netlink: zone id is out of range
[  173.679236][ T8368] netlink: zone id is out of range
[  173.682099][ T8368] netlink: zone id is out of range
[  173.684197][ T8374] netlink: 180 bytes leftover after parsing attributes in process `syz.4.915'.
[  173.684841][ T8368] netlink: zone id is out of range
[  173.692708][ T8368] netlink: zone id is out of range
[  173.696045][ T8368] netlink: zone id is out of range
[  173.719612][ T8368] netlink: zone id is out of range
[  173.722846][ T8368] netlink: zone id is out of range
[  173.725929][ T8368] netlink: zone id is out of range
[  174.124350][ T8390] netlink: 52 bytes leftover after parsing attributes in process `syz.1.921'.
[  174.633098][ T8400] erspan0 speed is unknown, defaulting to 1000
[  174.636106][ T8400] erspan0 speed is unknown, defaulting to 1000
[  174.647041][ T8400] erspan0 speed is unknown, defaulting to 1000
[  174.675782][ T8400] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  174.706447][ T8400] erspan0 speed is unknown, defaulting to 1000
[  174.713125][ T8400] erspan0 speed is unknown, defaulting to 1000
[  174.717622][ T8400] erspan0 speed is unknown, defaulting to 1000
[  175.555538][ T8427] sit0: entered promiscuous mode
[  175.741485][   T55] Bluetooth: hci0: command tx timeout
[  175.815428][ T8441] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.944'.
[  175.834585][ T8441] netlink: 'syz.5.944': attribute type 4 has an invalid length.
[  176.204476][   T55] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  176.455678][ T8477] netlink: 160 bytes leftover after parsing attributes in process `syz.4.961'.
[  176.768155][ T8489] @: renamed from bond_slave_0 (while UP)
[  176.824055][ T8489] netlink: 'syz.4.966': attribute type 21 has an invalid length.
[  176.827091][ T8489] netlink: 128 bytes leftover after parsing attributes in process `syz.4.966'.
[  176.832810][ T8489] netlink: 'syz.4.966': attribute type 4 has an invalid length.
[  177.142569][ T8493] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  179.453580][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.994'.
[  179.508409][ T8562] netlink: 104 bytes leftover after parsing attributes in process `syz.4.996'.
[  179.965677][ T8582] netlink: 'syz.1.1005': attribute type 10 has an invalid length.
[  179.985407][ T8582] team0: Device ipvlan1 failed to register rx_handler
[  180.047350][  T792] erspan0 speed is unknown, defaulting to 1000
[  180.384726][ T8598] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1013'.
[  180.444119][ T8602] : renamed from team_slave_1 (while UP)
[  181.593491][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1021'.
[  181.925758][ T8610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  182.085147][ T8628] netlink: 'syz.4.1026': attribute type 21 has an invalid length.
[  182.303174][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  182.397928][ T8647] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1034'.
[  182.558012][ T8658] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1037'.
[  183.234006][ T8681] syzkaller0: entered promiscuous mode
[  183.236725][ T8681] syzkaller0: entered allmulticast mode
[  183.965166][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1046'.
[  185.436417][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1048'.
[  185.441181][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1048'.
[  185.568271][ T8713] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1051'.
[  186.471571][ T8738] netlink: 'syz.1.1061': attribute type 10 has an invalid length.
[  187.220330][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'.
[  187.735079][ T8778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1078'.
[  187.745100][ T8778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1078'.
[  187.754653][ T8778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1078'.
[  187.804071][ T8782] netlink: 'syz.1.1080': attribute type 29 has an invalid length.
[  187.811443][ T8782] netlink: 'syz.1.1080': attribute type 29 has an invalid length.
[  187.816958][ T8782] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1080'.
[  188.061213][ T8792] bridge_slave_1: left allmulticast mode
[  188.063410][ T8792] bridge_slave_1: left promiscuous mode
[  188.066027][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.708429][ T8792] bridge_slave_0: left allmulticast mode
[  188.712360][ T8792] bridge_slave_0: left promiscuous mode
[  188.714758][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.778292][ T8796] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  188.803336][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1088'.
[  188.806563][ T8800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1088'.
[  188.994269][ T8811] netlink: 'syz.5.1093': attribute type 10 has an invalid length.
[  191.275546][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.283080][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.476722][ T8892] net_ratelimit: 11 callbacks suppressed
[  191.476762][ T8892] openvswitch: netlink: IPv6 tunnel dst address is zero
[  192.428262][ T8937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.534126][ T8942] __nla_validate_parse: 1 callbacks suppressed
[  192.534139][ T8942] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1148'.
[  192.713512][ T8955] netlink: 1018 bytes leftover after parsing attributes in process `syz.4.1154'.
[  192.912530][ T8960] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1155'.
[  192.935720][ T8967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.124344][ T8978] netlink: 62967 bytes leftover after parsing attributes in process `syz.5.1164'.
[  193.321033][ T8985] bridge_slave_1: left allmulticast mode
[  193.323742][ T8985] bridge_slave_1: left promiscuous mode
[  193.326574][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.304376][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.307246][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  199.013500][ T8985] bridge_slave_0: left allmulticast mode
[  199.015956][ T8985] bridge_slave_0: left promiscuous mode
[  199.023865][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.561828][ T9006] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1174'.
[  199.566830][ T9006] netlink: 'syz.5.1174': attribute type 13 has an invalid length.
