last executing test programs:

1.75638018s ago: executing program 0 (id=1966):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x16, &(0x7f0000000040), 0xcf)

1.67203533s ago: executing program 0 (id=1970):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x8000)

1.602908368s ago: executing program 0 (id=1971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fb, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008800)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x2400feff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f0000"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r3, 0x0, 0x4000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "46c9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0), 0x2000000, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
r5 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8919, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.601919224s ago: executing program 1 (id=1973):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a01889b00000000000000020000000900020073797a32000000000900010073797a30"], 0x2c}}, 0x8004)

1.527721994s ago: executing program 2 (id=1975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.525464918s ago: executing program 2 (id=1976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0)

1.404576998s ago: executing program 1 (id=1977):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf22, 0x0, 0x0, 0x0, 0x7fff}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x700}}, [@generic={0x76, 0x7, 0x1, 0x4, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xd4, &(0x7f0000000040)=""/212, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff8d}, 0x25)

1.403973541s ago: executing program 2 (id=1978):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000500)=""/126, 0x7e, <r0=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

1.403634784s ago: executing program 1 (id=1979):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)

1.403138076s ago: executing program 2 (id=1980):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0)

1.295954419s ago: executing program 1 (id=1981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000002800038024000080080003"], 0xd8}}, 0x0)

1.233495178s ago: executing program 1 (id=1982):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000)=r3, 0x8)

972.440974ms ago: executing program 0 (id=1983):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000091401ff"], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004)

348.800442ms ago: executing program 2 (id=1984):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(r1)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000079000000010001b82a384e", @ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)

348.370722ms ago: executing program 1 (id=1985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r1, 0x0, 0x30000001)
sendmsg$NFT_BATCH(r0, 0x0, 0x8040)

200.573808ms ago: executing program 0 (id=1986):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a8000800a40004080032a0901461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e216d25b4084121d9d322fe7c9f8775730d16a4683f5a360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15952503fdee7a129d8d9e604196", 0xd8}], 0x1}, 0x24002040)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r3, 0x8010743f, 0xf0ff1f00000000)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0x28}, 0x41)

9.002128ms ago: executing program 0 (id=1987):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000"], 0x6c}}, 0x40000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

