last executing test programs:

2m22.96535524s ago: executing program 1 (id=308):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xf}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4)

2m22.888522754s ago: executing program 1 (id=310):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x7fff, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x8}], 0x10}, 0x0)

2m22.887845931s ago: executing program 1 (id=312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1, 0xe}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1f, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb9b, 0x0, 0x0, 0x0, 0x80000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xd9, &(0x7f00000001c0)=""/217, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x2, 0x835}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[r0], &(0x7f0000000380)=[{0x3, 0x1, 0x8, 0x8}, {0x1, 0x1, 0x4, 0x3}, {0x0, 0x200005, 0x2, 0x9}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000580), &(0x7f00000003c0)=r1}, 0x20)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x2b, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x600c0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, 0x0, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000400), &(0x7f0000000500), 0x8}, 0x20)

2m22.704663s ago: executing program 1 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800a0001006c696d69740000002c0002800c00014000000000000000070c000240000000000000971a08000340000000010800054000000c010900010073797a30"], 0xdc}}, 0x0)

2m22.596457292s ago: executing program 1 (id=318):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848480060005e140602000006020e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x65580000}, 0x0)

2m22.135225834s ago: executing program 1 (id=319):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x480c0)
sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044)

2m22.029836955s ago: executing program 32 (id=319):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x480c0)
sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044)

2m13.414166495s ago: executing program 2 (id=438):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d", @ANYRES32, @ANYBLOB='\n?'], 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

2m13.357065019s ago: executing program 2 (id=439):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d401000040000000180000000000000000000000000000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x90)

2m13.304422954s ago: executing program 2 (id=441):
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000380)={@cgroup, 0xffffffffffffffff, 0x4}, 0x20)

2m13.304035817s ago: executing program 2 (id=442):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000037000100feffffff001d0000017c000004008ef20341da3a"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
write$cgroup_subtree(r2, 0x0, 0xfe33)
r3 = socket$kcm(0x18, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x680, 0x4e15}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x28)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)

2m12.384756907s ago: executing program 2 (id=459):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='i2c_write\x00', r0, 0x0, 0xd5}, 0x18)

2m11.245153502s ago: executing program 2 (id=465):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2m11.139493405s ago: executing program 33 (id=465):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

2m2.104289569s ago: executing program 4 (id=538):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081024e81f783db4cb9040a1d080006207c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94177134cf2a2fbff912216efb8000a007a290457fe288d44235fb2e0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000006000)={0x0, 0x0, 0x0}, 0x400c4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
close(0x3)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="785b254001"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

2m1.572013207s ago: executing program 4 (id=547):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

2m1.493853695s ago: executing program 0 (id=548):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x5, 0x0, 0x2b)

2m1.493531577s ago: executing program 0 (id=549):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x60, 0x10, 0x1, 0x70bd2a, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xfff3}, {0xfff1, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x60}, 0x1, 0x0, 0x0, 0x48d0}, 0x0)

2m1.493224089s ago: executing program 4 (id=550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x5, 0x0, 0x1, [@generic="a8"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

2m1.393350452s ago: executing program 4 (id=551):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)

2m1.351544434s ago: executing program 0 (id=553):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x140b, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010)

2m1.283329148s ago: executing program 0 (id=555):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xb, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000)

2m1.282872048s ago: executing program 4 (id=556):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x4004010)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet6(r1, &(0x7f0000002a80)={&(0x7f0000000380)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x88}, 0x20040004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100"/38], 0xb8}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
close(0x3)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m1.107522102s ago: executing program 0 (id=557):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f00000004c0)=""/135, 0x87}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/4096, 0x1000}], 0xa}, 0x40000020)

2m1.051129076s ago: executing program 4 (id=558):
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

2m0.921256534s ago: executing program 34 (id=558):
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

2m0.865277819s ago: executing program 0 (id=560):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48010)
write$cgroup_subtree(r0, 0x0, 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000001000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYBLOB="000000007f00"], 0x6b}, 0xfc00)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="c7330000000043cb8f6b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m0.760326007s ago: executing program 35 (id=560):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48010)
write$cgroup_subtree(r0, 0x0, 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000001000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYBLOB="000000007f00"], 0x6b}, 0xfc00)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX\xf73\xa1\xa2\'\x00\x00\x00\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="c7330000000043cb8f6b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

38.318492844s ago: executing program 6 (id=1557):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x400}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0xfe, 0xa, 0x0, 0x25, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0x6, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1)

37.404914679s ago: executing program 6 (id=1560):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x88, 0x66, &(0x7f00000009c0)=r2, 0x4)

37.321392323s ago: executing program 6 (id=1562):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

37.249910847s ago: executing program 6 (id=1564):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

37.061410605s ago: executing program 6 (id=1567):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100008000008100000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

36.922918418s ago: executing program 6 (id=1569):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00\a'], 0xfe33)

36.744260376s ago: executing program 36 (id=1569):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00\a'], 0xfe33)

1.545266121s ago: executing program 5 (id=2049):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x6f, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x7, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0xff}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)

1.540941123s ago: executing program 3 (id=2050):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8)
r0 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r0, 0x4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x0, 0xfffffffffffffd0b, 0x3, 0x8, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0x10}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x202, 0x10, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)

1.428327238s ago: executing program 3 (id=2052):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.249710606s ago: executing program 7 (id=2055):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c"], 0x0, 0x4a, 0x0, 0x1}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)

1.189331975s ago: executing program 5 (id=2056):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup=r2, 0x2f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.130418951s ago: executing program 7 (id=2057):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x103462, 0x4, 0xacd, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000c060500000000000000000000000003050001"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)

1.130229784s ago: executing program 5 (id=2058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.069913272s ago: executing program 5 (id=2059):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff01000000000000000000000000000100000000000000000200130001"], 0xc0}}, 0x0)

1.069796147s ago: executing program 3 (id=2060):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)

1.010255856s ago: executing program 7 (id=2061):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

116.196886ms ago: executing program 7 (id=2062):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000600000082000013"], 0x0, 0x46, 0x0, 0x1, 0x8}, 0x28)

115.862702ms ago: executing program 3 (id=2063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x38)

115.524458ms ago: executing program 5 (id=2064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002800a000180fffffffc"], 0xec}}, 0x0)

115.43052ms ago: executing program 7 (id=2065):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81", @ANYBLOB="8f83e2"], 0xfe33)

46.300944ms ago: executing program 3 (id=2066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x600}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

46.042612ms ago: executing program 7 (id=2067):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1400000029000b6c690000000000000005000000", 0x14}], 0x1}, 0x40000)

45.793649ms ago: executing program 5 (id=2068):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {0x0, 0x4000000}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x4, 0x0}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20044849}, 0x0)