[  199.570252][ T9006] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1174'.
[  199.574058][ T9006] : renamed from syz_tun (while UP)
[  199.582828][ T9006] : refused to change device tx_queue_len
[  199.585440][ T9006] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  200.225258][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1182'.
[  201.896600][ T9085] netlink: 'syz.1.1209': attribute type 3 has an invalid length.
[  201.900581][ T9085] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1209'.
[  202.226194][ T9092] netlink: 'syz.5.1212': attribute type 2 has an invalid length.
[  205.752202][ T9141] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  206.552444][ T9146] netlink: zone id is out of range
[  206.593244][ T9146] netlink: zone id is out of range
[  206.604909][ T9146] netlink: zone id is out of range
[  207.010521][ T9146] netlink: set zone limit has 4 unknown bytes
[  209.455056][ T9176] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  212.285293][ T9195] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1260'.
[  212.289640][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1260'.
[  212.426404][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'.
[  212.527969][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'.
[  212.549900][ T9208] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1265'.
[  212.676966][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1268'.
[  212.986843][ T9237] netlink: 'syz.5.1278': attribute type 21 has an invalid length.
[  212.990681][ T9237] netlink: 'syz.5.1278': attribute type 1 has an invalid length.
[  212.994375][ T9237] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1278'.
[  213.653169][ T9267] netlink: 'syz.4.1292': attribute type 21 has an invalid length.
[  216.773804][ T9321] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1315'.
[  216.933124][ T9332] netlink: 'syz.5.1320': attribute type 2 has an invalid length.
[  217.012294][ T9340] netlink: 'syz.5.1323': attribute type 10 has an invalid length.
[  217.015513][ T9340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1323'.
[  217.023087][ T9340] batman_adv: batadv0: Adding interface: vlan1
[  217.025561][ T9340] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.037420][ T9340] batman_adv: batadv0: Interface activated: vlan1
[  217.074159][ T9344] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.1326'.
[  217.152206][ T9352] netlink: 'syz.5.1330': attribute type 6 has an invalid length.
[  217.155455][ T9352] netlink: 'syz.5.1330': attribute type 1 has an invalid length.
[  217.748002][ T9386] netlink: 'syz.5.1346': attribute type 21 has an invalid length.
[  217.755201][ T9386] netlink: 'syz.5.1346': attribute type 20 has an invalid length.
[  217.974945][ T9399] openvswitch: netlink: Missing valid actions attribute.
[  217.977972][ T9399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.760371][ T9549] netlink: 'syz.1.1377': attribute type 29 has an invalid length.
[  219.765654][ T9549] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  219.798041][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.820857][ T9549] team0: Port device bond0 added
[  219.853744][ T9551] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  219.946918][ T9559] __nla_validate_parse: 3 callbacks suppressed
[  219.946937][ T9559] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1380'.
[  219.955122][ T9555] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1380'.
[  219.973938][ T9559] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1380'.
[  220.415752][ T9582] netlink: 'syz.1.1392': attribute type 10 has an invalid length.
[  220.433750][ T9582] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  220.473851][ T9582] team0: Port device wlan1 added
[  220.490894][ T9583] netlink: 'syz.1.1392': attribute type 11 has an invalid length.
[  220.493659][ T9583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1392'.
[  220.723029][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1398'.
[  220.847345][ T9601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.023589][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.786444][ T9647] netlink: 'syz.5.1422': attribute type 9 has an invalid length.
[  222.791277][ T9647] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.1422'.
[  222.822490][ T9645] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1421'.
[  222.875831][ T9652] netlink: 'syz.5.1425': attribute type 3 has an invalid length.
[  222.882949][ T9652] netlink: 199752 bytes leftover after parsing attributes in process `syz.5.1425'.
[  223.012520][ T9660] netlink: 'syz.5.1428': attribute type 2 has an invalid length.
[  223.017703][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1428'.
[  224.020912][ T9709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1451'.
[  224.683776][ T9745] netlink: 'syz.5.1468': attribute type 21 has an invalid length.
[  224.686673][ T9745] netlink: 'syz.5.1468': attribute type 15 has an invalid length.
[  224.695597][ T9745] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.701019][ T9745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  224.703804][ T9745] IPv6: NLM_F_CREATE should be set when creating new route
[  224.707693][ T9745] IPv6: NLM_F_CREATE should be set when creating new route
[  224.711322][ T9745] IPv6: NLM_F_CREATE should be set when creating new route
[  224.738552][ T9747] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  224.742631][ T9747] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  225.244164][ T9774] netlink: 'syz.4.1478': attribute type 10 has an invalid length.
[  226.022044][ T9781] erspan0 speed is unknown, defaulting to 1000
[  226.569645][ T9803] __nla_validate_parse: 1 callbacks suppressed
[  226.569704][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'.
[  227.154552][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1494'.
[  227.158535][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1494'.
[  227.676858][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1506'.
[  227.688732][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1506'.
[  227.945018][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1510'.
[  228.178454][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1510'.
[  228.492979][ T9849] syzkaller0: entered promiscuous mode
[  228.495708][ T9849] syzkaller0: entered allmulticast mode
[  228.636331][ T9860] netlink: 'syz.1.1514': attribute type 33 has an invalid length.
[  228.643823][ T9860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1514'.