0s ago: executing program 2 (id=1988):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa00000000000000001700080078"], 0x108}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6012' (ED25519) to the list of known hosts.
syzkaller login: [   57.465265][ T5836] cgroup: Unknown subsys name 'net'
[   57.649534][ T5836] cgroup: Unknown subsys name 'cpuset'
[   57.654963][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.533554][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.282230][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.284151][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.293863][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.298428][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.298963][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.302127][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.307541][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.310653][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.314986][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.319159][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.321881][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.328722][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.394625][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.398714][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.402676][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.410082][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.413411][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.782239][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   71.876652][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   71.906368][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   71.977909][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.981490][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.984490][ T5874] bridge_slave_0: entered allmulticast mode
[   71.989019][ T5874] bridge_slave_0: entered promiscuous mode
[   72.030593][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.033386][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.036150][ T5874] bridge_slave_1: entered allmulticast mode
[   72.040771][ T5874] bridge_slave_1: entered promiscuous mode
[   72.110139][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.113099][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.115976][ T5868] bridge_slave_0: entered allmulticast mode
[   72.119723][ T5868] bridge_slave_0: entered promiscuous mode
[   72.125106][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.131097][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.159346][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.161934][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.164608][ T5868] bridge_slave_1: entered allmulticast mode
[   72.168716][ T5868] bridge_slave_1: entered promiscuous mode
[   72.200610][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.203436][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.206313][ T5867] bridge_slave_0: entered allmulticast mode
[   72.210977][ T5867] bridge_slave_0: entered promiscuous mode
[   72.240111][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.242856][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.245660][ T5867] bridge_slave_1: entered allmulticast mode
[   72.250729][ T5867] bridge_slave_1: entered promiscuous mode
[   72.268333][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.273343][ T5874] team0: Port device team_slave_0 added
[   72.278387][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.299305][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.304177][ T5874] team0: Port device team_slave_1 added
[   72.332176][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.370530][ T5868] team0: Port device team_slave_0 added
[   72.374133][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.376837][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.386005][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.410025][ T5867] team0: Port device team_slave_0 added
[   72.414468][ T5867] team0: Port device team_slave_1 added
[   72.418301][ T5868] team0: Port device team_slave_1 added
[   72.421562][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.424341][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.434641][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.490628][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.493313][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.503108][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.508747][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.511230][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.520320][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.538787][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.541452][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.552228][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.576189][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.579216][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.587476][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.641491][ T5868] hsr_slave_0: entered promiscuous mode
[   72.644635][ T5868] hsr_slave_1: entered promiscuous mode
[   72.654833][ T5874] hsr_slave_0: entered promiscuous mode
[   72.658162][ T5874] hsr_slave_1: entered promiscuous mode
[   72.661047][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   72.663330][ T5874] Cannot create hsr debugfs directory
[   72.734413][ T5867] hsr_slave_0: entered promiscuous mode
[   72.737781][ T5867] hsr_slave_1: entered promiscuous mode
[   72.740724][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   72.742995][ T5867] Cannot create hsr debugfs directory
[   73.085004][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.096725][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.104075][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.118814][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.155726][ T5874] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.169108][ T5874] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.183037][ T5874] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.202760][ T5874] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.269333][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.281281][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.289842][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.301392][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.354225][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.367995][   T55] Bluetooth: hci1: command tx timeout
[   73.370719][ T5870] Bluetooth: hci0: command tx timeout
[   73.405047][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   73.419741][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.422691][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.447177][ T5870] Bluetooth: hci2: command tx timeout
[   73.453841][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.456823][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.466243][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.508460][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   73.534620][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.537516][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.562065][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.564855][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.592753][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.634625][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   73.658455][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.660822][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.674303][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.676767][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.714791][ T5867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.723922][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.773319][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.869888][ T5868] veth0_vlan: entered promiscuous mode
[   73.898340][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.905469][ T5868] veth1_vlan: entered promiscuous mode
[   73.943523][ T5868] veth0_macvtap: entered promiscuous mode
[   73.956109][ T5868] veth1_macvtap: entered promiscuous mode
[   73.965903][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.002908][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.010612][ T5874] veth0_vlan: entered promiscuous mode
[   74.018938][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.031933][ T5874] veth1_vlan: entered promiscuous mode
[   74.042324][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.058270][ T5866] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.074221][ T5867] veth0_vlan: entered promiscuous mode
[   74.087713][ T5866] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.091348][ T5866] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.102049][ T5867] veth1_vlan: entered promiscuous mode
[   74.152359][ T5874] veth0_macvtap: entered promiscuous mode
[   74.189899][ T5874] veth1_macvtap: entered promiscuous mode
[   74.206438][ T5867] veth0_macvtap: entered promiscuous mode
[   74.214227][ T5867] veth1_macvtap: entered promiscuous mode
[   74.235387][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.242511][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.269047][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.288594][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.293392][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.295382][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.300182][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.326995][ T5896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.330344][ T5896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.333680][ T5896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.340612][ T5896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.345451][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.378250][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.395186][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.400215][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.436719][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.440202][ T5896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.569301][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.575937][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.645461][    C0] hrtimer: interrupt took 131943 ns