0s ago: executing program 3 (id=2069):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14379' (ED25519) to the list of known hosts.
syzkaller login: [   56.943916][ T5836] cgroup: Unknown subsys name 'net'
[   57.052372][ T5836] cgroup: Unknown subsys name 'cpuset'
[   57.058897][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.111575][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.557652][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.560923][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.563892][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.566965][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.570389][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.612455][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.615691][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.618919][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.629443][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.632136][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.657634][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.660672][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.663232][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.666011][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.668855][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.840033][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.991472][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.994812][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.997831][ T5851] bridge_slave_0: entered allmulticast mode
[   64.002858][ T5851] bridge_slave_0: entered promiscuous mode
[   64.009732][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.012455][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.015217][ T5851] bridge_slave_1: entered allmulticast mode
[   64.020167][ T5851] bridge_slave_1: entered promiscuous mode
[   64.082120][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.101669][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.110899][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.147148][ T5851] team0: Port device team_slave_0 added
[   64.155416][ T5851] team0: Port device team_slave_1 added
[   64.172367][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.201195][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.203724][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.214914][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.241464][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.244349][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.256405][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.344585][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.347051][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.349949][ T5855] bridge_slave_0: entered allmulticast mode
[   64.352937][ T5855] bridge_slave_0: entered promiscuous mode
[   64.356681][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.359951][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.362624][ T5855] bridge_slave_1: entered allmulticast mode
[   64.365690][ T5855] bridge_slave_1: entered promiscuous mode
[   64.368760][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.371563][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.374464][ T5857] bridge_slave_0: entered allmulticast mode
[   64.377183][ T5857] bridge_slave_0: entered promiscuous mode
[   64.380678][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.383124][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.385979][ T5857] bridge_slave_1: entered allmulticast mode
[   64.390055][ T5857] bridge_slave_1: entered promiscuous mode
[   64.408434][ T5851] hsr_slave_0: entered promiscuous mode
[   64.410836][ T5851] hsr_slave_1: entered promiscuous mode
[   64.465521][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.472088][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.477506][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.503810][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.508837][ T5857] team0: Port device team_slave_0 added
[   64.522742][ T5857] team0: Port device team_slave_1 added
[   64.564388][ T5855] team0: Port device team_slave_0 added
[   64.591970][ T5855] team0: Port device team_slave_1 added
[   64.594716][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.596904][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.604875][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.625761][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.628729][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.636829][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.669379][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.672212][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.682642][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.702160][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.705014][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.716074][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.785143][ T5857] hsr_slave_0: entered promiscuous mode
[   64.787678][ T5857] hsr_slave_1: entered promiscuous mode
[   64.790684][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   64.792488][ T5857] Cannot create hsr debugfs directory
[   64.814823][ T5855] hsr_slave_0: entered promiscuous mode
[   64.817229][ T5855] hsr_slave_1: entered promiscuous mode
[   64.819886][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   64.821777][ T5855] Cannot create hsr debugfs directory
[   64.994326][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.016398][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.046920][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.069548][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.159811][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.182601][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.190750][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.204807][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.244512][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.253843][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.264839][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.269550][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.328824][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.367222][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.385307][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.390327][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.392696][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.414594][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.416800][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.426626][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.439531][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.449971][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.452538][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.470997][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.473336][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.484270][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.492351][  T732] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.494770][  T732] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.506857][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.509383][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.608970][   T55] Bluetooth: hci0: command tx timeout
[   65.678932][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.688565][   T55] Bluetooth: hci1: command tx timeout
[   65.690875][   T55] Bluetooth: hci2: command tx timeout
[   65.712915][ T5851] veth0_vlan: entered promiscuous mode
[   65.722237][ T5851] veth1_vlan: entered promiscuous mode
[   65.772300][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.785262][ T5851] veth0_macvtap: entered promiscuous mode
[   65.794483][ T5851] veth1_macvtap: entered promiscuous mode
[   65.822305][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.836107][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.842766][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.852425][ T5855] veth0_vlan: entered promiscuous mode
[   65.863248][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.871681][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.875046][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.897141][ T5855] veth1_vlan: entered promiscuous mode
[   65.901906][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.967787][ T5857] veth0_vlan: entered promiscuous mode
[   65.982221][ T5855] veth0_macvtap: entered promiscuous mode
[   65.983103][  T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.986417][  T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.990526][ T5857] veth1_vlan: entered promiscuous mode
[   65.997265][ T5855] veth1_macvtap: entered promiscuous mode
[   66.027742][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.034012][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.034757][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.050289][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.064750][ T5723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.080734][ T5857] veth0_macvtap: entered promiscuous mode
[   66.095619][ T5723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.100526][ T5723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.111490][ T5723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.114711][ T5857] veth1_macvtap: entered promiscuous mode
[   66.122131][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.170256][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.190112][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.230200][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.241630][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.244699][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.247586][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.260501][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.273248][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.277739][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.290452][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.294379][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.355349][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.358549][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.385144][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.398550][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.435187][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.435811][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.444808][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.461372][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.551608][ T5927] netlink: 'syz.1.7': attribute type 29 has an invalid length.
[   66.556305][ T5927] netlink: 'syz.1.7': attribute type 29 has an invalid length.
[   66.572456][ T5924] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   66.575335][ T5924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.590952][ T5924] batadv0: entered promiscuous mode
[   66.593337][ T5924] batadv0: entered allmulticast mode
[   66.607424][ T5924] bridge0: port 3(batadv0) entered blocking state
[   66.615154][ T5924] bridge0: port 3(batadv0) entered disabled state
[   66.635501][ T5929] Zero length message leads to an empty skb
[   66.644494][    C1] hrtimer: interrupt took 38030 ns
[   66.662365][ T5924] bridge0: port 3(batadv0) entered blocking state
[   66.665871][ T5924] bridge0: port 3(batadv0) entered forwarding state
[   66.678460][ T5927] netlink: 'syz.1.7': attribute type 29 has an invalid length.
[   66.681733][ T5932] netlink: 'syz.1.7': attribute type 29 has an invalid length.
[   66.690891][ T5723] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   66.693966][ T5723] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   66.873720][ T5940] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9'.
[   67.099258][ T5954] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17'.
[   67.192469][ T5956] netlink: 'syz.0.18': attribute type 11 has an invalid length.
[   67.196242][ T5956] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.254787][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.404365][ T5968] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   67.691006][ T5854] Bluetooth: hci0: command tx timeout
[   67.772438][ T5854] Bluetooth: hci2: command tx timeout
[   67.774631][ T5854] Bluetooth: hci1: command tx timeout
[   68.665339][ T5999] netlink: 'syz.1.34': attribute type 39 has an invalid length.
[   68.685785][ T5999] veth0_macvtap: left promiscuous mode
[   68.835508][ T6007] Unknown options in mask b7f2
[   69.770396][   T55] Bluetooth: hci0: command tx timeout
[   69.848001][ T5854] Bluetooth: hci2: command tx timeout
[   69.850819][   T55] Bluetooth: hci1: command tx timeout
[   71.046134][ T6066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'.
[   71.294244][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.297060][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.849108][   T55] Bluetooth: hci0: command tx timeout
[   71.903405][ T6061] netlink: 830 bytes leftover after parsing attributes in process `syz.1.59'.
[   71.931483][   T55] Bluetooth: hci1: command tx timeout
[   71.931524][ T5854] Bluetooth: hci2: command tx timeout
[   71.956111][ T6072] netlink: 'syz.1.64': attribute type 10 has an invalid length.
[   71.964103][ T6072] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.974467][ T6072] team0: Port device batadv0 added
[   72.670587][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'.
[   72.674764][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   73.049664][ T6122] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   73.055337][ T6122] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   73.220608][ T6134] netlink: 'syz.1.86': attribute type 39 has an invalid length.