[  229.947287][ T9862] netlink: 'syz.5.1515': attribute type 7 has an invalid length.
[  230.014222][ T9866] netlink: 'syz.5.1517': attribute type 1 has an invalid length.
[  230.617705][ T9892] netlink: 'syz.5.1528': attribute type 21 has an invalid length.
[  231.216436][ T9913] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1535'.
[  231.479599][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1537'.
[  231.823891][ T9935] netlink: 'syz.4.1541': attribute type 2 has an invalid length.
[  231.827074][ T9935] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1541'.
[  231.897191][ T9939] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1543'.
[  231.987240][ T9942] siw: device registration error -23
[  232.347557][ T9952] netlink: 'syz.5.1547': attribute type 9 has an invalid length.
[  232.351110][ T9952] netlink: 211924 bytes leftover after parsing attributes in process `syz.5.1547'.
[  232.464304][ T9956] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1549'.
[  232.889384][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1560'.
[  232.913429][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'.
[  233.884187][T10004] netlink: 'syz.4.1572': attribute type 10 has an invalid length.
[  235.025818][T10034] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1583'.
[  235.138050][T10045] tap0: tun_chr_ioctl cmd 21731
[  235.163922][T10045] tap0: tun_chr_ioctl cmd 2147767521
[  235.949300][T10089] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1607'.
[  235.967012][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1607'.
[  238.282445][T10119] netlink: 'syz.4.1619': attribute type 39 has an invalid length.
[  238.725018][T10155] netlink: 'syz.1.1636': attribute type 2 has an invalid length.
[  238.728168][T10155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1636'.
[  238.815035][T10164] netlink: 'syz.1.1641': attribute type 3 has an invalid length.
[  238.817640][T10164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1641'.
[  238.949967][T10176] netlink: 'syz.4.1647': attribute type 2 has an invalid length.
[  238.953021][T10176] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1647'.
[  239.120861][T10180] erspan0 speed is unknown, defaulting to 1000
[  239.229706][T10184] siw: device registration error -23
[  239.241706][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'.
[  239.472150][T10201] netlink: 'syz.4.1657': attribute type 2 has an invalid length.
[  239.480940][T10201] netlink: 'syz.4.1657': attribute type 1 has an invalid length.
[  239.665172][T10199] netlink: 'syz.5.1656': attribute type 1 has an invalid length.
[  239.669476][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'.
[  239.934311][T10230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1668'.
[  239.937699][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1668'.
[  239.952480][T10230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1668'.
[  240.493368][T10249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1678'.
[  242.945329][T10253] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1680'.
[  243.089630][T10259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  243.093625][T10259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  243.152839][T10262] syzkaller0: entered promiscuous mode
[  243.155048][T10262] syzkaller0: entered allmulticast mode
[  244.543456][T10272] netlink: 64019 bytes leftover after parsing attributes in process `syz.4.1687'.
[  244.547472][T10276] netlink: 'syz.1.1689': attribute type 29 has an invalid length.
[  244.552344][T10277] netlink: 'syz.1.1689': attribute type 29 has an invalid length.
[  244.555817][T10278] netlink: 'syz.1.1689': attribute type 29 has an invalid length.
[  244.560882][T10279] netlink: 'syz.1.1689': attribute type 29 has an invalid length.
[  244.977727][T10303] netlink: 'syz.5.1692': attribute type 6 has an invalid length.
[  244.982429][T10303] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1692'.
[  245.395602][T10313] openvswitch: netlink: Key type 29 is not supported
[  245.705483][T10320] netlink: 'syz.4.1704': attribute type 10 has an invalid length.
[  245.720533][T10320] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  245.729898][T10320] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  245.734563][T10320] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  245.787482][T10325] netlink: 'syz.1.1707': attribute type 3 has an invalid length.
[  245.790893][T10325] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1707'.
[  246.170669][T10347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1718'.
[  246.173595][T10347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1718'.
[  246.693557][T10364] erspan0 speed is unknown, defaulting to 1000
[  246.862269][T10375] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1728'.
[  246.867989][T10375] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1728'.
[  247.225321][T10381] netlink: 825 bytes leftover after parsing attributes in process `syz.5.1730'.
[  247.233026][T10381] netlink: 130144 bytes leftover after parsing attributes in process `syz.5.1730'.
[  247.523003][T10390] netlink: 'syz.5.1734': attribute type 1 has an invalid length.
[  247.699793][T10404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.861103][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1743'.
[  249.889376][T10437] __nla_validate_parse: 1 callbacks suppressed
[  249.889394][T10437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'.
[  249.909146][T10437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1757'.
[  250.001203][T10445] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1761'.
[  251.026958][T10480] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  251.207524][T10461] delete_channel: no stack
[  251.347493][T10494] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1781'.
[  252.085748][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'.
[  252.123190][T10509] netlink: 'syz.5.1786': attribute type 40 has an invalid length.
[  252.199329][T10512] siw: device registration error -23
[  252.541256][T10532] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.1796'.
[  253.483966][T10557] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'.
[  253.497226][T10555] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'.
[  253.554292][T10559] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.1807'.
[  253.680131][T10566] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1810'.
[  254.564970][T10583] netlink: 'syz.5.1818': attribute type 1 has an invalid length.
[  254.783982][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.912826][T10593] __nla_validate_parse: 2 callbacks suppressed
[  254.912922][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'.