[   74.682269][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.685836][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.721232][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.725642][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.787996][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.791024][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.094281][ T5941] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   75.273015][ T5943] : renamed from wg2 (while UP)
[   75.448262][   T55] Bluetooth: hci1: command tx timeout
[   75.450476][ T5870] Bluetooth: hci0: command tx timeout
[   75.526844][ T5870] Bluetooth: hci2: command tx timeout
[   75.626064][ T5965] netlink: 'syz.1.24': attribute type 3 has an invalid length.
[   75.755849][ T5971] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.28'.
[   75.764898][ T5971] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.28'.
[   76.160665][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[   76.164357][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'.
[   76.304387][ T5998] netlink: 948 bytes leftover after parsing attributes in process `syz.1.41'.
[   76.325451][ T5999] delete_channel: no stack
[   77.537645][   T55] Bluetooth: hci1: command tx timeout
[   77.540849][ T5870] Bluetooth: hci0: command tx timeout
[   77.562552][ T6035] netlink: 'syz.0.57': attribute type 7 has an invalid length.
[   77.607566][   T55] Bluetooth: hci2: command tx timeout
[   77.926083][ T6049] warning: `syz.1.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.289231][ T6056] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.507602][ T6067] netlink: 92 bytes leftover after parsing attributes in process `syz.2.70'.
[   78.530083][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   78.549938][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.656417][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.74'.
[   79.345009][ T6100] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.86'.
[   79.422807][ T6103] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.85'.
[   79.608076][   T55] Bluetooth: hci1: command tx timeout
[   79.610222][   T55] Bluetooth: hci0: command tx timeout
[   79.687627][   T55] Bluetooth: hci2: command tx timeout
[   80.768291][ T6132] netlink: 'syz.0.98': attribute type 10 has an invalid length.
[   81.359384][ T6148] netlink: 'syz.1.107': attribute type 2 has an invalid length.
[   81.376176][ T6148] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   81.669329][ T6153] netlink: 'syz.1.109': attribute type 13 has an invalid length.
[   81.682846][ T6153] netlink: 'syz.1.109': attribute type 17 has an invalid length.
[   81.794018][ T6153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.893944][ T6157] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.111'.
[   81.912202][ T6157] openvswitch: netlink: Message has 6 unknown bytes.
[   82.299813][ T6177] netlink: 68 bytes leftover after parsing attributes in process `syz.1.120'.
[   82.401307][ T6178] netlink: 'syz.1.120': attribute type 10 has an invalid length.
[   82.730469][  T976] cfg80211: failed to load regulatory.db
[   82.986156][ T6209] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   83.162417][ T6218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.139'.
[   83.507794][ T6236] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   83.527195][ T6236] Zero length message leads to an empty skb
[   83.983655][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.166'.
[   84.112263][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   84.116059][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   84.120509][ T6281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.170'.
[   84.975624][ T6313] netlink: 'syz.2.178': attribute type 12 has an invalid length.
[   84.982087][ T6313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.178'.
[   85.143734][ T6324] netlink: 'syz.2.183': attribute type 39 has an invalid length.
[   85.345818][ T6326] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   85.352758][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   85.507091][ T6337] openvswitch: netlink: IPv4 tunnel dst address is zero
[   85.719860][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'.
[   86.226382][ T6359] =======================================================
[   86.226382][ T6359] WARNING: The mand mount option has been deprecated and
[   86.226382][ T6359]          and is ignored by this kernel. Remove the mand
[   86.226382][ T6359]          option from the mount to silence this warning.
[   86.226382][ T6359] =======================================================
[   86.870086][ T6368] netlink: 'syz.2.198': attribute type 10 has an invalid length.
[   86.895705][ T6368] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   86.912394][ T6368] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   86.927415][ T6368] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   87.777380][   T53] wlan1: Trigger new scan to find an IBSS to join
[   88.325951][ T6400] __nla_validate_parse: 1 callbacks suppressed
[   88.325963][ T6400] netlink: 200 bytes leftover after parsing attributes in process `syz.0.214'.
[   88.826810][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.219'.
[   88.845255][ T6418] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[   89.076919][ T6422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.222'.
[   89.145281][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.222'.
[   89.850385][ T6454] netlink: 'syz.2.236': attribute type 4 has an invalid length.
[   89.853539][ T6454] netlink: 211448 bytes leftover after parsing attributes in process `syz.2.236'.
[   89.943930][ T6443] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.230'.
[   90.224560][ T6470] nftables ruleset with unbound set
[   90.767943][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1041427470 wd_nsec: 1041427502
[   90.931717][ T6478] netlink: 'syz.0.244': attribute type 10 has an invalid length.
[   90.934645][ T6478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.244'.
[   90.941965][ T6478] team0: entered promiscuous mode
[   90.944583][ T6478] team_slave_0: entered promiscuous mode
[   90.949141][ T6478] team_slave_1: entered promiscuous mode
[   90.951406][ T6478] team0: entered allmulticast mode
[   90.955015][ T6478] team_slave_0: entered allmulticast mode
[   90.965119][ T6478] team_slave_1: entered allmulticast mode
[   90.980893][ T6478] bridge0: port 3(team0) entered blocking state
[   91.005966][ T6478] bridge0: port 3(team0) entered disabled state
[   91.022645][ T6478] bridge0: port 3(team0) entered blocking state
[   91.025869][ T6478] bridge0: port 3(team0) entered forwarding state
[   91.767350][   T28] wlan1: Trigger new scan to find an IBSS to join
[   91.798611][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.249'.
[   92.196381][ T6497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.253'.
[   94.808453][ T2997] wlan1: Trigger new scan to find an IBSS to join
[   96.613062][ T2997] wlan1: Creating new IBSS network, BSSID e2:e5:5b:4d:2f:c3
[   96.822971][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'.
[   96.908039][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   97.194738][ T6540] netlink: 'syz.2.273': attribute type 11 has an invalid length.
[   99.866064][ T6602] netlink: 'syz.1.302': attribute type 9 has an invalid length.
[   99.872001][ T6602] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.302'.
[  100.214854][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'.
[  100.288184][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'.
[  100.589484][ T6641] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.314'.
[  100.637485][ T6641] netlink: zone id is out of range
[  100.640528][ T6641] netlink: zone id is out of range
[  100.644693][ T6641] netlink: zone id is out of range
[  100.678654][ T6641] netlink: get zone limit has 8 unknown bytes
[  100.682587][ T6647] netlink: 'syz.0.319': attribute type 25 has an invalid length.
[  100.727809][ T5879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.806378][ T5879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.867704][ T5879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.950074][ T5879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.958265][ T6652] netlink: 'syz.0.321': attribute type 29 has an invalid length.
[  100.965423][ T6652] netlink: 'syz.0.321': attribute type 29 has an invalid length.
[  100.985457][ T6652] netlink: 'syz.0.321': attribute type 29 has an invalid length.
[  101.093410][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.098101][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.101857][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.107952][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.112772][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.132318][ T6653] netlink: 'syz.0.321': attribute type 29 has an invalid length.
[  101.273992][ T5879] bridge_slave_1: left allmulticast mode
[  101.276946][ T5879] bridge_slave_1: left promiscuous mode
[  101.280882][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.290456][ T5879] bridge_slave_0: left allmulticast mode
[  101.292781][ T5879] bridge_slave_0: left promiscuous mode