[   73.323267][ T6138] syzkaller0: entered promiscuous mode
[   73.325139][ T6138] syzkaller0: entered allmulticast mode
[   73.331823][ T6138] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[   74.530768][ T6147] netlink: 'syz.2.91': attribute type 10 has an invalid length.
[   75.626596][ T6169] netlink: 'syz.0.101': attribute type 21 has an invalid length.
[   75.638442][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   75.772526][ T6179] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   75.850923][ T6185] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   75.854917][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   76.041258][ T6193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'.
[   79.427726][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.441966][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.735560][ T6238] macvtap0: refused to change device tx_queue_len
[   79.966340][ T6246] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.136'.
[   79.977384][ T6246] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.136'.
[   79.987532][ T6246] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.136'.
[   80.061421][ T6244] netlink: 168 bytes leftover after parsing attributes in process `syz.0.135'.
[   81.028754][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.031714][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.036433][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.043712][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.051128][ T6264] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.833235][ T6306] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.160'.
[   82.683318][ T6322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'.
[   82.686973][ T6322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'.
[   82.766542][ T6324] =======================================================
[   82.766542][ T6324] WARNING: The mand mount option has been deprecated and
[   82.766542][ T6324]          and is ignored by this kernel. Remove the mand
[   82.766542][ T6324]          option from the mount to silence this warning.
[   82.766542][ T6324] =======================================================
[   83.971541][ T6339] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   83.992409][ T6342] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.175'.
[   84.115423][ T6349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.179'.
[   84.417787][ T6356] openvswitch: netlink: Flow actions attr not present in new flow.
[   84.424061][ T6356] syzkaller0: entered promiscuous mode
[   84.679629][ T6367] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   84.770420][ T6371] netlink: 168 bytes leftover after parsing attributes in process `syz.1.188'.
[   84.771989][ T6362] Set syz1 is full, maxelem 6117 reached
[   85.394806][ T6408] netlink: 2 bytes leftover after parsing attributes in process `syz.2.205'.
[   85.825996][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.211'.
[   86.331696][ T6440] syz.1.219 uses obsolete (PF_INET,SOCK_PACKET)
[   86.728347][  T795] cfg80211: failed to load regulatory.db
[   87.232166][ T6442] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.220'.
[   87.519784][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   87.696756][ T6468] netlink: 'syz.2.231': attribute type 11 has an invalid length.
[   87.705377][ T6468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.231'.
[   87.859579][ T6483] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.238'.
[   87.897389][ T6485] netlink: 176 bytes leftover after parsing attributes in process `syz.2.239'.
[   89.385109][ T6524] netlink: 'syz.1.252': attribute type 1 has an invalid length.
[   89.924673][ T6547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.005917][ T6556] netlink: 'syz.2.270': attribute type 6 has an invalid length.
[   91.028624][ T6581] netlink: 'syz.2.282': attribute type 3 has an invalid length.
[   91.031681][ T6581] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.282'.
[   91.168422][ T6592] netlink: 'syz.2.287': attribute type 11 has an invalid length.
[   91.170840][ T6592] netlink: 'syz.2.287': attribute type 11 has an invalid length.
[   91.173225][ T6592] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.287'.
[   91.342040][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'.
[   91.400597][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   92.564811][ T6632] netlink: 56 bytes leftover after parsing attributes in process `syz.0.306'.
[   93.491309][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.609179][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[   93.616996][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.694783][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.753910][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.842698][ T5879] bridge_slave_1: left allmulticast mode
[   93.844541][ T5879] bridge_slave_1: left promiscuous mode
[   93.847529][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.853211][ T5879] bridge_slave_0: left allmulticast mode
[   93.854957][ T5879] bridge_slave_0: left promiscuous mode
[   93.856809][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.052947][ T6673] netlink: 'syz.0.321': attribute type 21 has an invalid length.
[   94.055559][ T6673] netlink: 128 bytes leftover after parsing attributes in process `syz.0.321'.
[   94.166146][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.173686][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.179479][ T5879] bond0 (unregistering): Released all slaves
[   94.193686][ T6671] warning: `syz.2.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.199002][ T6673] netlink: 'syz.0.321': attribute type 5 has an invalid length.
[   94.208955][ T6673] netlink: 'syz.0.321': attribute type 6 has an invalid length.
[   94.219854][ T6673] netlink: 3 bytes leftover after parsing attributes in process `syz.0.321'.
[   94.288397][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.294358][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.298963][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.314167][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.327735][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.821573][ T5879] hsr_slave_0: left promiscuous mode
[   94.824485][ T5879] hsr_slave_1: left promiscuous mode
[   94.827406][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.832739][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.836789][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.840095][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.873427][ T5879] veth1_macvtap: left promiscuous mode
[   94.876224][ T5879] veth1_vlan: left promiscuous mode
[   94.881181][ T5879] veth0_vlan: left promiscuous mode
[   94.890942][ T6699] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   95.371052][ T5879] team0 (unregistering): Port device team_slave_1 removed
[   95.399946][ T5879] team0 (unregistering): Port device team_slave_0 removed
[   95.579437][ T5879] team0 (unregistering): Port device batadv0 removed
[   95.673214][ T6719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.338'.
[   95.756706][ T6724] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   95.785929][ T6675] chnl_net:caif_netlink_parms(): no params data found
[   95.961114][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.963496][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.966314][ T6675] bridge_slave_0: entered allmulticast mode
[   95.971735][ T6675] bridge_slave_0: entered promiscuous mode
[   95.975452][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.979150][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.981590][ T6675] bridge_slave_1: entered allmulticast mode
[   95.984395][ T6675] bridge_slave_1: entered promiscuous mode
[   96.025372][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.050858][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.077015][ T6740] tmpfs: Bad value for 'gid'
[   96.078995][ T6740] tmpfs: Bad value for 'gid'
[   96.115558][ T6675] team0: Port device team_slave_0 added
[   96.126631][ T6675] team0: Port device team_slave_1 added
[   96.183192][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.185440][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.208962][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.214739][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.219150][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.243026][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.301127][ T6675] hsr_slave_0: entered promiscuous mode
[   96.304055][ T6675] hsr_slave_1: entered promiscuous mode
[   96.408057][ T5854] Bluetooth: hci0: command tx timeout
[   96.543641][ T6675] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.569886][ T6675] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.589606][ T6675] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.601738][ T6675] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.685175][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.688546][ T6675] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.691611][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.694472][ T6675] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.740505][  T732] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.745220][  T732] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.787326][ T6786] netlink: 'syz.0.356': attribute type 29 has an invalid length.
[   96.810585][ T6786] netlink: 'syz.0.356': attribute type 29 has an invalid length.
[   96.820531][ T6786] netlink: 'syz.0.356': attribute type 29 has an invalid length.
[   96.838581][ T6786] netlink: 'syz.0.356': attribute type 29 has an invalid length.
[   96.913369][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.944441][ T6675] 8021q: adding VLAN 0 to HW filter on device team0
[   96.960715][  T732] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.963639][  T732] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.001886][  T732] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.004757][  T732] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.055990][ T6675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.262225][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.299319][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'.
[   97.311764][ T6812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'.
[   97.337395][ T6815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.364'.
[   97.346662][ T6675] veth0_vlan: entered promiscuous mode
[   97.360737][ T6675] veth1_vlan: entered promiscuous mode
[   97.466526][ T6815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.500992][ T6675] veth0_macvtap: entered promiscuous mode
[   97.506436][ T6675] veth1_macvtap: entered promiscuous mode
[   97.517824][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.526018][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.535340][ T5865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.542878][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.545844][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.550988][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.612993][ T4958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.617179][ T4958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.640174][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.643094][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.824696][ T6838] delete_channel: no stack
[   97.829493][ T6838] delete_channel: no stack
[   97.863733][ T6840] netlink: 'syz.0.376': attribute type 21 has an invalid length.
[   98.113899][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.269651][ T6852] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   98.493985][ T5854] Bluetooth: hci0: command tx timeout
[   98.717680][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[   98.876402][ T6871] netlink: 'syz.2.389': attribute type 10 has an invalid length.
[   98.893438][ T6871] bridge0: port 3() entered blocking state
[   98.896244][ T6871] bridge0: port 3() entered disabled state
[   98.910819][ T6871] netdevsim netdevsim2 : entered allmulticast mode
[   98.924596][ T6871] netdevsim netdevsim2 : entered promiscuous mode
[   99.958061][ T6899] raw_sendmsg: syz.0.401 forgot to set AF_INET. Fix it!
[  100.016056][ T6902] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.403'.
[  100.042429][ T6905] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.404'.
[  100.458289][ T6925] netlink: 168 bytes leftover after parsing attributes in process `syz.2.413'.
[  100.543429][ T6932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.572264][ T5854] Bluetooth: hci0: command tx timeout
[  100.690924][ T6937] syzkaller0: entered promiscuous mode
[  100.693188][ T6937] syzkaller0: entered allmulticast mode
[  101.915063][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'.
[  102.371000][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'.
[  102.618509][ T7004] netlink: 'syz.3.447': attribute type 21 has an invalid length.
[  102.621771][ T7004] netlink: 128 bytes leftover after parsing attributes in process `syz.3.447'.
[  102.625611][ T7004] netlink: 3 bytes leftover after parsing attributes in process `syz.3.447'.
[  102.648044][ T5854] Bluetooth: hci0: command tx timeout
[  102.871146][ T7022] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.456'.
[  103.987569][ T7037] netlink: 'syz.0.461': attribute type 2 has an invalid length.
[  103.994574][ T7037] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.461'.
[  103.997847][ T7037] nbd: must specify a device to reconfigure