[  254.925413][T10593] netlink: 'syz.1.1822': attribute type 7 has an invalid length.
[  254.928400][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1822'.
[  255.584749][T10609] netlink: 'syz.5.1829': attribute type 5 has an invalid length.
[  255.588212][T10609] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1829'.
[  255.690557][T10614] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1831'.
[  255.746226][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.749338][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.756781][T10617] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.1833'.
[  255.782936][T10620] netlink: 'syz.1.1834': attribute type 4 has an invalid length.
[  257.333794][T10659] netlink: 'syz.4.1849': attribute type 10 has an invalid length.
[  259.249821][T10694] xt_l2tp: v2 tid > 0xffff: 327812
[  259.443384][T10703] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  259.658560][T10706] netlink: 'syz.5.1871': attribute type 12 has an invalid length.
[  259.662910][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1871'.
[  259.825241][T10713] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  259.827859][T10713] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  260.016044][T10722] netlink: 'syz.1.1877': attribute type 4 has an invalid length.
[  260.024373][T10722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1877'.
[  260.030857][T10720] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.364029][T10740] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1886'.
[  260.544234][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'.
[  260.573055][T10756] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.1894'.
[  260.593255][T10758] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1895'.
[  260.597131][T10758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1895'.
[  260.804079][T10764] netlink: 'syz.5.1896': attribute type 10 has an invalid length.
[  260.807469][T10764] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1896'.
[  260.812238][T10764] team0: entered promiscuous mode
[  260.814408][T10764] team_slave_0: entered promiscuous mode
[  260.817019][T10764] team_slave_1: entered promiscuous mode
[  260.821682][T10764] team0: entered allmulticast mode
[  260.823856][T10764] team_slave_0: entered allmulticast mode
[  260.825997][T10764] team_slave_1: entered allmulticast mode
[  260.833238][T10764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  261.013441][T10776] netlink: 'syz.5.1903': attribute type 39 has an invalid length.
[  261.676380][T10782] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  261.781298][T10788] netlink: 'syz.5.1908': attribute type 3 has an invalid length.
[  261.822184][T10788] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1908'.
[  263.379353][ T5917] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  263.630958][T10838] netlink: 'syz.1.1930': attribute type 2 has an invalid length.
[  263.637095][T10838] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1930'.
[  263.641594][T10838] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  263.992994][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1936'.
[  264.766770][T10863] netlink: 'syz.1.1943': attribute type 6 has an invalid length.
[  264.775750][T10864] sctp: [Deprecated]: syz.5.1941 (pid 10864) Use of struct sctp_assoc_value in delayed_ack socket option.
[  264.775750][T10864] Use struct sctp_sack_info instead
[  265.170430][T10892] netlink: 'syz.1.1955': attribute type 10 has an invalid length.
[  265.176151][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.186175][T10892] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  265.505194][T10907] netlink: 'syz.1.1961': attribute type 1 has an invalid length.
[  265.525530][T10907] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1961'.
[  265.783812][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'.
[  266.004734][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1967'.
[  266.010014][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1967'.
[  266.276397][T10928] netlink: 'syz.5.1971': attribute type 11 has an invalid length.
[  266.280620][T10928] netlink: 147436 bytes leftover after parsing attributes in process `syz.5.1971'.
[  266.401819][T10934] delete_channel: no stack
[  266.404579][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1974'.
[  266.744789][T10943] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1977'.
[  266.752448][T10943] netlink: zone id is out of range
[  266.755524][T10943] netlink: zone id is out of range
[  266.758094][T10943] netlink: zone id is out of range
[  266.762098][T10943] netlink: zone id is out of range
[  266.764437][T10943] netlink: zone id is out of range
[  266.766582][T10943] netlink: zone id is out of range
[  266.771084][T10943] netlink: zone id is out of range
[  266.773201][T10943] netlink: zone id is out of range
[  266.774969][T10943] netlink: zone id is out of range
[  266.776837][T10943] netlink: zone id is out of range
[  267.423606][T10942] syz.4.1977 (10942) used obsolete PPPIOCDETACH ioctl
[  268.186751][T10959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1984'.
[  268.374873][T10975] netlink: 'syz.1.1992': attribute type 11 has an invalid length.
[  268.384484][T10975] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1992'.
[  268.475266][T10974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.567778][T10987] netlink: 'syz.1.1998': attribute type 29 has an invalid length.
[  268.573016][T10987] netlink: 'syz.1.1998': attribute type 29 has an invalid length.
[  268.590706][T10987] netlink: 'syz.1.1998': attribute type 29 has an invalid length.
[  268.597345][T10987] netlink: 'syz.1.1998': attribute type 29 has an invalid length.
[  269.027376][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2015'.
[  269.159789][T11039] netlink: 'syz.5.2021': attribute type 10 has an invalid length.
[  269.932636][T11073] netlink: 'syz.4.2038': attribute type 10 has an invalid length.
[  270.207469][T11099] netlink: 'syz.5.2051': attribute type 1 has an invalid length.
[  270.637646][T11125] netlink: 'syz.4.2062': attribute type 1 has an invalid length.
[  270.673669][T11128] __nla_validate_parse: 7 callbacks suppressed
[  270.673685][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'.
[  270.683272][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'.
[  271.045849][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'.
[  271.236269][T11147] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2072'.
[  272.688237][T11197] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  272.693946][T11197] netlink: 'syz.1.2093': attribute type 4 has an invalid length.