[  101.295298][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.556320][ T6670] netlink: 495 bytes leftover after parsing attributes in process `syz.1.327'.
[  101.749625][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.756274][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.763260][ T5879] bond0 (unregistering): Released all slaves
[  101.988342][ T6688] netlink: 'syz.1.333': attribute type 10 has an invalid length.
[  103.095553][ T6688] veth0_vlan: left promiscuous mode
[  103.100436][ T6688] veth0_vlan: entered promiscuous mode
[  103.104910][ T6688] team0: Device veth0_vlan failed to register rx_handler
[  103.200524][ T6694] netlink: 104 bytes leftover after parsing attributes in process `syz.1.335'.
[  103.208733][ T5870] Bluetooth: hci0: command tx timeout
[  103.351258][ T6654] chnl_net:caif_netlink_parms(): no params data found
[  103.539990][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.542620][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.544902][ T6654] bridge_slave_0: entered allmulticast mode
[  103.549018][ T6654] bridge_slave_0: entered promiscuous mode
[  103.582419][ T5879] hsr_slave_0: left promiscuous mode
[  103.590766][ T5879] hsr_slave_1: left promiscuous mode
[  103.596736][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.599744][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.607449][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.610076][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.644081][ T5879] veth1_macvtap: left promiscuous mode
[  103.649914][ T6722] netlink: 'syz.1.342': attribute type 23 has an invalid length.
[  103.655497][ T5879] veth0_macvtap: left promiscuous mode
[  103.658748][ T5879] veth1_vlan: left promiscuous mode
[  103.660584][ T5879] veth0_vlan: left promiscuous mode
[  103.685248][ T6724] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[  103.697305][ T6724] netlink: 'syz.0.343': attribute type 4 has an invalid length.
[  103.713328][ T6724] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.343'.
[  103.726254][ T6724] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.343'.
[  104.085572][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  104.144743][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  104.517297][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.520278][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.523816][ T6654] bridge_slave_1: entered allmulticast mode
[  104.531658][ T6654] bridge_slave_1: entered promiscuous mode
[  104.612897][ T6654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.627573][ T6654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.803629][ T6654] team0: Port device team_slave_0 added
[  104.818771][ T6654] team0: Port device team_slave_1 added
[  104.919753][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.934332][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.963114][ T6654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.981633][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.996369][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.014439][ T6654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.251641][ T6654] hsr_slave_0: entered promiscuous mode
[  105.258776][ T6654] hsr_slave_1: entered promiscuous mode
[  105.265809][ T6654] debugfs: 'hsr0' already exists in 'hsr'
[  105.275591][ T6654] Cannot create hsr debugfs directory
[  105.287726][ T5870] Bluetooth: hci0: command tx timeout
[  105.499787][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[  105.573046][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.363'.
[  105.603565][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.363'.
[  105.610376][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.363'.
[  106.368946][ T6654] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.385569][ T6654] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.392782][ T6776] validate_nla: 2 callbacks suppressed
[  106.392858][ T6776] netlink: 'syz.0.360': attribute type 29 has an invalid length.
[  106.408950][ T6776] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[  106.412138][ T6776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.360'.
[  106.428309][ T6654] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.451061][ T6654] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.717335][ T6654] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.748400][ T6654] 8021q: adding VLAN 0 to HW filter on device team0
[  106.771464][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.774402][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.801456][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.804375][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.863281][ T6654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.876792][ T6654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.162570][ T6654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.227995][ T6844] netlink: 176 bytes leftover after parsing attributes in process `syz.0.376'.
[  107.234884][ T6654] veth0_vlan: entered promiscuous mode
[  107.268350][ T6654] veth1_vlan: entered promiscuous mode
[  107.345281][ T6654] veth0_macvtap: entered promiscuous mode
[  107.363409][ T6654] veth1_macvtap: entered promiscuous mode
[  107.367286][ T5870] Bluetooth: hci0: command tx timeout
[  107.434017][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.479891][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.502538][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.510157][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.513164][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.654099][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.908573][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.911808][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.983284][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.985520][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'.
[  108.986359][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.164156][ T6878] netlink: 'syz.1.384': attribute type 21 has an invalid length.
[  109.369964][ T6880] netlink: 56 bytes leftover after parsing attributes in process `syz.0.386'.
[  109.447537][ T5870] Bluetooth: hci0: command tx timeout
[  109.621391][ T6896] netlink: 'syz.2.392': attribute type 4 has an invalid length.
[  110.273489][ T6908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.398'.
[  110.385547][ T6908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.398'.
[  110.730407][ T6908] netlink: 72 bytes leftover after parsing attributes in process `syz.2.398'.
[  110.865439][ T6938] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[  110.882953][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[  111.427873][ T6964] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.418'.
[  111.820720][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  112.824077][ T7012] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  113.691217][ T7042] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.450'.
[  113.797803][   T33] audit: type=1107 audit(1757979353.859:2): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  113.915698][ T7050] netlink: 152 bytes leftover after parsing attributes in process `syz.0.454'.
[  113.971486][ T7050] tc_dump_action: action bad kind
[  114.481222][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'.
[  114.807176][ T3746] wlan1: Trigger new scan to find an IBSS to join
[  114.815936][ T5870] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  114.937479][ T7101] netlink: 'syz.0.478': attribute type 10 has an invalid length.
[  114.943564][ T7101] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.478'.
[  115.400278][ T7110] netlink: 'syz.2.482': attribute type 22 has an invalid length.
[  115.403236][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'.
[  115.791759][ T7124] : renamed from team_slave_1 (while UP)
[  115.911717][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'.
[  116.104809][ T5879] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.128592][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.131560][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.139330][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.142373][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.285637][ T7122] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  116.372972][ T7144] netlink: 'syz.1.497': attribute type 21 has an invalid length.
[  116.656291][ T7122] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  116.807729][ T2997] wlan1: Creating new IBSS network, BSSID 86:1c:41:ee:2d:52
[  116.867503][ T7155] : renamed from bond_slave_0 (while UP)
[  117.031346][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'.
[  117.592795][ T7179] netlink: 324 bytes leftover after parsing attributes in process `syz.0.512'.
[  117.950928][ T7205] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.524'.
[  118.185022][ T7207] syz.1.525 uses obsolete (PF_INET,SOCK_PACKET)
[  119.021452][ T7244] netlink: 'syz.0.542': attribute type 6 has an invalid length.
[  119.221295][ T7218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.225089][ T7218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.441491][ T7255] netlink: 'syz.2.547': attribute type 21 has an invalid length.
[  119.444505][ T7255] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.998407][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  122.141631][ T7328] netlink: 'syz.1.576': attribute type 29 has an invalid length.
[  122.146151][ T7314] delete_channel: no stack
[  122.151487][ T7328] netlink: 'syz.1.576': attribute type 29 has an invalid length.
[  122.161605][ T7328] netlink: 'syz.1.576': attribute type 29 has an invalid length.
[  123.300554][ T7354] C: renamed from team_slave_0 (while UP)
[  123.307942][ T7354] netlink: 'syz.2.588': attribute type 3 has an invalid length.