[  104.233392][ T7043] syzkaller0: entered promiscuous mode
[  104.235130][ T7043] syzkaller0: entered allmulticast mode
[  104.706120][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  104.718637][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  104.734877][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  104.745389][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  104.765683][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.386218][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.519700][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.593677][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.657704][   T13] netdevsim netdevsim2  (unregistering): left allmulticast mode
[  105.670447][   T13] netdevsim netdevsim2  (unregistering): left promiscuous mode
[  105.674277][   T13] bridge0: port 3() entered disabled state
[  106.234058][   T13] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.531331][ T7047] chnl_net:caif_netlink_parms(): no params data found
[  106.622335][ T7071] netlink: 'syz.3.474': attribute type 11 has an invalid length.
[  106.624959][ T7071] netlink: 8420 bytes leftover after parsing attributes in process `syz.3.474'.
[  106.818211][   T55] Bluetooth: hci2: command tx timeout
[  106.827741][   T13] bridge_slave_1: left allmulticast mode
[  106.832898][   T13] bridge_slave_1: left promiscuous mode
[  106.836681][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.853689][   T13] bridge_slave_0: left allmulticast mode
[  106.855912][   T13] bridge_slave_0: left promiscuous mode
[  106.860092][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.415672][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.425200][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.432272][   T13] bond0 (unregistering): Released all slaves
[  107.459484][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.462485][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.465695][ T7047] bridge_slave_0: entered allmulticast mode
[  107.474184][ T7047] bridge_slave_0: entered promiscuous mode
[  107.483214][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.485677][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.491263][ T7047] bridge_slave_1: entered allmulticast mode
[  107.494391][ T7047] bridge_slave_1: entered promiscuous mode
[  107.547373][ T7047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.606409][ T7047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.621577][ T7089] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.481'.
[  107.648681][ T7089] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[  107.665699][ T7047] team0: Port device team_slave_0 added
[  107.719097][ T7047] team0: Port device team_slave_1 added
[  107.786711][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.793726][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.807094][ T7047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.845067][ T7047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.848124][ T7047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.861251][ T7047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.880809][   T13] hsr_slave_0: left promiscuous mode
[  107.883815][   T13] hsr_slave_1: left promiscuous mode
[  107.903358][   T13] veth1_macvtap: left promiscuous mode
[  107.905334][   T13] veth0_macvtap: left promiscuous mode
[  107.907211][   T13] veth1_vlan: left promiscuous mode
[  107.910028][   T13] veth0_vlan: left promiscuous mode
[  108.076738][ T7098] bpf: Bad value for 'mode'
[  108.891022][   T55] Bluetooth: hci2: command tx timeout
[  108.981514][ T7103] netlink: 188 bytes leftover after parsing attributes in process `syz.0.487'.
[  109.039925][   T13] team0 (unregistering): Port device team_slave_1 removed
[  109.071772][   T13] team0 (unregistering): Port device team_slave_0 removed
[  109.448758][ T7047] hsr_slave_0: entered promiscuous mode
[  109.451516][ T7047] hsr_slave_1: entered promiscuous mode
[  109.455086][ T7047] debugfs: 'hsr0' already exists in 'hsr'
[  109.458725][ T7047] Cannot create hsr debugfs directory
[  109.645169][ T7047] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  109.654570][ T7047] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  109.672742][ T7047] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  109.682605][ T7047] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  109.694722][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'.
[  109.759890][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.782309][ T7047] 8021q: adding VLAN 0 to HW filter on device team0
[  109.789995][ T7117] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.491'.
[  109.793360][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.795799][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.812624][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.815540][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.990528][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'.
[  109.991206][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.225382][ T7047] veth0_vlan: entered promiscuous mode
[  110.398310][ T7047] veth1_vlan: entered promiscuous mode
[  110.526363][ T7047] veth0_macvtap: entered promiscuous mode
[  110.532573][ T7047] veth1_macvtap: entered promiscuous mode
[  110.544506][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.552240][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.561576][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.566097][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.576492][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.584098][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.670922][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.697269][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.731242][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.734822][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.739220][ T7153] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.502'.
[  110.970005][   T55] Bluetooth: hci2: command tx timeout
[  111.341299][ T7177] netlink: 'syz.0.512': attribute type 21 has an invalid length.
[  111.612640][ T7185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.516'.
[  111.684467][ T7185] hsr_slave_0: left promiscuous mode
[  111.695368][ T7185] hsr_slave_1: left promiscuous mode
[  111.792641][ T7189] netlink: 'syz.4.518': attribute type 29 has an invalid length.
[  111.796912][ T7189] netlink: 'syz.4.518': attribute type 29 has an invalid length.
[  112.312927][ T7220] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  112.512722][ T7232] netlink: 51 bytes leftover after parsing attributes in process `syz.4.532'.
[  113.048193][   T55] Bluetooth: hci2: command tx timeout
[  113.423784][ T7245] netlink: 'syz.0.537': attribute type 1 has an invalid length.
[  113.432143][ T7245] netlink: 17 bytes leftover after parsing attributes in process `syz.0.537'.
[  113.477167][ T7247] netlink: 'syz.4.538': attribute type 21 has an invalid length.
[  113.480670][ T7247] netlink: 'syz.4.538': attribute type 15 has an invalid length.
[  113.485525][ T7247] netlink: 156 bytes leftover after parsing attributes in process `syz.4.538'.
[  113.490953][ T7239] netlink: 'syz.3.535': attribute type 10 has an invalid length.
[  113.495105][ T7247] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.500724][ T7247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.504085][ T7247] IPv6: NLM_F_CREATE should be set when creating new route
[  113.508946][ T7247] IPv6: NLM_F_CREATE should be set when creating new route
[  113.512566][ T7247] IPv6: NLM_F_CREATE should be set when creating new route
[  113.565786][ T7239] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  113.974245][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'.
[  114.031279][ T7267] netlink: 'syz.4.547': attribute type 21 has an invalid length.
[  114.034526][ T7267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.547'.
[  114.114428][ T7273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.549'.
[  114.167318][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'.
[  114.194890][ T7275] netlink: 'syz.4.551': attribute type 12 has an invalid length.
[  114.207451][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.551'.
[  114.275279][ T7283] netlink: 156 bytes leftover after parsing attributes in process `syz.0.555'.
[  114.525575][ T5723] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.644829][ T5723] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.702665][ T5723] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.755774][ T5723] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.869709][ T5723] bridge_slave_1: left allmulticast mode
[  114.872154][ T5723] bridge_slave_1: left promiscuous mode
[  114.874611][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.882239][ T5723] bridge_slave_0: left allmulticast mode
[  114.884117][ T5723] bridge_slave_0: left promiscuous mode
[  114.886217][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.143267][ T5723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.151056][ T5723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.156045][ T5723] bond0 (unregistering): Released all slaves
[  115.400830][ T5723] hsr_slave_0: left promiscuous mode
[  115.403945][ T5723] hsr_slave_1: left promiscuous mode
[  115.406582][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.409559][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.413053][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.415661][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.425708][ T5723] veth1_macvtap: left promiscuous mode
[  115.427635][ T5723] veth0_macvtap: left promiscuous mode
[  115.429690][ T5723] veth1_vlan: left promiscuous mode
[  115.431644][ T5723] veth0_vlan: left promiscuous mode
[  115.782855][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.786709][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.795437][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.799735][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.802989][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.923874][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.929590][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.933613][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.946060][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.957690][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.055000][ T5723] team0 (unregistering): Port device team_slave_1 removed
[  116.085703][ T5723] team0 (unregistering): Port device team_slave_0 removed
[  116.545884][ T7314] netlink: 26 bytes leftover after parsing attributes in process `syz.3.565'.
[  116.650397][ T7319] netlink: 'syz.3.566': attribute type 1 has an invalid length.
[  116.660491][ T7319] netlink: 'syz.3.566': attribute type 2 has an invalid length.
[  116.776819][ T7311] chnl_net:caif_netlink_parms(): no params data found
[  116.882175][ T7308] chnl_net:caif_netlink_parms(): no params data found
[  116.890672][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.892924][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.901295][ T7311] bridge_slave_0: entered allmulticast mode
[  116.908406][ T7311] bridge_slave_0: entered promiscuous mode
[  116.915890][ T7333] netlink: 'syz.3.570': attribute type 2 has an invalid length.
[  116.919024][ T7333] netlink: 'syz.3.570': attribute type 1 has an invalid length.
[  116.921726][ T7333] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.570'.
[  116.925738][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.928934][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.929512][ T7333] nbd: couldn't find a device at index 16
[  116.931302][ T7311] bridge_slave_1: entered allmulticast mode
[  116.936066][ T7311] bridge_slave_1: entered promiscuous mode
[  117.033347][ T7311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.050515][ T7311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.090053][ T5723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.152385][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.155306][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.159537][ T7308] bridge_slave_0: entered allmulticast mode
[  117.163333][ T7308] bridge_slave_0: entered promiscuous mode
[  117.169854][ T7311] team0: Port device team_slave_0 added
[  117.174706][ T7311] team0: Port device team_slave_1 added
[  117.194668][ T5723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.207689][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.215573][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.221301][ T7308] bridge_slave_1: entered allmulticast mode
[  117.225586][ T7308] bridge_slave_1: entered promiscuous mode
[  117.328143][ T5723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.367806][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.372290][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.375895][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.388899][ T7311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.397100][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.419781][ T7311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.422944][ T7311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.437461][ T7311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.471284][ T5723] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.514817][ T7308] team0: Port device team_slave_0 added
[  117.519127][ T7308] team0: Port device team_slave_1 added
[  117.639893][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.642086][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.651037][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.670594][ T7311] hsr_slave_0: entered promiscuous mode