[  272.697022][T11197] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2093'.
[  273.750975][T11210] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2099'.
[  273.876966][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2101'.
[  273.881400][T11215] net_ratelimit: 78 callbacks suppressed
[  273.881410][T11215] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  273.901908][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2098'.
[  273.980529][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2098'.
[  274.046513][T11227] netlink: 'syz.4.2105': attribute type 1 has an invalid length.
[  274.102156][T11230] netlink: 'syz.4.2107': attribute type 39 has an invalid length.
[  274.138163][T11208] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2098'.
[  274.742481][   T55] Bluetooth: hci1: unexpected event 0x32 length: 82 > 9
[  274.951677][T11253] netlink: 'syz.5.2112': attribute type 11 has an invalid length.
[  275.510871][T11262] delete_channel: no stack
[  275.512897][T11262] delete_channel: no stack
[  276.469857][T11287] netlink: 'syz.1.2130': attribute type 10 has an invalid length.
[  276.604950][T11289] netlink: 'syz.4.2125': attribute type 11 has an invalid length.
[  276.944129][T11292] netlink: 'syz.1.2131': attribute type 2 has an invalid length.
[  276.946651][T11292] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2131'.
[  277.190378][T11315] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  277.287945][T11325] netlink: 'syz.5.2147': attribute type 27 has an invalid length.
[  277.292527][T11325] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.2147'.
[  278.214474][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'.
[  278.305642][T11345] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2155'.
[  278.311519][T11345] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2155'.
[  278.478163][T11357] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2161'.
[  278.495807][T11357] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2161'.
[  278.625391][T11365] netlink: 'syz.5.2165': attribute type 1 has an invalid length.
[  278.628415][T11365] netlink: 'syz.5.2165': attribute type 4 has an invalid length.
[  278.633908][T11365] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2165'.
[  279.026398][T11398] netlink: 'syz.1.2180': attribute type 23 has an invalid length.
[  279.074795][T11397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.090221][T11400] netlink: 'syz.1.2181': attribute type 21 has an invalid length.
[  279.114880][T11402] netlink: 'syz.5.2182': attribute type 4 has an invalid length.
[  280.057806][T11432] netlink: 'syz.1.2195': attribute type 10 has an invalid length.
[  280.065848][T11432] 8021q: adding VLAN 0 to HW filter on device team0
[  280.113226][T11432] netdevsim netdevsim1 : renamed from netdevsim0
[  280.150621][T11432] can: request_module (can-proto-0) failed.
[  283.151554][T11504] siw: device registration error -23
[  283.593787][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.640249][T11524] syzkaller0: entered promiscuous mode
[  283.922815][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2242'.
[  283.926171][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2242'.
[  284.475439][T11539] netlink: 'syz.1.2243': attribute type 2 has an invalid length.
[  284.478567][T11539] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2243'.
[  284.482453][T11539] nbd: must specify a device to reconfigure
[  286.746922][T11534] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2242'.
[  286.911144][T11551] syzkaller0: entered promiscuous mode
[  286.913453][T11551] syzkaller0: entered allmulticast mode
[  287.016341][T11555] ==================================================================
[  287.018878][T11555] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  287.022059][T11555] Read of size 1 at addr ffff88810f2074b0 by task syz.5.2250/11555
[  287.026571][T11555] 
[  287.027467][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.5.2250 Not tainted syzkaller #0 PREEMPT(full) 
[  287.027480][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.027486][T11555] Call Trace:
[  287.027492][T11555]  <TASK>
[  287.027497][T11555]  dump_stack_lvl+0x189/0x250
[  287.027520][T11555]  ? __virt_addr_valid+0x1c8/0x5c0
[  287.027532][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.027541][T11555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.027552][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.027560][T11555]  ? lock_release+0x4b/0x3e0
[  287.027571][T11555]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  287.027581][T11555]  ? __virt_addr_valid+0x1c8/0x5c0
[  287.027591][T11555]  ? __virt_addr_valid+0x4a5/0x5c0
[  287.027600][T11555]  print_report+0xca/0x240
[  287.027609][T11555]  ? __xfrm_state_insert+0x8af/0x1450
[  287.027621][T11555]  kasan_report+0x118/0x150
[  287.027629][T11555]  ? __xfrm_state_insert+0x8af/0x1450
[  287.027641][T11555]  __xfrm_state_insert+0x8af/0x1450
[  287.027654][T11555]  ? xfrm_state_insert+0x44/0x60
[  287.027664][T11555]  xfrm_state_insert+0x54/0x60
[  287.027675][T11555]  ipcomp6_init_state+0x655/0x900