[  123.310696][ T7354] netlink: 'syz.2.588': attribute type 1 has an invalid length.
[  123.314084][ T7354] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  123.681325][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'.
[  123.763551][ T7383] netlink: 64 bytes leftover after parsing attributes in process `syz.0.602'.
[  124.532209][ T7403] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.026164][ T7412] netlink: 'syz.0.614': attribute type 2 has an invalid length.
[  125.040672][ T7412] netlink: 51 bytes leftover after parsing attributes in process `syz.0.614'.
[  125.099193][ T7415] netlink: 'syz.1.615': attribute type 3 has an invalid length.
[  125.103049][ T7415] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  125.192428][ T7415] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.615'.
[  125.405664][ T7432] netlink: 376 bytes leftover after parsing attributes in process `syz.2.623'.
[  125.414075][ T7432] netlink: 376 bytes leftover after parsing attributes in process `syz.2.623'.
[  125.956420][ T7459] nftables ruleset with unbound chain
[  126.046865][ T7465] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[  126.322793][ T7477] netlink: 'syz.2.643': attribute type 10 has an invalid length.
[  126.442368][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  126.446222][ T7482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.645'.
[  126.604835][ T7485] syzkaller0: entered promiscuous mode
[  126.614546][ T7485] syzkaller0: entered allmulticast mode
[  129.107346][ T7556] sctp: [Deprecated]: syz.1.674 (pid 7556) Use of int in maxseg socket option.
[  129.107346][ T7556] Use struct sctp_assoc_value instead
[  129.409737][ T7568] netlink: 104 bytes leftover after parsing attributes in process `syz.2.680'.
[  129.857333][ T7582] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  130.652871][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  130.679647][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  130.797684][ T7634] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.711'.
[  131.949389][   T33] audit: type=1107 audit(1757979372.009:3): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  132.023629][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  132.229306][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  132.232978][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  132.445016][ T7688] netlink: 14 bytes leftover after parsing attributes in process `syz.2.735'.
[  132.731387][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.733908][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  135.792005][ T7721] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.749'.
[  135.958325][ T7738] openvswitch: netlink: IP tunnel dst address not specified
[  135.984275][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.758'.
[  136.079354][ T7746] netlink: 'syz.1.761': attribute type 13 has an invalid length.
[  136.371480][ T7770] netlink: 'syz.2.772': attribute type 21 has an invalid length.
[  136.563536][ T7788] netlink: 208 bytes leftover after parsing attributes in process `syz.2.779'.
[  136.637308][ T5870] Bluetooth: hci0: Malformed LE Event: 0x0d
[  136.948565][ T7811] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  137.144780][ T7828] tap0: tun_chr_ioctl cmd 2147767517
[  137.665655][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.816'.
[  137.669403][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.816'.
[  137.875997][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'.
[  137.880078][ T7893] netlink: 'syz.0.828': attribute type 2 has an invalid length.
[  137.967196][ T7903] netlink: 'syz.1.833': attribute type 21 has an invalid length.
[  137.970237][ T7903] netlink: 168 bytes leftover after parsing attributes in process `syz.1.833'.
[  138.694606][ T7941] netlink: 'syz.1.849': attribute type 21 has an invalid length.
[  139.671236][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'.
[  139.678899][ T7973] netlink: 'syz.1.864': attribute type 2 has an invalid length.
[  139.682494][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'.
[  139.752375][ T7979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.867'.
[  139.842540][ T7989] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  139.876267][ T7992] netlink: 'syz.1.873': attribute type 11 has an invalid length.
[  139.881036][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.482245][ T8031] netlink: 'syz.2.891': attribute type 3 has an invalid length.
[  140.486259][ T8031] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.502371][ T8033] netlink: 'syz.1.892': attribute type 6 has an invalid length.
[  140.770061][ T8051] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.999767][ T8068] __nla_validate_parse: 3 callbacks suppressed
[  140.999785][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.908'.
[  141.090726][ T8077] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.913'.
[  141.315160][ T8094] netlink: 328 bytes leftover after parsing attributes in process `syz.0.921'.
[  141.768935][ T8119] option changes via remount are deprecated (pid=8117 comm=syz.1.933)
[  141.906372][ T8136] netlink: 'syz.0.941': attribute type 10 has an invalid length.
[  141.909802][ T8136] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.941'.
[  141.920922][ T8137] netlink: 48 bytes leftover after parsing attributes in process `syz.1.942'.
[  141.933029][ T8137] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  142.045969][ T5870] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  142.310873][ T8172] netlink: 'syz.1.959': attribute type 2 has an invalid length.
[  142.471015][ T5870] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  142.471519][ T8186] @: renamed from bond_slave_0 (while UP)
[  142.665350][ T8202] netlink: 2 bytes leftover after parsing attributes in process `syz.0.969'.
[  142.955967][ T8215] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.975'.
[  142.959793][ T8215] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.975'.
[  142.963996][ T8215] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.975'.
[  143.913715][ T5870] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  143.942064][ T8235] netlink: 'syz.0.983': attribute type 29 has an invalid length.
[  143.947979][ T8235] netlink: 'syz.0.983': attribute type 29 has an invalid length.
[  144.003047][ T8242] netlink: 'syz.2.987': attribute type 4 has an invalid length.
[  144.006105][ T8242] netlink: 152 bytes leftover after parsing attributes in process `syz.2.987'.
[  144.015662][ T8242] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  144.032518][ T8243] _Z`Ԁ@S!!: entered promiscuous mode
[  147.322328][ T8298] __nla_validate_parse: 2 callbacks suppressed
[  147.322346][ T8298] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1011'.
[  147.799192][ T8330] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1026'.
[  147.864290][ T8330] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1026'.
[  147.888022][ T8330] netlink: 'syz.0.1026': attribute type 10 has an invalid length.
[  147.995045][ T8338] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1026'.
[  148.114055][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'.
[  148.119835][ T8330] veth0_vlan: left promiscuous mode
[  148.176645][ T8330] veth0_vlan: entered promiscuous mode
[  148.257561][ T8330] team0: Device veth0_vlan failed to register rx_handler
[  149.559848][ T8355] netlink: 'syz.1.1034': attribute type 6 has an invalid length.
[  149.563198][ T8355] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1034'.
[  149.853838][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'.
[  149.857833][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  149.862167][ T8368] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1040'.
[  149.868247][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  149.900317][ T8370] netlink: 'syz.0.1041': attribute type 10 has an invalid length.
[  150.343149][ T8382] ip6tnl0: mtu less than device minimum
[  150.683195][ T8408] netlink: 'syz.1.1054': attribute type 10 has an invalid length.
[  151.406699][ T8452] bridge0: port 3(team0) entered disabled state
[  151.409390][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.412382][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.445936][ T8452] bridge0: entered allmulticast mode
[  151.514529][ T8454] bridge0: port 3(team0) entered disabled state
[  151.805211][ T8454] bridge_slave_1: left allmulticast mode
[  151.839159][ T8454] bridge_slave_1: left promiscuous mode
[  151.882205][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.953987][ T8454] bridge_slave_0: left allmulticast mode
[  151.957430][ T8454] bridge_slave_0: left promiscuous mode
[  151.962334][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.350992][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.354281][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.359358][ T8464] bridge0: entered allmulticast mode
[  152.573207][ T8464] bridge_slave_1: left allmulticast mode
[  152.575235][ T8464] bridge_slave_1: left promiscuous mode
[  152.578330][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.591515][ T8464] bridge_slave_0: left allmulticast mode
[  152.594451][ T8464] bridge_slave_0: left promiscuous mode
[  152.597519][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.924159][ T8477] __nla_validate_parse: 10 callbacks suppressed
[  152.924177][ T8477] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1083'.
[  153.039676][ T8482] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1086'.
[  153.043905][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1086'.
[  154.256102][ T8517] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1102'.
[  154.376723][ T8523] syzkaller0: entered promiscuous mode
[  154.378957][ T8523] syzkaller0: entered allmulticast mode