[  117.673204][ T7311] hsr_slave_1: entered promiscuous mode
[  117.676070][ T7311] debugfs: 'hsr0' already exists in 'hsr'
[  117.679633][ T7311] Cannot create hsr debugfs directory
[  117.682628][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.684989][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.695194][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.856918][ T7308] hsr_slave_0: entered promiscuous mode
[  117.859578][ T5854] Bluetooth: hci1: command tx timeout
[  117.861118][ T7308] hsr_slave_1: entered promiscuous mode
[  117.864873][ T7308] debugfs: 'hsr0' already exists in 'hsr'
[  117.867261][ T7308] Cannot create hsr debugfs directory
[  118.008217][ T5854] Bluetooth: hci2: command tx timeout
[  118.021508][ T5723] bridge0: port 3(batadv0) entered disabled state
[  118.030717][ T5723] bridge_slave_1: left allmulticast mode
[  118.032607][ T5723] bridge_slave_1: left promiscuous mode
[  118.035997][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.046838][ T5723] bridge_slave_0: left allmulticast mode
[  118.050222][ T5723] bridge_slave_0: left promiscuous mode
[  118.052546][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.421651][ T5723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.438505][ T5723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.442958][ T5723] bond0 (unregistering): Released all slaves
[  118.700984][ T7311] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  118.987255][ T7311] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  119.040973][ T7311] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  119.066423][ T7311] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  119.126822][ T7308] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  119.199779][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.202399][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.209726][ T5723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.212059][ T5723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.241678][ T5723] veth1_macvtap: left promiscuous mode
[  119.244238][ T5723] veth0_macvtap: left promiscuous mode
[  119.246341][ T5723] veth1_vlan: left promiscuous mode
[  119.249111][ T5723] veth0_vlan: left promiscuous mode
[  119.852288][ T5723] team0 (unregistering): Port device team_slave_1 removed
[  119.917853][ T5723] team0 (unregistering): Port device team_slave_0 removed
[  119.939002][   T55] Bluetooth: hci1: command tx timeout
[  120.088919][   T55] Bluetooth: hci2: command tx timeout
[  120.375207][ T7308] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  120.387298][ T7355] mac80211_hwsim hwsim9 .3c: renamed from wlan1
[  120.396488][ T7308] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  120.413461][ T7308] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  120.605224][ T7311] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.642657][   T55] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  120.662376][ T7311] 8021q: adding VLAN 0 to HW filter on device team0
[  120.677643][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.688233][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.691354][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.733197][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.736241][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.757853][ T7308] 8021q: adding VLAN 0 to HW filter on device team0
[  120.773930][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.776886][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.810813][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.813767][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.123473][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.133454][ T7311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.411071][ T7403] netlink: 'syz.3.586': attribute type 10 has an invalid length.
[  121.414051][ T7403] __nla_validate_parse: 2 callbacks suppressed
[  121.414128][ T7403] netlink: 55 bytes leftover after parsing attributes in process `syz.3.586'.
[  121.637384][ T7308] veth0_vlan: entered promiscuous mode
[  121.655622][ T7311] veth0_vlan: entered promiscuous mode
[  121.661439][ T7308] veth1_vlan: entered promiscuous mode
[  121.676349][ T7311] veth1_vlan: entered promiscuous mode
[  121.704995][ T7406] netlink: 'syz.3.587': attribute type 4 has an invalid length.
[  121.709612][ T7406] netlink: 'syz.3.587': attribute type 1 has an invalid length.
[  121.715643][ T7406] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.587'.
[  121.720024][ T7308] veth0_macvtap: entered promiscuous mode
[  121.722045][ T7308] veth1_macvtap: entered promiscuous mode
[  121.729379][ T7311] veth0_macvtap: entered promiscuous mode
[  121.737826][ T7311] veth1_macvtap: entered promiscuous mode
[  121.742410][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.753961][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.767606][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.799951][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.805753][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.816075][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.829602][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.854599][ T7311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.921921][ T5879] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.924827][ T5879] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.927623][ T5879] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.963990][ T4958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.967533][ T5879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.978480][ T4958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.008107][   T55] Bluetooth: hci1: command tx timeout
[  122.032426][ T7416] netlink: 703 bytes leftover after parsing attributes in process `syz.3.591'.
[  122.074747][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.085984][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.120776][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.123954][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.167112][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.179381][   T55] Bluetooth: hci2: command tx timeout
[  122.185306][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.466567][ T7421] syzkaller0: entered promiscuous mode
[  122.469680][ T7421] syzkaller0: entered allmulticast mode
[  123.792046][ T7458] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.805989][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'.
[  124.031959][ T7467] netlink: 112 bytes leftover after parsing attributes in process `syz.6.611'.
[  124.103378][   T55] Bluetooth: hci1: command tx timeout
[  124.258401][   T55] Bluetooth: hci2: command tx timeout
[  124.307776][ T7475] netlink: 'syz.6.615': attribute type 3 has an invalid length.
[  124.316548][ T7475] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.615'.
[  124.641260][ T7482] netlink: 228 bytes leftover after parsing attributes in process `syz.6.618'.
[  124.733715][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'.
[  124.736966][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  124.755670][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  125.271066][ T7525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.590540][ T7537] netlink: 'syz.3.635': attribute type 7 has an invalid length.
[  127.076445][ T7549] __nla_validate_parse: 1 callbacks suppressed
[  127.076461][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'.
[  127.167202][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'.
[  127.200633][ T7557] netlink: 26 bytes leftover after parsing attributes in process `syz.5.645'.
[  127.812710][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.816123][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.822310][ T7598] bridge0: entered allmulticast mode
[  127.849010][ T7598] bridge_slave_1: left allmulticast mode
[  127.852267][ T7598] bridge_slave_1: left promiscuous mode
[  127.854927][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.965622][ T7598] bridge_slave_0: left allmulticast mode
[  127.967465][ T7598] bridge_slave_0: left promiscuous mode
[  127.972314][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.288715][   T55] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[  130.101088][ T7625] netlink: 'syz.3.675': attribute type 10 has an invalid length.
[  130.108424][ T7625] team0: Cannot enslave team device to itself
[  131.378026][   T55] Bluetooth: hci0: command tx timeout
[  131.927597][   T55] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  132.370149][ T7690] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.703'.
[  132.492774][   T55] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10
[  132.687127][ T7710] netlink: 'syz.6.713': attribute type 5 has an invalid length.
[  132.741754][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.748071][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  134.018864][ T7756] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  134.044559][   T55] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  136.562924][ T7782] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  137.122286][ T7802] netlink: 'syz.5.750': attribute type 11 has an invalid length.
[  137.125266][ T7802] netlink: 149476 bytes leftover after parsing attributes in process `syz.5.750'.
[  137.285231][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.637682][ T7821] netlink: 'syz.6.758': attribute type 1 has an invalid length.
[  137.641295][ T7815] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  138.009610][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  138.267165][ T7842] : port 1(vlan0) entered blocking state
[  138.270082][ T7842] : port 1(vlan0) entered disabled state
[  138.272867][ T7842] vlan0: entered allmulticast mode
[  138.275067][ T7842] veth0_vlan: entered allmulticast mode
[  138.280418][ T7842] vlan0: entered promiscuous mode
[  138.292427][ T7843] : port 1(vlan0) entered blocking state
[  138.294898][ T7843] : port 1(vlan0) entered forwarding state
[  138.456027][ T7856] netlink: 'syz.3.769': attribute type 21 has an invalid length.
[  138.746223][ T7866] netlink: 92 bytes leftover after parsing attributes in process `syz.3.772'.
[  138.755078][ T7862] delete_channel: no stack
[  138.946343][ T7880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.780'.
[  139.527490][ T7880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.535136][ T7880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.544444][ T7880] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  139.555584][ T7880] bond0 (unregistering): Released all slaves
[  139.693565][ T7885] netlink: 177 bytes leftover after parsing attributes in process `syz.6.782'.
[  139.786118][ T7893] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.785'.
[  139.802462][ T7894] netlink: 48 bytes leftover after parsing attributes in process `syz.3.786'.
[  139.886505][ T7897] netlink: 'syz.6.787': attribute type 4 has an invalid length.
[  140.214366][ T7909] nftables ruleset with unbound chain
[  140.912626][ T7934] netlink: 763 bytes leftover after parsing attributes in process `syz.6.802'.
[  141.582169][ T7970] netlink: 'syz.5.815': attribute type 3 has an invalid length.
[  141.698521][ T7973] netlink: 'syz.5.816': attribute type 21 has an invalid length.
[  141.703219][ T7973] netlink: 128 bytes leftover after parsing attributes in process `syz.5.816'.
[  142.951071][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.818'.
[  143.182184][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.184926][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.190288][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.193294][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.374735][ T8002] netlink: 60 bytes leftover after parsing attributes in process `syz.6.830'.
[  143.396614][ T8002] unsupported nlmsg_type 40
[  143.450908][ T8009] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  144.432354][ T8025] tap0: tun_chr_ioctl cmd 21731
[  144.515910][ T8025] tap0: tun_chr_ioctl cmd 2147767521
[  144.887019][ T8040] tap0: tun_chr_ioctl cmd 2148553947
[  145.072675][ T8048] netlink: 'syz.3.850': attribute type 7 has an invalid length.
[  145.335585][ T8062] netlink: 132 bytes leftover after parsing attributes in process `syz.6.857'.
[  145.523176][ T8076] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  146.438808][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.876'.
[  146.442452][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.876'.
[  146.475429][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'.
[  146.479040][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'.
[  146.956826][ T8131] netlink: 'syz.6.887': attribute type 27 has an invalid length.
[  146.962679][ T8131] netlink: 164 bytes leftover after parsing attributes in process `syz.6.887'.
[  147.664213][ T8157] netlink: 'syz.3.898': attribute type 46 has an invalid length.
[  147.666977][ T8157] netlink: 'syz.3.898': attribute type 19 has an invalid length.
[  147.670969][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'.
[  147.781557][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'.
[  148.852184][ T8173] TCP: TCP_TX_DELAY enabled
[  149.076217][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'.
[  149.081044][ T8183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.909'.
[  150.965721][ T8216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.564240][ T8268] netlink: 'syz.6.948': attribute type 3 has an invalid length.
[  151.578125][ T8268] __nla_validate_parse: 1 callbacks suppressed
[  151.578141][ T8268] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.948'.