[  287.027688][T11555]  __xfrm_init_state+0xa76/0x13f0
[  287.027695][T11555]  ? __xfrm_init_state+0x7ef/0x13f0
[  287.027703][T11555]  xfrm_add_sa+0x2f5b/0x4070
[  287.027711][T11555]  ? __pfx_xfrm_add_sa+0x10/0x10
[  287.027717][T11555]  ? apparmor_capable+0x137/0x1b0
[  287.027729][T11555]  ? __nla_parse+0x40/0x60
[  287.027739][T11555]  xfrm_user_rcv_msg+0x7a3/0xab0
[  287.027747][T11555]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  287.027760][T11555]  ? __pfx___mutex_trylock_common+0x10/0x10
[  287.027769][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.027776][T11555]  ? trace_contention_end+0x39/0x120
[  287.027784][T11555]  ? __mutex_lock+0x335/0x1350
[  287.027796][T11555]  netlink_rcv_skb+0x208/0x470
[  287.027806][T11555]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  287.027813][T11555]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.027824][T11555]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.027832][T11555]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.027841][T11555]  xfrm_netlink_rcv+0x79/0x90
[  287.027852][T11555]  netlink_unicast+0x82f/0x9e0
[  287.027861][T11555]  ? __pfx_netlink_unicast+0x10/0x10
[  287.027869][T11555]  ? netlink_sendmsg+0x642/0xb30
[  287.027878][T11555]  ? skb_put+0x11b/0x210
[  287.027888][T11555]  netlink_sendmsg+0x805/0xb30
[  287.027898][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.027908][T11555]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.027916][T11555]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.027926][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.027934][T11555]  __sock_sendmsg+0x21c/0x270
[  287.027943][T11555]  ____sys_sendmsg+0x505/0x830
[  287.027954][T11555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.027965][T11555]  ? import_iovec+0x74/0xa0
[  287.027976][T11555]  ___sys_sendmsg+0x21f/0x2a0
[  287.027987][T11555]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.028003][T11555]  ? __fget_files+0x2a/0x420
[  287.028010][T11555]  ? __fget_files+0x3a0/0x420
[  287.028019][T11555]  __x64_sys_sendmsg+0x19b/0x260
[  287.028030][T11555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.028042][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.028050][T11555]  ? do_syscall_64+0xbe/0x3b0
[  287.028060][T11555]  do_syscall_64+0xfa/0x3b0
[  287.028068][T11555]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.028077][T11555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.028084][T11555]  ? exc_page_fault+0x9f/0xf0
[  287.028092][T11555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.028100][T11555] RIP: 0033:0x7fa993d8eba9
[  287.028109][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.028116][T11555] RSP: 002b:00007fa994b71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.028132][T11555] RAX: ffffffffffffffda RBX: 00007fa993fd5fa0 RCX: 00007fa993d8eba9
[  287.028138][T11555] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000003
[  287.028144][T11555] RBP: 00007fa993e11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.028150][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.028155][T11555] R13: 00007fa993fd6038 R14: 00007fa993fd5fa0 R15: 00007ffe537cbce8
[  287.028165][T11555]  </TASK>
[  287.028169][T11555] 
[  287.194883][T11555] Allocated by task 11168:
[  287.196933][T11555]  kasan_save_track+0x3e/0x80
[  287.198968][T11555]  __kasan_slab_alloc+0x6c/0x80
[  287.200996][T11555]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  287.203330][T11555]  xfrm_state_alloc+0x24/0x2f0
[  287.205386][T11555]  pfkey_add+0x6e4/0x2e00
[  287.207312][T11555]  pfkey_sendmsg+0xbfe/0x1090
[  287.209488][T11555]  __sock_sendmsg+0x21c/0x270
[  287.211576][T11555]  ____sys_sendmsg+0x505/0x830
[  287.213677][T11555]  ___sys_sendmsg+0x21f/0x2a0
[  287.215679][T11555]  __x64_sys_sendmsg+0x19b/0x260
[  287.217613][T11555]  do_syscall_64+0xfa/0x3b0
[  287.219215][T11555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.221614][T11555] 
[  287.222577][T11555] Freed by task 7619:
[  287.223959][T11555]  kasan_save_track+0x3e/0x80
[  287.225520][T11555]  kasan_save_free_info+0x46/0x50
[  287.227332][T11555]  __kasan_slab_free+0x5b/0x80
[  287.228941][T11555]  kmem_cache_free+0x18f/0x400
[  287.230563][T11555]  xfrm_state_gc_task+0x52d/0x6b0
[  287.232427][T11555]  process_scheduled_works+0xae1/0x17b0
[  287.234277][T11555]  worker_thread+0x8a0/0xda0
[  287.235797][T11555]  kthread+0x711/0x8a0
[  287.237446][T11555]  ret_from_fork+0x439/0x7d0
[  287.239105][T11555]  ret_from_fork_asm+0x1a/0x30
[  287.241027][T11555] 
[  287.241955][T11555] The buggy address belongs to the object at ffff88810f207180
[  287.241955][T11555]  which belongs to the cache xfrm_state of size 928
[  287.246648][T11555] The buggy address is located 816 bytes inside of
[  287.246648][T11555]  freed 928-byte region [ffff88810f207180, ffff88810f207520)
[  287.251020][T11555] 
[  287.251959][T11555] The buggy address belongs to the physical page:
[  287.254350][T11555] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f207180 pfn:0x10f204