[  155.568516][ T8522] pim6reg1: entered allmulticast mode
[  156.298762][ T8562] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1117'.
[  156.930875][ T8572] netlink: 'syz.0.1121': attribute type 10 has an invalid length.
[  157.271597][ T8572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  157.301789][ T8566] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.304875][ T8566] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.457722][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'.
[  159.479084][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'.
[  159.482111][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'.
[  159.604819][ T8628] netlink: 'syz.2.1144': attribute type 21 has an invalid length.
[  159.616688][ T8628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1144'.
[  159.764618][ T8637] netlink: 'syz.0.1149': attribute type 10 has an invalid length.
[  159.778952][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  159.800116][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.803890][ T8637] batadv0: entered promiscuous mode
[  159.806169][ T8637] batadv0: entered allmulticast mode
[  159.810838][ T8637] team0: Port device batadv0 added
[  160.441730][ T8689] syzkaller1: entered promiscuous mode
[  160.443911][ T8689] syzkaller1: entered allmulticast mode
[  160.470552][ T8692] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1175'.
[  161.777346][ T8728] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  161.780171][ T8728] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  161.938593][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'.
[  162.124685][ T8751] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1203'.
[  162.167096][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'.
[  162.181058][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'.
[  164.122927][ T8820] netlink: 'syz.2.1236': attribute type 11 has an invalid length.
[  164.125478][ T8820] netlink: 'syz.2.1236': attribute type 11 has an invalid length.
[  164.308745][ T8832] bridge_slave_0: entered allmulticast mode
[  164.685925][ T8851] __nla_validate_parse: 8 callbacks suppressed
[  164.685978][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'.
[  165.643154][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'.
[  165.671103][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  165.674076][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'.
[  165.680479][ T8865] netlink: 'syz.1.1256': attribute type 21 has an invalid length.
[  165.685572][ T8865] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1256'.
[  166.452833][ T8885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1265'.
[  166.819319][ T8912] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1276'.
[  166.972433][ T8922] wg0 speed is unknown, defaulting to 1000
[  166.975997][ T8922] wg0 speed is unknown, defaulting to 1000
[  167.016117][ T8922] wg0 speed is unknown, defaulting to 1000
[  167.211803][ T8922] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  167.360460][ T8922] wg0 speed is unknown, defaulting to 1000
[  167.381389][ T8922] wg0 speed is unknown, defaulting to 1000
[  167.398479][ T8922] wg0 speed is unknown, defaulting to 1000
[  167.529601][ T8935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.662192][ T8941] netlink: 'syz.2.1290': attribute type 10 has an invalid length.
[  167.875808][ T8941] bridge0: port 3(netdevsim0) entered blocking state
[  167.880462][ T8941] bridge0: port 3(netdevsim0) entered disabled state
[  167.885723][ T8941] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  167.912271][ T8941] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  167.989259][ T8951] netlink: 'syz.1.1293': attribute type 1 has an invalid length.
[  167.993963][ T8951] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1293'.
[  168.058547][ T8952] lo speed is unknown, defaulting to 1000
[  168.061341][ T8952] lo speed is unknown, defaulting to 1000
[  168.064096][ T8952] lo speed is unknown, defaulting to 1000
[  168.078118][ T8952] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  168.099412][ T8952] lo speed is unknown, defaulting to 1000
[  168.102520][ T8952] lo speed is unknown, defaulting to 1000
[  168.105450][ T8952] lo speed is unknown, defaulting to 1000
[  168.702955][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'.
[  168.740761][ T8967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.827885][ T8973] sctp: [Deprecated]: syz.1.1302 (pid 8973) Use of int in max_burst socket option deprecated.
[  168.827885][ T8973] Use struct sctp_assoc_value instead
[  168.922735][ T8985] netlink: 'syz.2.1308': attribute type 37 has an invalid length.
[  169.018604][ T8991] netlink: 'syz.2.1311': attribute type 58 has an invalid length.
[  169.021240][ T8991] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1311'.
[  169.941352][ T9015] __nla_validate_parse: 1 callbacks suppressed
[  169.941363][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1320'.
[  170.380155][ T9028] netlink: 'syz.2.1325': attribute type 39 has an invalid length.
[  170.421477][ T5316] wg0 speed is unknown, defaulting to 1000
[  170.423775][ T5316] infiniband syz0: ib_query_port failed (-19)
[  170.429583][ T9030] netlink: 'syz.0.1326': attribute type 10 has an invalid length.
[  170.562661][ T9030] team_slave_0: left promiscuous mode
[  170.565365][ T9030] team_slave_0: left allmulticast mode
[  170.592953][ T9030] team0 (unregistering): Port device team_slave_0 removed
[  170.596342][ T9030] team_slave_1: left promiscuous mode
[  170.601282][ T9030] team_slave_1: left allmulticast mode
[  170.614704][ T9030] team0 (unregistering): Port device team_slave_1 removed
[  170.619307][ T9030] batadv0: left promiscuous mode
[  170.621978][ T9030] batadv0: left allmulticast mode
[  170.638753][ T9030] team0 (unregistering): Port device batadv0 removed
[  171.040140][ T9047] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1331'.
[  171.101622][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'.
[  171.621635][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  172.057838][ T9082] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1348'.
[  172.065351][ T9080] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1347'.
[  172.177164][ T9090] netlink: 'syz.2.1352': attribute type 13 has an invalid length.
[  172.179698][ T9090] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1352'.
[  172.264610][   T55] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  172.487305][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  172.493719][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  172.515518][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1362'.
[  174.333765][ T5870] Bluetooth: hci0: command 0x0406 tx timeout
[  174.368797][ T9187] netlink: 'syz.1.1397': attribute type 10 has an invalid length.
[  174.371883][ T9187] batman_adv: batadv0: Adding interface: netdevsim0
[  174.374221][ T9187] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.382920][ T9187] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  174.682179][ T9211] netlink: 'syz.1.1406': attribute type 10 has an invalid length.
[  174.868768][ T9211] team0 (unregistering): Port device team_slave_0 removed
[  174.877694][ T9211] team0 (unregistering): Port device 26 removed
[  175.059339][ T9235] openvswitch: netlink: Multiple metadata blocks provided
[  175.729661][ T9267] netlink: 'syz.1.1430': attribute type 7 has an invalid length.
[  176.316219][ T9302] __nla_validate_parse: 6 callbacks suppressed
[  176.331553][ T9302] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1446'.
[  176.430745][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'.
[  176.779427][ T9330] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.971960][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1460'.
[  176.987920][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'.
[  177.007749][ T9337] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1461'.
[  178.045495][ T9351] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1467'.
[  178.203139][ T9349] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1466'.
[  178.471668][ T9377] netlink: 'syz.1.1480': attribute type 21 has an invalid length.
[  178.519691][ T9381] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1482'.
[  178.553723][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1483'.
[  178.557884][ T9383] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1483'.
[  178.596344][ T9387] netlink: 'syz.0.1485': attribute type 29 has an invalid length.
[  178.605761][ T9387] netlink: 'syz.0.1485': attribute type 29 has an invalid length.
[  178.633172][ T9387] netlink: 'syz.0.1485': attribute type 29 has an invalid length.
[  178.644147][ T9385] netlink: 'syz.2.1484': attribute type 10 has an invalid length.
[  178.857205][ T9385] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  179.043335][ T9415] netlink: 'syz.2.1498': attribute type 3 has an invalid length.
[  179.145735][ T9423] netlink: 'syz.0.1502': attribute type 3 has an invalid length.
[  179.149060][ T9423] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  179.198081][ T9426] syzkaller0: tun_chr_ioctl cmd 1074025677
[  179.200558][ T9426] syzkaller0: linktype set to 801
[  180.158778][ T9450] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  180.161914][ T9450] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.877558][ T9484] netlink: 'syz.1.1527': attribute type 21 has an invalid length.
[  180.880666][ T9484] netlink: 'syz.1.1527': attribute type 15 has an invalid length.
[  180.883592][ T9484] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.888346][ T9484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.891375][ T9484] IPv6: NLM_F_CREATE should be set when creating new route
[  180.894137][ T9484] IPv6: NLM_F_CREATE should be set when creating new route