[  151.584797][   T55] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  152.984143][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.6.976'.
[  152.987024][ T8334] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  153.051893][ T8340] netlink: 'syz.6.979': attribute type 7 has an invalid length.
[  153.054974][ T8340] netlink: 21512 bytes leftover after parsing attributes in process `syz.6.979'.
[  153.059226][ T8340] netlink: 104088 bytes leftover after parsing attributes in process `syz.6.979'.
[  153.062229][ T8340] netlink: 'syz.6.979': attribute type 7 has an invalid length.
[  153.064768][ T8340] netlink: 21512 bytes leftover after parsing attributes in process `syz.6.979'.
[  153.170166][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'.
[  154.276150][ T8371] netlink: 'syz.6.993': attribute type 2 has an invalid length.
[  154.357284][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.996'.
[  154.420252][ T8375] delete_channel: no stack
[  154.425479][ T8385] netlink: 'syz.6.995': attribute type 6 has an invalid length.
[  154.429531][ T8385] netlink: 164 bytes leftover after parsing attributes in process `syz.6.995'.
[  154.436763][ T8375] delete_channel: no stack
[  154.755552][ T8413] netlink: 'syz.6.1008': attribute type 17 has an invalid length.
[  154.761627][ T8413] netlink: 'syz.6.1008': attribute type 16 has an invalid length.
[  154.768203][ T8413] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1008'.
[  154.954177][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1009'.
[  157.139483][ T8500] netlink: 'syz.3.1047': attribute type 10 has an invalid length.
[  157.145420][ T8500] macvlan0: entered allmulticast mode
[  157.450598][ T8523] __nla_validate_parse: 3 callbacks suppressed
[  157.450624][ T8523] netlink: 147608 bytes leftover after parsing attributes in process `syz.6.1056'.
[  157.462157][ T8523] netlink: 'syz.6.1056': attribute type 3 has an invalid length.
[  157.817112][ T8548] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1068'.
[  158.429373][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1077'.
[  159.332605][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1084'.
[  159.954241][ T8616] netlink: 'syz.5.1098': attribute type 12 has an invalid length.
[  159.957661][ T8616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1098'.
[  160.100920][ T8625] syz.5.1098 (8625) used obsolete PPPIOCDETACH ioctl
[  160.224368][ T8631] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'.
[  160.238950][ T8628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'.
[  160.243843][ T8632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'.
[  160.597571][ T8655] netlink: 'syz.5.1115': attribute type 1 has an invalid length.
[  160.602285][ T8655] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1115'.
[  160.769308][ T8663] openvswitch: netlink: IPv6 tunnel dst address is zero
[  160.777416][ T8665] netlink: 'syz.6.1120': attribute type 1 has an invalid length.
[  160.783954][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'.
[  161.630827][   T55] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  161.661706][ T8696] netlink: 'syz.6.1133': attribute type 28 has an invalid length.
[  161.666598][ T8696] netlink: 'syz.6.1133': attribute type 29 has an invalid length.
[  162.669720][ T8715] __nla_validate_parse: 1 callbacks suppressed
[  162.669737][ T8715] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1141'.
[  163.622082][ T8746] netlink: 'syz.5.1154': attribute type 23 has an invalid length.
[  163.626415][ T8747] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1156'.
[  164.496634][ T8768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1165'.
[  164.500856][ T8768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1165'.
[  164.505810][ T8768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1165'.
[  164.570141][ T8772] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1167'.
[  165.193789][ T8801] netlink: 'syz.5.1180': attribute type 10 has an invalid length.
[  165.196119][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1180'.
[  165.231405][ T8801] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  165.349399][ T8810] netlink: 'syz.5.1185': attribute type 3 has an invalid length.
[  165.351932][ T8810] netlink: 4264 bytes leftover after parsing attributes in process `syz.5.1185'.
[  165.356631][ T8810] netlink: 'syz.5.1185': attribute type 3 has an invalid length.
[  165.391574][ T8810] netlink: 4264 bytes leftover after parsing attributes in process `syz.5.1185'.
[  165.445049][   T55] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  165.734884][ T8827] cgroup: Unknown subsys name 'uid'
[  166.088298][ T8845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.154392][ T8849] netlink: 824 bytes leftover after parsing attributes in process `syz.6.1200'.
[  167.528490][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  167.724789][ T8896] __nla_validate_parse: 6 callbacks suppressed
[  167.724805][ T8896] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.1218'.
[  168.214923][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'.
[  168.249152][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'.
[  168.580945][ T8957] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.585358][ T8957] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.609947][ T8960] bpf: Bad value for 'mode'
[  168.748317][ T8965] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1246'.
[  169.697299][ T8998] netlink: 'syz.3.1260': attribute type 27 has an invalid length.
[  169.707987][ T8998] netlink: 'syz.3.1260': attribute type 4 has an invalid length.
[  169.711418][ T8998] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1260'.
[  170.068964][ T9020] netlink: 'syz.3.1272': attribute type 3 has an invalid length.
[  170.082785][ T9020] netlink: 'syz.3.1272': attribute type 6 has an invalid length.
[  170.085887][ T9020] netlink: 'syz.3.1272': attribute type 8 has an invalid length.
[  170.115416][ T9020] netlink: 'syz.3.1272': attribute type 10 has an invalid length.
[  170.126115][ T9020] netlink: 'syz.3.1272': attribute type 11 has an invalid length.
[  170.131510][ T9020] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.1272'.
[  170.179836][ T9029] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1276'.
[  170.650097][ T9052] syzkaller0: entered promiscuous mode
[  170.652643][ T9052] syzkaller0: entered allmulticast mode
[  170.727737][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1291'.
[  170.772505][ T9068] netlink: 'syz.3.1294': attribute type 5 has an invalid length.
[  170.776841][ T9068] netlink: 'syz.3.1294': attribute type 5 has an invalid length.
[  170.841475][ T9075] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1297'.
[  171.898518][ T9085] tQ6\bY4: renamed from lo (while UP)
[  171.961009][ T9089] netlink: 'syz.3.1303': attribute type 15 has an invalid length.
[  172.226064][ T9111] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1314'.
[  172.312098][ T9117] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  173.720531][ T9141] __nla_validate_parse: 1 callbacks suppressed
[  173.720546][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1328'.
[  174.866111][ T9155] validate_nla: 5 callbacks suppressed
[  174.866143][ T9155] netlink: 'syz.5.1335': attribute type 4 has an invalid length.
[  175.284831][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1556589283 wd_nsec: 1556589252
[  178.514355][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1359'.
[  178.547188][ T9205] netlink: 'syz.5.1360': attribute type 29 has an invalid length.
[  178.554082][ T9205] netlink: 'syz.5.1360': attribute type 29 has an invalid length.
[  178.787551][ T9228] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1371'.
[  179.085338][ T9233] syzkaller0: entered promiscuous mode
[  179.087649][ T9233] syzkaller0: entered allmulticast mode
[  179.286821][ T9258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1384'.
[  179.681007][ T9264] sit0: entered allmulticast mode
[  182.980637][ T9275] netlink: 'syz.5.1388': attribute type 2 has an invalid length.
[  183.558456][ T9302] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1399'.
[  183.679446][ T9308] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1401'.
[  183.800435][ T9310] netlink: 'syz.6.1402': attribute type 28 has an invalid length.
[  183.804954][ T9310] netlink: 'syz.6.1402': attribute type 3 has an invalid length.
[  183.811970][ T9310] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1402'.
[  183.903149][   T13] tipc: Subscription rejected, illegal request
[  184.144092][ T9321] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1407'.
[  184.276887][ T9334] netlink: 'syz.5.1413': attribute type 21 has an invalid length.
[  184.280411][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1413'.
[  184.305391][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.318133][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.323214][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.351632][ T9334] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  184.372416][ T9334] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  184.411359][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.417869][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.424195][ T9334] hsr0 speed is unknown, defaulting to 1000
[  184.642324][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'.
[  184.646558][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'.
[  184.651544][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'.
[  184.941565][ T9374] netlink: 'syz.3.1431': attribute type 210 has an invalid length.
[  185.043627][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1435'.
[  185.109947][ T9385] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1436'.
[  185.114097][ T9382] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1436'.
[  185.117379][ T9385] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1436'.
[  186.471675][ T9428] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  186.501105][ T9436] siw: device registration error -23
[  186.953072][ T9452] netlink: 'syz.3.1465': attribute type 33 has an invalid length.
[  187.233378][ T9465] delete_channel: no stack
[  187.380091][ T9476] option changes via remount are deprecated (pid=9475 comm=syz.3.1476)
[  187.962984][ T9517] netlink: 'syz.3.1495': attribute type 21 has an invalid length.
[  188.365217][ T9544] netlink: 'syz.3.1500': attribute type 39 has an invalid length.
[  188.612581][ T9557] netlink: 'syz.6.1507': attribute type 6 has an invalid length.
[  188.649680][ T9561] netlink: 'syz.6.1509': attribute type 29 has an invalid length.
[  188.681972][ T9561] netlink: 'syz.6.1509': attribute type 29 has an invalid length.
[  188.724171][ T5723] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.782604][ T5723] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.855573][ T5723] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.925879][ T5723] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.232902][ T5723] bridge_slave_1: left allmulticast mode
[  189.235219][ T5723] bridge_slave_1: left promiscuous mode
[  189.237605][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.269638][ T5723] bridge_slave_0: left allmulticast mode
[  189.271876][ T5723] bridge_slave_0: left promiscuous mode
[  189.274599][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.301994][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.308692][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.312709][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.321350][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.325022][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.686477][ T5723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.691851][ T5723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.695912][ T5723] bond0 (unregistering): Released all slaves
[  189.729130][ T9583] hsr0 speed is unknown, defaulting to 1000
[  189.832867][ T9598] __nla_validate_parse: 15 callbacks suppressed
[  189.832877][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1524'.
[  189.953743][ T9583] chnl_net:caif_netlink_parms(): no params data found
[  190.092676][ T9583] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.097721][ T9583] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.102907][ T9583] bridge_slave_0: entered allmulticast mode
[  190.109079][ T9583] bridge_slave_0: entered promiscuous mode
[  190.115379][ T9583] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.119522][ T9583] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.121860][ T9583] bridge_slave_1: entered allmulticast mode
[  190.124963][ T9583] bridge_slave_1: entered promiscuous mode
[  190.170367][ T5723] hsr_slave_0: left promiscuous mode
[  190.178493][ T5723] hsr_slave_1: left promiscuous mode
[  190.201636][ T5723] veth1_macvtap: left promiscuous mode
[  190.203490][ T5723] veth0_macvtap: left promiscuous mode
[  190.205286][ T5723] veth1_vlan: left promiscuous mode
[  190.210817][ T5723] veth0_vlan: left promiscuous mode
[  190.775550][ T5723] team0 (unregistering): Port device team_slave_1 removed
[  190.828940][ T5723] team0 (unregistering): Port device team_slave_0 removed
[  191.248778][  T795] hsr0 speed is unknown, defaulting to 1000
[  191.251351][  T795] infiniband syz0: ib_query_port failed (-19)
[  191.258304][ T9583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.272311][ T9583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.328129][ T9583] team0: Port device team_slave_0 added
[  191.332567][ T9583] team0: Port device team_slave_1 added
[  191.368227][   T55] Bluetooth: hci1: command tx timeout