[  287.257726][T11555] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  287.261013][T11555] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  287.263755][T11555] page_type: f5(slab)
[  287.265264][T11555] raw: 057ff00000000040 ffff888104f9b000 dead000000000122 0000000000000000
[  287.268185][T11555] raw: ffff88810f207180 00000000800e0009 00000000f5000000 0000000000000000
[  287.270906][T11555] head: 057ff00000000040 ffff888104f9b000 dead000000000122 0000000000000000
[  287.273830][T11555] head: ffff88810f207180 00000000800e0009 00000000f5000000 0000000000000000
[  287.276869][T11555] head: 057ff00000000002 ffffea00043c8101 00000000ffffffff 00000000ffffffff
[  287.280137][T11555] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  287.283789][T11555] page dumped because: kasan: bad access detected
[  287.286323][T11555] page_owner tracks the page as allocated
[  287.288544][T11555] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6065, tgid 6064 (syz.1.45), ts 77394021848, free_ts 77230794219
[  287.295852][T11555]  post_alloc_hook+0x240/0x2a0
[  287.297796][T11555]  get_page_from_freelist+0x21e4/0x22c0
[  287.299673][T11555]  __alloc_frozen_pages_noprof+0x181/0x370
[  287.301651][T11555]  alloc_pages_mpol+0x232/0x4a0
[  287.303275][T11555]  allocate_slab+0x8a/0x370
[  287.304711][T11555]  ___slab_alloc+0xbeb/0x1420
[  287.306245][T11555]  kmem_cache_alloc_noprof+0x283/0x3c0
[  287.307935][T11555]  xfrm_state_alloc+0x24/0x2f0
[  287.309527][T11555]  __find_acq_core+0x8a7/0x1c00
[  287.311091][T11555]  xfrm_find_acq+0x78/0xa0
[  287.312705][T11555]  xfrm_alloc_userspi+0x6b3/0xc90
[  287.314514][T11555]  xfrm_user_rcv_msg+0x7a3/0xab0
[  287.316159][T11555]  netlink_rcv_skb+0x208/0x470
[  287.317906][T11555]  xfrm_netlink_rcv+0x79/0x90
[  287.319567][T11555]  netlink_unicast+0x82f/0x9e0
[  287.321352][T11555]  netlink_sendmsg+0x805/0xb30
[  287.323002][T11555] page last free pid 5920 tgid 5920 stack trace:
[  287.325026][T11555]  __free_frozen_pages+0xbc4/0xd30
[  287.326650][T11555]  __put_partials+0x156/0x1a0
[  287.328157][T11555]  put_cpu_partial+0x17c/0x250
[  287.329698][T11555]  __slab_free+0x2d5/0x3c0
[  287.331150][T11555]  qlist_free_all+0x97/0x140
[  287.332820][T11555]  kasan_quarantine_reduce+0x148/0x160
[  287.334944][T11555]  __kasan_slab_alloc+0x22/0x80
[  287.336718][T11555]  __kmalloc_noprof+0x224/0x4f0
[  287.338642][T11555]  tomoyo_realpath_from_path+0xe3/0x5d0
[  287.340815][T11555]  tomoyo_path_perm+0x213/0x4b0
[  287.342750][T11555]  tomoyo_path_unlink+0xa2/0xe0
[  287.344756][T11555]  security_path_unlink+0x167/0x360
[  287.346834][T11555]  do_unlinkat+0x2c1/0x560
[  287.348495][T11555]  __x64_sys_unlink+0x47/0x50
[  287.350238][T11555]  do_syscall_64+0xfa/0x3b0
[  287.351819][T11555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.353771][T11555] 
[  287.354526][T11555] Memory state around the buggy address:
[  287.356369][T11555]  ffff88810f207380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  287.358987][T11555]  ffff88810f207400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  287.361607][T11555] >ffff88810f207480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  287.364085][T11555]                                      ^
[  287.365766][T11555]  ffff88810f207500: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  287.368395][T11555]  ffff88810f207580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  287.371311][T11555] ==================================================================
[  287.374904][T11555] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  287.377393][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.5.2250 Not tainted syzkaller #0 PREEMPT(full) 
[  287.380201][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.383437][T11555] Call Trace:
[  287.384526][T11555]  <TASK>
[  287.385507][T11555]  dump_stack_lvl+0x99/0x250
[  287.387104][T11555]  ? __asan_memcpy+0x40/0x70
[  287.388767][T11555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.390551][T11555]  ? __pfx__printk+0x10/0x10
[  287.392382][T11555]  vpanic+0x281/0x750
[  287.393667][T11555]  ? __pfx_vpanic+0x10/0x10
[  287.395148][T11555]  ? irqentry_exit+0x74/0x90
[  287.396674][T11555]  panic+0xb9/0xc0
[  287.397814][T11555]  ? __pfx_panic+0x10/0x10
[  287.399469][T11555]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  287.401899][T11555]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  287.404243][T11555]  ? is_module_address+0x17/0xf0
[  287.406283][T11555]  ? __xfrm_state_insert+0x8af/0x1450
[  287.408398][T11555]  check_panic_on_warn+0x89/0xb0
[  287.410134][T11555]  ? __xfrm_state_insert+0x8af/0x1450
[  287.412039][T11555]  end_report+0x78/0x160
[  287.413396][T11555]  kasan_report+0x129/0x150
[  287.414801][T11555]  ? __xfrm_state_insert+0x8af/0x1450
[  287.416543][T11555]  __xfrm_state_insert+0x8af/0x1450
[  287.418358][T11555]  ? xfrm_state_insert+0x44/0x60
[  287.420014][T11555]  xfrm_state_insert+0x54/0x60
[  287.421852][T11555]  ipcomp6_init_state+0x655/0x900
[  287.423673][T11555]  __xfrm_init_state+0xa76/0x13f0
[  287.425287][T11555]  ? __xfrm_init_state+0x7ef/0x13f0
[  287.426873][T11555]  xfrm_add_sa+0x2f5b/0x4070