[  180.896957][ T9484] IPv6: NLM_F_CREATE should be set when creating new route
[  181.041394][ T9452] delete_channel: no stack
[  181.532765][ T9498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.813316][ T9522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.103280][ T9534] __nla_validate_parse: 9 callbacks suppressed
[  182.103297][ T9534] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1552'.
[  182.264697][ T9534] bond0 (unregistering): (slave c1): Releasing backup interface
[  182.281524][ T9534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.290386][ T9534] bond0 (unregistering): Released all slaves
[  185.308115][ T9552] validate_nla: 4 callbacks suppressed
[  185.308133][ T9552] netlink: 'syz.2.1558': attribute type 2 has an invalid length.
[  185.628943][ T9562] IPv6: NLM_F_CREATE should be specified when creating new route
[  185.832882][ T9569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1565'.
[  185.895150][ T9571] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1566'.
[  185.947394][ T9575] sit0: entered allmulticast mode
[  185.969998][ T9575] sit0: entered promiscuous mode
[  186.001385][ T9571] netlink: 'syz.0.1566': attribute type 10 has an invalid length.
[  186.022506][   T55] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[  186.231620][ T9571] batman_adv: batadv0: Adding interface: netdevsim0
[  186.234384][ T9571] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.269657][ T9571] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  186.580598][   T55] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[  186.922636][ T9608] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1581'.
[  186.963077][ T9608] netlink: 'syz.2.1581': attribute type 10 has an invalid length.
[  186.970430][ T9608] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  186.972746][ T9608] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  186.990383][ T9608] bridge0: port 3(netdevsim0) entered disabled state
[  188.125726][ T9631] netlink: 'syz.0.1590': attribute type 2 has an invalid length.
[  188.133012][ T9631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1590'.
[  188.651159][ T5870] Bluetooth: hci2: command 0x0406 tx timeout
[  188.939174][ T9663] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1604'.
[  188.944702][ T9663] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1604'.
[  189.111968][ T9649] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1597'.
[  189.117740][ T9649] bond_slave_0: entered promiscuous mode
[  189.121866][ T9649] bond_slave_1: entered promiscuous mode
[  189.222756][ T9671] netlink: 'syz.2.1607': attribute type 9 has an invalid length.
[  189.225819][ T9671] netlink: 195776 bytes leftover after parsing attributes in process `syz.2.1607'.
[  189.280032][ T9675] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1609'.
[  190.035665][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'.
[  190.087205][ T5870] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  190.089892][ T5870] Bluetooth: hci2: Injecting HCI hardware error event
[  190.092609][   T55] Bluetooth: hci2: hardware error 0x00
[  190.691557][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'.
[  190.805934][ T9735] netlink: 'syz.1.1634': attribute type 1 has an invalid length.
[  190.809323][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1634'.
[  190.885708][ T9739] netlink: 'syz.1.1636': attribute type 29 has an invalid length.
[  190.900402][ T9739] netlink: 'syz.1.1636': attribute type 29 has an invalid length.
[  190.905033][ T9739] netlink: 'syz.1.1636': attribute type 29 has an invalid length.
[  191.063570][ T9753] openvswitch: netlink: Key type 29 is not supported
[  191.159859][ T9755] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  191.166042][ T9759] syzkaller1: tun_chr_ioctl cmd 1074025677
[  191.170189][ T9759] syzkaller1: linktype set to 776
[  191.655159][ T9783] netlink: 'syz.0.1657': attribute type 29 has an invalid length.
[  191.790218][ T9800] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1665'.
[  191.965063][ T9806] netlink: 'syz.0.1668': attribute type 10 has an invalid length.
[  192.176628][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  194.069316][ T9847] __nla_validate_parse: 1 callbacks suppressed
[  194.069327][ T9847] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1686'.
[  194.075483][ T9847] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1686'.
[  194.176252][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.180251][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.371632][ T9863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1693'.
[  194.375560][ T9861] tun0: tun_chr_ioctl cmd 1074025677
[  194.386726][ T9861] tun0: linktype set to 270
[  194.614983][ T9871] netlink: 'syz.1.1696': attribute type 4 has an invalid length.
[  194.626703][ T9871] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1696'.
[  195.019070][ T9887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  195.171711][ T9900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1709'.
[  195.175237][ T9900] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1709'.
[  195.187845][ T9900] netlink: 'syz.2.1709': attribute type 5 has an invalid length.
[  195.190568][ T9900] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1709'.
[  196.247235][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  196.398636][ T9929] netlink: 'syz.0.1721': attribute type 1 has an invalid length.
[  196.401274][ T9929] netlink: 'syz.0.1721': attribute type 2 has an invalid length.
[  197.278796][   T55] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  197.279497][   T55] Bluetooth: hci0: unexpected event for opcode 0x0000
[  197.613457][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1750'.
[  197.618444][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1750'.
[  197.622834][ T9992] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1750'.
[  199.028170][T10055] netlink: 'syz.1.1779': attribute type 3 has an invalid length.
[  199.031470][T10055] netlink: 'syz.1.1779': attribute type 3 has an invalid length.
[  199.176380][T10063] netlink: 'syz.2.1783': attribute type 31 has an invalid length.
[  199.209924][T10057] __nla_validate_parse: 3 callbacks suppressed
[  199.209979][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'.
[  199.215695][T10057] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1780'.
[  199.935527][T10089] netlink: 'syz.1.1794': attribute type 21 has an invalid length.
[  199.941252][T10089] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1794'.
[  199.952440][T10089] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1794'.
[  200.239509][T10109] netlink: 'syz.0.1803': attribute type 4 has an invalid length.
[  200.242695][T10109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1803'.
[  200.255580][T10109] bond_slave_0: left promiscuous mode
[  200.257445][T10109] bond_slave_1: left promiscuous mode
[  200.262427][T10109] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1803'.
[  200.265861][T10109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  200.372013][T10117] tc_dump_action: action bad kind
[  200.845409][T10129] netlink: 'syz.2.1811': attribute type 3 has an invalid length.
[  200.854262][T10129] netlink: 'syz.2.1811': attribute type 1 has an invalid length.
[  200.857526][T10129] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.1811'.
[  201.205708][T10137] netlink: 'syz.2.1815': attribute type 19 has an invalid length.
[  201.287051][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  201.291859][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  201.297905][ T5870] Bluetooth: hci0: hardware error 0x00
[  201.409130][T10146] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1819'.
[  202.864196][T10156] syzkaller0: entered promiscuous mode
[  202.866409][T10156] syzkaller0: entered allmulticast mode
[  203.367860][ T5870] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  203.746430][T10181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.948903][T10172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1825'.
[  205.117951][T10188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1833'.
[  205.240304][T10205] netlink: 'syz.0.1841': attribute type 21 has an invalid length.
[  205.243446][T10205] netlink: 14565 bytes leftover after parsing attributes in process `syz.0.1841'.
[  205.992648][T10221] netlink: 'syz.1.1849': attribute type 2 has an invalid length.
[  205.995260][T10221] netlink: 'syz.1.1849': attribute type 8 has an invalid length.
[  205.998894][T10221] netlink: 'syz.1.1849': attribute type 9 has an invalid length.
[  206.002056][T10221] netlink: 'syz.1.1849': attribute type 10 has an invalid length.
[  206.005095][T10221] netlink: 'syz.1.1849': attribute type 11 has an invalid length.
[  206.012235][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'.
[  206.690825][T10246] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1859'.
[  206.715402][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  206.856690][T10261] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  207.645022][T10300] netlink: 'syz.0.1885': attribute type 21 has an invalid length.
[  207.661132][T10299] netlink: 'syz.1.1884': attribute type 1 has an invalid length.
[  208.894031][T10340] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1903'.
[  209.681231][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1920'.
[  209.883346][T10386] netdevsim netdevsim0 : renamed from netdevsim0
[  210.018630][T10391] netlink: 'syz.1.1924': attribute type 1 has an invalid length.
[  210.021916][T10391] netlink: 'syz.1.1924': attribute type 3 has an invalid length.
[  210.025150][T10391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1924'.
[  210.331842][T10409] vcan0 speed is unknown, defaulting to 1000
[  210.340456][T10409] vcan0 speed is unknown, defaulting to 1000