[  191.402945][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.418281][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.489517][ T9583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.506087][ T9583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.509019][ T9583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.519987][ T9583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.665710][ T9583] hsr_slave_0: entered promiscuous mode
[  191.668701][ T9583] hsr_slave_1: entered promiscuous mode
[  191.671019][ T9583] debugfs: 'hsr0' already exists in 'hsr'
[  191.680076][ T9583] Cannot create hsr debugfs directory
[  191.701034][ T9635] netlink: 'syz.6.1539': attribute type 13 has an invalid length.
[  191.961089][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.980277][ T9635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.071666][ T9635] : port 1(vlan0) entered disabled state
[  193.454200][   T55] Bluetooth: hci1: command tx timeout
[  193.649315][   T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.652588][   T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.655657][   T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.683372][   T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.186758][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.190597][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.528033][   T55] Bluetooth: hci1: command tx timeout
[  196.783335][ T9651] netlink: 'syz.3.1545': attribute type 21 has an invalid length.
[  196.930869][ T9663] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1550'.
[  197.041395][ T9583] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.053341][ T9583] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.072618][ T9583] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.082511][ T9583] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.227753][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.247671][ T9583] 8021q: adding VLAN 0 to HW filter on device team0
[  197.255591][  T732] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.258113][  T732] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.267206][  T732] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.270068][  T732] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.347105][ T9686] netlink: 'syz.3.1558': attribute type 13 has an invalid length.
[  197.351852][ T9686] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1558'.
[  197.533210][ T9583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.608308][   T55] Bluetooth: hci1: command tx timeout
[  197.791502][ T9583] veth0_vlan: entered promiscuous mode
[  197.807004][ T9583] veth1_vlan: entered promiscuous mode
[  197.835534][ T9583] veth0_macvtap: entered promiscuous mode
[  197.842373][ T9583] veth1_macvtap: entered promiscuous mode
[  197.862941][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.873543][ T9583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.883701][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.886945][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.891123][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.893952][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.939148][ T4958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.941721][ T4958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.962249][ T4958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.965102][ T4958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.030947][ T9704] netlink: 'syz.5.1559': attribute type 1 has an invalid length.
[  199.043016][ T9727] netlink: 'syz.3.1573': attribute type 1 has an invalid length.
[  199.119925][ T9729] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1575'.
[  199.157511][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.162228][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.166076][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.173590][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.177035][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.266063][ T9738] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1577'.
[  199.316357][ T9738] netlink: 'syz.3.1577': attribute type 2 has an invalid length.
[  199.388601][ T9746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1580'.
[  199.400317][ T9732] chnl_net:caif_netlink_parms(): no params data found
[  199.505630][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.508695][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.511986][ T9732] bridge_slave_0: entered allmulticast mode
[  199.516077][ T9732] bridge_slave_0: entered promiscuous mode
[  199.522125][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.525238][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.528792][ T9732] bridge_slave_1: entered allmulticast mode
[  199.532847][ T9732] bridge_slave_1: entered promiscuous mode
[  199.595538][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.602578][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.633664][ T9732] team0: Port device team_slave_0 added
[  199.637119][ T9732] team0: Port device team_slave_1 added
[  199.664958][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.667315][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.677001][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.684506][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.687277][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.697720][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.737842][ T9732] hsr_slave_0: entered promiscuous mode
[  199.742259][ T9732] hsr_slave_1: entered promiscuous mode
[  199.744990][ T9732] debugfs: 'hsr0' already exists in 'hsr'
[  199.747309][ T9732] Cannot create hsr debugfs directory
[  199.954488][ T9732] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  199.961261][ T9732] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  199.968978][ T9732] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  199.975691][ T9732] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  199.975734][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1585'.
[  199.983490][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1585'.
[  200.043976][ T9769] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1586'.
[  200.077474][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.100698][ T9732] 8021q: adding VLAN 0 to HW filter on device team0
[  200.109903][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.112869][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.124491][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.127452][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.207438][ T9773] netlink: 'syz.5.1587': attribute type 21 has an invalid length.
[  200.282615][ T9777] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1588'.
[  200.379960][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.736136][ T9732] veth0_vlan: entered promiscuous mode
[  200.742905][ T9732] veth1_vlan: entered promiscuous mode
[  200.757216][ T9732] veth0_macvtap: entered promiscuous mode
[  200.779192][ T9732] veth1_macvtap: entered promiscuous mode
[  200.798936][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.810910][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.821773][ T9639] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.824592][ T9639] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.827571][ T9639] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.852276][ T9639] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.963408][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.975517][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.057098][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.070769][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.208067][   T55] Bluetooth: hci2: command tx timeout
[  201.398943][ T9792] infiniband syz!: set active
[  201.403398][ T9792] infiniband syz!: added team_slave_0
[  201.406226][ T9792] syz!: rxe_create_cq: returned err = -12
[  201.409573][ T9792] infiniband syz!: Couldn't create ib_mad CQ
[  201.411825][ T9792] infiniband syz!: Couldn't open port 1
[  201.428313][ T9792] RDS/IB: syz!: added
[  201.429903][ T9792] smc: adding ib device syz! with port count 1
[  201.432222][ T9792] smc:    ib device syz! port 1 has pnetid 
[  203.288695][   T55] Bluetooth: hci2: command tx timeout
[  204.553528][ T9851] netlink: 'syz.7.1619': attribute type 39 has an invalid length.
[  204.837769][ T9860] netlink: 'syz.3.1622': attribute type 3 has an invalid length.
[  205.266519][ T9878] : renamed from hsr0 (while UP)
[  205.380240][   T55] Bluetooth: hci2: command tx timeout
[  205.735044][ T9891] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1636'.
[  206.255859][ T9913] netlink: 'syz.7.1647': attribute type 9 has an invalid length.
[  206.320406][ T9915] netlink: 'syz.5.1648': attribute type 2 has an invalid length.
[  206.323591][ T9915] netlink: 119 bytes leftover after parsing attributes in process `syz.5.1648'.
[  206.466380][ T9924] netlink: 'syz.5.1652': attribute type 29 has an invalid length.
[  206.477055][ T9924] netlink: 'syz.5.1652': attribute type 29 has an invalid length.
[  206.596586][ T9930] openvswitch: netlink: IPv6 tunnel dst address is zero
[  207.464285][   T55] Bluetooth: hci2: command tx timeout
[  208.231429][ T9936] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1656'.
[  208.235051][ T9947] netlink: 'syz.3.1662': attribute type 13 has an invalid length.
[  208.391027][ T9957] netlink: 'syz.5.1667': attribute type 14 has an invalid length.
[  208.396325][ T9957] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1667'.
[  208.552958][ T9961] netlink: 'syz.7.1668': attribute type 21 has an invalid length.
[  208.555556][ T9961] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1668'.
[  208.651288][ T9970] sock: sock_timestamping_bind_phc: sock not bind to device
[  208.805091][ T9981] vcan0 speed is unknown, defaulting to 1000
[  208.813320][ T9981] vcan0 speed is unknown, defaulting to 1000
[  208.817784][ T9981] vcan0 speed is unknown, defaulting to 1000
[  209.181573][ T9989] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  209.191020][ T9989] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  209.681411][ T9981] infiniband syz1: set active
[  209.683806][ T5886] vcan0 speed is unknown, defaulting to 1000
[  209.686126][ T9981] infiniband syz1: added vcan0
[  209.743240][ T9981] RDS/IB: syz1: added
[  209.744938][ T9981] smc: adding ib device syz1 with port count 1
[  209.747372][ T9981] smc:    ib device syz1 port 1 has pnetid 
[  209.750250][ T5318] vcan0 speed is unknown, defaulting to 1000
[  209.753794][ T9981] vcan0 speed is unknown, defaulting to 1000
[  209.880232][T10002] netlink: 61967 bytes leftover after parsing attributes in process `syz.7.1687'.
[  209.954646][ T9981] vcan0 speed is unknown, defaulting to 1000
[  210.165537][ T9981] vcan0 speed is unknown, defaulting to 1000
[  210.361245][ T9981] vcan0 speed is unknown, defaulting to 1000
[  210.556499][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1698'.
[  210.665210][T10023] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1696'.
[  210.847558][T10039] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  211.193624][T10037] netlink: 428 bytes leftover after parsing attributes in process `syz.7.1703'.
[  211.618281][T10084] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.1726'.
[  212.086361][T10097] netlink: 763 bytes leftover after parsing attributes in process `syz.7.1731'.
[  212.142139][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1732'.
[  212.146637][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1732'.
[  212.407751][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'.
[  212.415102][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'.
[  213.045362][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'.
[  213.122481][T10130] netlink: 'syz.5.1743': attribute type 21 has an invalid length.
[  213.125034][T10130] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1743'.
[  213.805517][T10154] netlink: 'syz.5.1753': attribute type 21 has an invalid length.
[  214.086181][   T55] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  214.443082][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'.
[  215.714769][T10201] netlink: 'syz.7.1774': attribute type 3 has an invalid length.
[  216.084157][T10217] xt_l2tp: wrong L2TP version: 0
[  216.493638][T10225] __nla_validate_parse: 2 callbacks suppressed
[  216.493656][T10225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1785'.
[  216.734600][ T5854] Bluetooth: hci0: command 0x0406 tx timeout
[  216.883347][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1790'.
[  217.097174][   T55] Bluetooth: hci0: unexpected event 0x30 length: 82 > 3
[  217.144982][T10243] netlink: 211576 bytes leftover after parsing attributes in process `syz.5.1793'.
[  217.344875][T10255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1799'.
[  217.648844][T10278] netlink: 'syz.3.1809': attribute type 10 has an invalid length.
[  217.662274][T10278] geneve0: entered promiscuous mode
[  217.950415][T10291] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  218.559934][T10323] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1831'.
[  218.677462][T10329] netlink: 'syz.7.1834': attribute type 39 has an invalid length.
[  219.445872][   T55] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  219.543513][T10346] netlink: 'syz.3.1842': attribute type 10 has an invalid length.
[  219.827199][T10373] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  219.842469][T10373] netlink: 'syz.5.1855': attribute type 29 has an invalid length.
[  220.060661][T10389] xt_HMARK: spi-set and port-set can't be combined
[  221.504004][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1873'.