[  287.428334][T11555]  ? __pfx_xfrm_add_sa+0x10/0x10
[  287.429926][T11555]  ? apparmor_capable+0x137/0x1b0
[  287.431958][T11555]  ? __nla_parse+0x40/0x60
[  287.433624][T11555]  xfrm_user_rcv_msg+0x7a3/0xab0
[  287.435338][T11555]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  287.437137][T11555]  ? __pfx___mutex_trylock_common+0x10/0x10
[  287.439071][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.440578][T11555]  ? trace_contention_end+0x39/0x120
[  287.442515][T11555]  ? __mutex_lock+0x335/0x1350
[  287.444069][T11555]  netlink_rcv_skb+0x208/0x470
[  287.445724][T11555]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  287.447508][T11555]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.449261][T11555]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.450907][T11555]  ? netlink_deliver_tap+0x2e/0x1b0
[  287.452939][T11555]  xfrm_netlink_rcv+0x79/0x90
[  287.454517][T11555]  netlink_unicast+0x82f/0x9e0
[  287.455968][T11555]  ? __pfx_netlink_unicast+0x10/0x10
[  287.457686][T11555]  ? netlink_sendmsg+0x642/0xb30
[  287.459270][T11555]  ? skb_put+0x11b/0x210
[  287.460827][T11555]  netlink_sendmsg+0x805/0xb30
[  287.462729][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.464571][T11555]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.466287][T11555]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.468342][T11555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.470293][T11555]  __sock_sendmsg+0x21c/0x270
[  287.472086][T11555]  ____sys_sendmsg+0x505/0x830
[  287.473674][T11555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.475425][T11555]  ? import_iovec+0x74/0xa0
[  287.477067][T11555]  ___sys_sendmsg+0x21f/0x2a0
[  287.478772][T11555]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.480605][T11555]  ? __fget_files+0x2a/0x420
[  287.482474][T11555]  ? __fget_files+0x3a0/0x420
[  287.484136][T11555]  __x64_sys_sendmsg+0x19b/0x260
[  287.485755][T11555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.487492][T11555]  ? rcu_is_watching+0x15/0xb0
[  287.489019][T11555]  ? do_syscall_64+0xbe/0x3b0
[  287.490604][T11555]  do_syscall_64+0xfa/0x3b0
[  287.492429][T11555]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.494136][T11555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.496083][T11555]  ? exc_page_fault+0x9f/0xf0
[  287.497612][T11555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.499502][T11555] RIP: 0033:0x7fa993d8eba9
[  287.500936][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.507155][T11555] RSP: 002b:00007fa994b71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.509822][T11555] RAX: ffffffffffffffda RBX: 00007fa993fd5fa0 RCX: 00007fa993d8eba9
[  287.512631][T11555] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000003
[  287.515171][T11555] RBP: 00007fa993e11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.517693][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.520250][T11555] R13: 00007fa993fd6038 R14: 00007fa993fd5fa0 R15: 00007ffe537cbce8
[  287.522775][T11555]  </TASK>
[  287.524464][T11555] Kernel Offset: disabled
[  287.525807][T11555] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:02:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000004e9f RDI=0000000000004ea0 RBP=00000000000003f8 RSP=ffffc9000309e9f0
R8 =ffff88801ff40237 R9 =1ffff11003fe8046 R10=dffffc0000000000 R11=ffffffff855018c0
R12=dffffc0000000000 R13=ffffffff99b03900 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550193c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa994b716c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558ff35808 CR3=0000000129b98000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa993fa7498 00007fa993fa7470 XMM03=00007fa993fa74a8 00007fa993fa74a0
XMM04=00007fa994b0d100 00007fa993fa7460 XMM05=00007fa993fa7478 00007fa993fa74c0
XMM06=00007fa993fa74b8 00007fa993fa74b0 XMM07=00007fa993fa74a8 00007fa993fa74a0
XMM08=0000000000000000 00007fa993e12ee7 XMM09=0000000000000000 00007fa993e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bffe31 RBX=dffffc0000000000 RCX=39070e27607f1f00 RDX=0000000000000000
RSI=ffffffff8dbaa117 RDI=ffffffff8be34280 RBP=1ffff11003c7a755 RSP=ffffc9000333f710
R8 =ffffffff8fa3b237 R9 =1ffffffff1f47646 R10=dffffc0000000000 R11=fffffbfff1f47647
R12=ffff88801e3d3980 R13=ffff88801e3d3980 R14=000000000000945d R15=ffff8881076f4600
RIP=ffffffff8192962a RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558b8d1500 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000010b64a000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=01d7c00302100001 d7b00304f0100001 XMM03=080001d7e0030010 0001d7d003001000
XMM04=0000000000000000 0000000000000000 XMM05=000055558b8eb6f6 000055558b8eb390
XMM06=000055558b91b114 000055558b91b110 XMM07=0001d7d003001000 01d7c00302100001
XMM08=d7b00304f0100001 d6900300080004e8 XMM09=5f2e656369766564 5f72657473696765
XMM10=6666666666666666 0a38332e79656b5f XMM11=6c5f63666e206220 3032643631306139
XMM12=2062203032326131 3061396666666666 XMM13=695f646165685f65 756575715f626b73
XMM14=6666666666660a79 656b5f5f2e74696e XMM15=5f61782062203034 3261313061396666