[  210.348219][T10409] vcan0 speed is unknown, defaulting to 1000
[  210.545589][ T5870] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  210.824340][T10421] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1938'.
[  211.179150][T10409] infiniband syz1: set active
[  211.182704][ T5316] vcan0 speed is unknown, defaulting to 1000
[  211.185745][T10409] infiniband syz1: added vcan0
[  211.250008][T10409] RDS/IB: syz1: added
[  211.251993][T10409] smc: adding ib device syz1 with port count 1
[  211.254048][T10409] smc:    ib device syz1 port 1 has pnetid 
[  211.264601][ T5316] vcan0 speed is unknown, defaulting to 1000
[  211.269002][T10409] vcan0 speed is unknown, defaulting to 1000
[  211.498675][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'.
[  211.570222][T10409] vcan0 speed is unknown, defaulting to 1000
[  211.705672][T10409] vcan0 speed is unknown, defaulting to 1000
[  211.729056][T10455] netlink: 'syz.1.1953': attribute type 2 has an invalid length.
[  211.948993][T10467] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1954'.
[  212.389246][T10481] wg0 speed is unknown, defaulting to 1000
[  212.394886][T10481] wg0 speed is unknown, defaulting to 1000
[  212.398473][T10481] wg0 speed is unknown, defaulting to 1000
[  212.412574][T10481] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  212.444961][T10481] wg0 speed is unknown, defaulting to 1000
[  212.449917][T10481] wg0 speed is unknown, defaulting to 1000
[  212.454382][T10481] wg0 speed is unknown, defaulting to 1000
[  212.548927][T10491] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1969'.
[  212.562747][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1969'.
[  212.568040][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  212.852319][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'.
[  212.855772][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'.
[  213.912370][T10529] netlink: 'syz.0.1986': attribute type 21 has an invalid length.
[  214.284546][T10538] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  214.289420][T10538] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  214.293751][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.0.1990 Not tainted syzkaller #0 PREEMPT(full) 
[  214.298104][T10538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.302234][T10538] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  214.304540][T10538] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 46 d8 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 0f d9 00 f8 4d 89 3e
[  214.312487][T10538] RSP: 0018:ffffc90004aef0e0 EFLAGS: 00010246
[  214.315011][T10538] RAX: 0000000000000000 RBX: 1ffff11020628516 RCX: dffffc0000000000
[  214.318279][T10538] RDX: ffffc9000f05b000 RSI: 000000000000032b RDI: 000000000000032c
[  214.321628][T10538] RBP: ffffc90004aef230 R08: dffffc0000000000 R09: 0000000000000002
[  214.324933][T10538] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11020628246
[  214.328245][T10538] R13: ffff8881031428b0 R14: 0000000000000000 R15: ffff8881031428a8
[  214.331531][T10538] FS:  00007fc8158c26c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  214.335207][T10538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.337944][T10538] CR2: 0000200000000440 CR3: 000000003f89c000 CR4: 00000000000006f0
[  214.341238][T10538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  214.344562][T10538] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  214.347871][T10538] Call Trace:
[  214.349298][T10538]  <TASK>
[  214.350558][T10538]  ? xfrm_alloc_spi+0x2a0/0xf30
[  214.352569][T10538]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  214.354734][T10538]  ? xfrm_find_acq+0x87/0xa0
[  214.356533][T10538]  xfrm_alloc_userspi+0x70b/0xc90
[  214.358599][T10538]  ? apparmor_capable+0x137/0x1b0
[  214.360703][T10538]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  214.363085][T10538]  ? __nla_parse+0x40/0x60
[  214.365020][T10538]  xfrm_user_rcv_msg+0x7a3/0xab0
[  214.367140][T10538]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.369447][T10538]  ? __pfx___mutex_trylock_common+0x10/0x10
[  214.371862][T10538]  ? rcu_is_watching+0x15/0xb0
[  214.374330][T10538]  ? trace_contention_end+0x39/0x120
[  214.376388][T10538]  ? __mutex_lock+0x335/0x1350
[  214.378425][T10538]  netlink_rcv_skb+0x208/0x470
[  214.380423][T10538]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.382679][T10538]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.385145][T10538]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.387217][T10538]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.389269][T10538]  xfrm_netlink_rcv+0x79/0x90
[  214.391296][T10538]  netlink_unicast+0x82f/0x9e0
[  214.393322][T10538]  ? __pfx_netlink_unicast+0x10/0x10
[  214.395546][T10538]  ? netlink_sendmsg+0x642/0xb30
[  214.397653][T10538]  ? skb_put+0x11b/0x210
[  214.399389][T10538]  netlink_sendmsg+0x805/0xb30
[  214.401366][T10538]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.403539][T10538]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.405614][T10538]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.407829][T10538]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.410041][T10538]  __sock_sendmsg+0x21c/0x270
[  214.412026][T10538]  ____sys_sendmsg+0x505/0x830
[  214.414059][T10538]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.416278][T10538]  ? import_iovec+0x74/0xa0
[  214.418197][T10538]  ___sys_sendmsg+0x21f/0x2a0
[  214.420188][T10538]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.422395][T10538]  ? __fget_files+0x2a/0x420
[  214.424229][T10538]  ? __fget_files+0x3a0/0x420
[  214.426162][T10538]  __x64_sys_sendmsg+0x19b/0x260
[  214.428249][T10538]  ? perf_trace_run_bpf_submit+0x100/0x170
[  214.430703][T10538]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.432846][T10538]  ? rcu_is_watching+0x15/0xb0
[  214.434759][T10538]  ? do_syscall_64+0xbe/0x3b0
[  214.436626][T10538]  do_syscall_64+0xfa/0x3b0
[  214.438486][T10538]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.440670][T10538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.443246][T10538]  ? exc_page_fault+0x9f/0xf0
[  214.445218][T10538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.447703][T10538] RIP: 0033:0x7fc81498eba9
[  214.449592][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.457323][T10538] RSP: 002b:00007fc8158c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.460802][T10538] RAX: ffffffffffffffda RBX: 00007fc814bd5fa0 RCX: 00007fc81498eba9
[  214.464110][T10538] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[  214.467398][T10538] RBP: 00007fc814a11e19 R08: 0000000000000000 R09: 0000000000000000
[  214.470705][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.473988][T10538] R13: 00007fc814bd6038 R14: 00007fc814bd5fa0 R15: 00007fff32bce518
[  214.477306][T10538]  </TASK>
[  214.478641][T10538] Modules linked in:
[  214.480745][T10538] ---[ end trace 0000000000000000 ]---
[  214.483075][T10538] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  214.485506][T10538] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 46 d8 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 0f d9 00 f8 4d 89 3e
[  214.493937][T10538] RSP: 0018:ffffc90004aef0e0 EFLAGS: 00010246
[  214.496434][T10538] RAX: 0000000000000000 RBX: 1ffff11020628516 RCX: dffffc0000000000
[  214.499815][T10538] RDX: ffffc9000f05b000 RSI: 000000000000032b RDI: 000000000000032c
[  214.503146][T10538] RBP: ffffc90004aef230 R08: dffffc0000000000 R09: 0000000000000002
[  214.506542][T10538] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11020628246
[  214.509885][T10538] R13: ffff8881031428b0 R14: 0000000000000000 R15: ffff8881031428a8
[  214.513143][T10538] FS:  00007fc8158c26c0(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  214.516889][T10538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  214.519485][T10538] CR2: 0000200000000440 CR3: 000000003f89c000 CR4: 00000000000006f0
[  214.522826][T10538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  214.526026][T10538] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  214.529401][T10538] Kernel panic - not syncing: Fatal exception in interrupt
[  214.533110][T10538] Kernel Offset: disabled
[  214.534961][T10538] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:37:34  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000001e7 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000001e7 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81704490
R12=0000000010003e13 R13=dffffc0000000000 R14=00000000000001e7 R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f314a9596c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34a21ff8 CR3=000000010a2f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa5e49a7498 00007fa5e49a7470 XMM03=00007fa5e49a74a8 00007fa5e49a74a0
XMM04=00007fa5e550d100 00007fa5e49a7460 XMM05=00007fa5e49a7478 00007fa5e49a74c0
XMM06=00007fa5e49a74b8 00007fa5e49a74b0 XMM07=00007fa5e49a74a8 00007fa5e49a74a0
XMM08=0000000000000000 00007fa5e4812ee7 XMM09=0000000000000000 00007fa5e4812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001464 RDI=0000000000001465 RBP=ffffffff99df76b0 RSP=ffffc90004aee810
R8 =ffff888020ae0237 R9 =1ffff1100415c046 R10=dffffc0000000000 R11=ffffffff854f9fb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa027 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8158c26c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000440 CR3=000000003f89c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc814ba7498 00007fc814ba7470 XMM03=00007fc814ba74a8 00007fc814ba74a0
XMM04=00007fc81570d100 00007fc814ba7460 XMM05=00007fc814ba7478 00007fc814ba74c0
XMM06=00007fc814ba74b8 00007fc814ba74b0 XMM07=00007fc814ba74a8 00007fc814ba74a0
XMM08=0000000000000000 00007fc814a12ee7 XMM09=0000000000000000 00007fc814a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