[  222.037470][T10429] netlink: 'syz.3.1878': attribute type 2 has an invalid length.
[  222.043962][T10434] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1880'.
[  222.045966][T10429] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1878'.
[  222.104038][T10437] netlink: 'syz.5.1881': attribute type 1 has an invalid length.
[  222.132156][T10437] netlink: 'syz.5.1881': attribute type 1 has an invalid length.
[  222.711288][T10454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'.
[  222.721398][T10454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'.
[  223.105590][T10468] netlink: 'syz.3.1895': attribute type 12 has an invalid length.
[  223.118069][T10468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1895'.
[  223.552289][T10499] syzkaller0: entered promiscuous mode
[  223.554289][T10499] syzkaller0: entered allmulticast mode
[  223.643599][T10503] netlink: 'syz.5.1910': attribute type 7 has an invalid length.
[  223.645988][T10503] netlink: 'syz.5.1910': attribute type 8 has an invalid length.
[  224.225341][T10538] vcan0 speed is unknown, defaulting to 1000
[  224.272816][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1928'.
[  224.339500][T10547] netlink: 'syz.7.1930': attribute type 1 has an invalid length.
[  224.346634][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1930'.
[  225.519583][T10570] netlink: 'syz.3.1938': attribute type 2 has an invalid length.
[  225.522147][T10570] netlink: 'syz.3.1938': attribute type 1 has an invalid length.
[  225.525036][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1938'.
[  225.533006][T10570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1938'.
[  226.131611][T10606] syzkaller0: create flow: hash 141169661 index 1
[  226.261841][T10609] syzkaller0: delete flow: hash 141169661 index 1
[  226.507205][T10623] IPv6: Can't replace route, no match found
[  227.159026][T10630] __nla_validate_parse: 5 callbacks suppressed
[  227.159043][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1967'.
[  227.241769][T10632] netlink: 'syz.3.1968': attribute type 39 has an invalid length.
[  228.571780][T10645] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1974'.
[  228.575971][T10645] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1974'.
[  228.698836][T10650] tun0: tun_chr_ioctl cmd 1074812117
[  228.740692][T10656] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1980'.
[  228.744685][T10658] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1981'.
[  229.190003][T10675] netlink: 'syz.3.1988': attribute type 10 has an invalid length.
[  229.196574][T10675] veth0_vlan: entered allmulticast mode
[  229.317842][T10675] veth0_vlan: left promiscuous mode
[  229.476157][T10675] veth0_vlan: entered promiscuous mode
[  229.575042][T10675] team0: Device veth0_vlan failed to register rx_handler
[  229.711810][T10679] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1989'.
[  229.870742][T10675] syz.3.1988 (10675) used greatest stack depth: 17976 bytes left
[  230.022267][T10694] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1996'.
[  230.232125][T10710] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2004'.
[  230.544244][   T33] audit: type=1107 audit(1758911639.389:2): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  231.496371][T10725] syzkaller0: entered promiscuous mode
[  231.498861][T10725] syzkaller0: entered allmulticast mode
[  232.823611][T10739] netlink: 'syz.3.2015': attribute type 7 has an invalid length.
[  232.826573][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2015'.
[  232.923739][T10747] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  233.095309][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  233.241722][T10771] netlink: 'syz.5.2031': attribute type 22 has an invalid length.
[  233.326658][T10777] netlink: 'syz.5.2033': attribute type 7 has an invalid length.
[  233.670504][T10792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.673993][T10792] IPv6: NLM_F_CREATE should be set when creating new route
[  233.677738][T10792] IPv6: NLM_F_CREATE should be set when creating new route
[  234.287749][T10817] vcan0 speed is unknown, defaulting to 1000
[  234.450635][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2057'.
[  235.437145][T10861] netlink: 'syz.5.2064': attribute type 1 has an invalid length.
[  235.455069][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'.
[  235.539567][T10868] netlink: 'syz.5.2068': attribute type 32 has an invalid length.
[  235.605422][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2070'.
[  235.611321][T10874] ==================================================================
[  235.614005][T10874] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  235.616666][T10874] Read of size 2 at addr ffff8880281a5c42 by task syz.7.2070/10874
[  235.620588][T10874] 
[  235.621563][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.7.2070 Not tainted syzkaller #0 PREEMPT(full) 
[  235.621583][T10874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.621593][T10874] Call Trace:
[  235.621607][T10874]  <TASK>
[  235.621616][T10874]  dump_stack_lvl+0x189/0x250
[  235.621640][T10874]  ? __virt_addr_valid+0x1c8/0x5c0
[  235.621660][T10874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.621676][T10874]  ? __virt_addr_valid+0x1c8/0x5c0
[  235.621694][T10874]  ? lock_release+0x4b/0x3e0
[  235.621719][T10874]  ? __virt_addr_valid+0x4a5/0x5c0
[  235.621764][T10874]  print_report+0xca/0x240
[  235.621779][T10874]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  235.621798][T10874]  kasan_report+0x118/0x150
[  235.621815][T10874]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  235.621838][T10874]  __xfrm_state_lookup+0x6ad/0x8d0
[  235.621861][T10874]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  235.621884][T10874]  ? xfrm_state_lookup+0x45/0x1e0
[  235.621905][T10874]  xfrm_state_lookup+0x11e/0x1e0
[  235.621930][T10874]  xfrm_user_state_lookup+0x231/0x370
[  235.621949][T10874]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  235.621970][T10874]  xfrm_del_sa+0xf1/0x3e0
[  235.621985][T10874]  ? __pfx_xfrm_del_sa+0x10/0x10
[  235.621997][T10874]  ? apparmor_capable+0x137/0x1b0
[  235.622020][T10874]  ? __nla_parse+0x40/0x60
[  235.622039][T10874]  xfrm_user_rcv_msg+0x7a3/0xab0
[  235.622056][T10874]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  235.622089][T10874]  ? __pfx___mutex_trylock_common+0x10/0x10
[  235.622106][T10874]  ? rcu_is_watching+0x15/0xb0
[  235.622120][T10874]  ? trace_contention_end+0x39/0x120
[  235.622135][T10874]  ? __mutex_lock+0x335/0x1350
[  235.622157][T10874]  netlink_rcv_skb+0x208/0x470
[  235.622176][T10874]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  235.622191][T10874]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  235.622216][T10874]  ? netlink_deliver_tap+0x2e/0x1b0
[  235.622234][T10874]  ? netlink_deliver_tap+0x2e/0x1b0
[  235.622252][T10874]  xfrm_netlink_rcv+0x79/0x90
[  235.622266][T10874]  netlink_unicast+0x82f/0x9e0
[  235.622286][T10874]  ? __pfx_netlink_unicast+0x10/0x10
[  235.622302][T10874]  ? netlink_sendmsg+0x642/0xb30
[  235.622318][T10874]  ? skb_put+0x11b/0x210
[  235.622339][T10874]  netlink_sendmsg+0x805/0xb30
[  235.622362][T10874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.622381][T10874]  ? aa_sock_msg_perm+0xf1/0x1d0
[  235.622398][T10874]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.622416][T10874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.622434][T10874]  __sock_sendmsg+0x21c/0x270
[  235.622451][T10874]  ____sys_sendmsg+0x505/0x830
[  235.622473][T10874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.622498][T10874]  ? import_iovec+0x74/0xa0
[  235.622519][T10874]  ___sys_sendmsg+0x21f/0x2a0
[  235.622536][T10874]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.622566][T10874]  ? __fget_files+0x2a/0x420
[  235.622585][T10874]  ? __fget_files+0x2a/0x420
[  235.622608][T10874]  ? __fget_files+0x3a0/0x420
[  235.622628][T10874]  __x64_sys_sendmsg+0x19b/0x260
[  235.622651][T10874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.622677][T10874]  ? rcu_is_watching+0x15/0xb0
[  235.622695][T10874]  ? do_syscall_64+0xbe/0x3b0
[  235.622716][T10874]  do_syscall_64+0xfa/0x3b0
[  235.622766][T10874]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.622784][T10874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.622798][T10874]  ? exc_page_fault+0x9f/0xf0
[  235.622816][T10874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.622830][T10874] RIP: 0033:0x7fde9098ec29
[  235.622845][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.622857][T10874] RSP: 002b:00007fde91744038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.622874][T10874] RAX: ffffffffffffffda RBX: 00007fde90bd5fa0 RCX: 00007fde9098ec29
[  235.622885][T10874] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000003
[  235.622895][T10874] RBP: 00007fde90a11e41 R08: 0000000000000000 R09: 0000000000000000
[  235.622904][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.622913][T10874] R13: 00007fde90bd6038 R14: 00007fde90bd5fa0 R15: 00007ffdbf823018
[  235.622932][T10874]  </TASK>
[  235.622938][T10874] 
[  235.778149][T10874] Allocated by task 9846:
[  235.779898][T10874]  kasan_save_track+0x3e/0x80
[  235.781801][T10874]  __kasan_slab_alloc+0x6c/0x80
[  235.783740][T10874]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  235.785908][T10874]  xfrm_state_alloc+0x24/0x2f0
[  235.787830][T10874]  __find_acq_core+0x8a7/0x1c00
[  235.789805][T10874]  xfrm_find_acq+0x78/0xa0
[  235.791590][T10874]  xfrm_alloc_userspi+0x6b3/0xc90
[  235.793603][T10874]  xfrm_user_rcv_msg+0x7a3/0xab0
[  235.795571][T10874]  netlink_rcv_skb+0x208/0x470
[  235.797492][T10874]  xfrm_netlink_rcv+0x79/0x90
[  235.799271][T10874]  netlink_unicast+0x82f/0x9e0
[  235.801531][T10874]  netlink_sendmsg+0x805/0xb30
[  235.803450][T10874]  __sock_sendmsg+0x21c/0x270
[  235.805302][T10874]  ____sys_sendmsg+0x505/0x830
[  235.807236][T10874]  ___sys_sendmsg+0x21f/0x2a0
[  235.809140][T10874]  __x64_sys_sendmsg+0x19b/0x260
[  235.811094][T10874]  do_syscall_64+0xfa/0x3b0
[  235.812896][T10874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.815257][T10874] 
[  235.816232][T10874] Freed by task 5886:
[  235.817855][T10874]  kasan_save_track+0x3e/0x80
[  235.819734][T10874]  kasan_save_free_info+0x46/0x50
[  235.821749][T10874]  __kasan_slab_free+0x5b/0x80
[  235.823656][T10874]  kmem_cache_free+0x18f/0x400
[  235.825576][T10874]  xfrm_state_gc_task+0x52d/0x6b0
[  235.827580][T10874]  process_scheduled_works+0xae1/0x17b0
[  235.829751][T10874]  worker_thread+0x8a0/0xda0
[  235.831553][T10874]  kthread+0x711/0x8a0
[  235.833201][T10874]  ret_from_fork+0x439/0x7d0
[  235.835050][T10874]  ret_from_fork_asm+0x1a/0x30
[  235.836979][T10874] 
[  235.837947][T10874] The buggy address belongs to the object at ffff8880281a5b00
[  235.837947][T10874]  which belongs to the cache xfrm_state of size 928
[  235.843325][T10874] The buggy address is located 322 bytes inside of
[  235.843325][T10874]  freed 928-byte region [ffff8880281a5b00, ffff8880281a5ea0)
[  235.848545][T10874] 
[  235.849517][T10874] The buggy address belongs to the physical page:
[  235.852015][T10874] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880281a6400 pfn:0x281a4
[  235.855826][T10874] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  235.859141][T10874] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  235.862126][T10874] page_type: f5(slab)
[  235.863731][T10874] raw: 00fff00000000040 ffff88801af2a640 dead000000000122 0000000000000000
[  235.867092][T10874] raw: ffff8880281a6400 00000000800e0009 00000000f5000000 0000000000000000
[  235.870484][T10874] head: 00fff00000000040 ffff88801af2a640 dead000000000122 0000000000000000
[  235.873921][T10874] head: ffff8880281a6400 00000000800e0009 00000000f5000000 0000000000000000
[  235.877329][T10874] head: 00fff00000000002 ffffea0000a06901 00000000ffffffff 00000000ffffffff
[  235.880777][T10874] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  235.884202][T10874] page dumped because: kasan: bad access detected
[  235.886755][T10874] page_owner tracks the page as allocated
[  235.889048][T10874] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5975, tgid 5972 (syz.1.26), ts 67624285536, free_ts 67558881413
[  235.896342][T10874]  post_alloc_hook+0x240/0x2a0
[  235.898263][T10874]  get_page_from_freelist+0x21e4/0x22c0
[  235.900461][T10874]  __alloc_frozen_pages_noprof+0x181/0x370
[  235.902790][T10874]  alloc_pages_mpol+0x232/0x4a0
[  235.904720][T10874]  allocate_slab+0x8a/0x370
[  235.906525][T10874]  ___slab_alloc+0xbeb/0x1420
[  235.908404][T10874]  kmem_cache_alloc_noprof+0x283/0x3c0
[  235.910598][T10874]  xfrm_state_alloc+0x24/0x2f0
[  235.912523][T10874]  xfrm_add_sa+0x17d1/0x4070
[  235.914383][T10874]  xfrm_user_rcv_msg+0x7a3/0xab0
[  235.916369][T10874]  netlink_rcv_skb+0x208/0x470
[  235.918266][T10874]  xfrm_netlink_rcv+0x79/0x90
[  235.920145][T10874]  netlink_unicast+0x82f/0x9e0
[  235.921978][T10874]  netlink_sendmsg+0x805/0xb30
[  235.923758][T10874]  __sock_sendmsg+0x21c/0x270
[  235.925633][T10874]  ____sys_sendmsg+0x505/0x830
[  235.927602][T10874] page last free pid 5899 tgid 5899 stack trace:
[  235.930154][T10874]  __free_frozen_pages+0xbc4/0xd30
[  235.932213][T10874]  __slab_free+0x303/0x3c0
[  235.934020][T10874]  qlist_free_all+0x97/0x140
[  235.935900][T10874]  kasan_quarantine_reduce+0x148/0x160
[  235.938080][T10874]  __kasan_slab_alloc+0x22/0x80
[  235.940077][T10874]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  235.942466][T10874]  __alloc_skb+0x112/0x2d0
[  235.944286][T10874]  mld_newpack+0x13c/0xc40
[  235.946087][T10874]  add_grhead+0x5a/0x2a0
[  235.947789][T10874]  add_grec+0x1452/0x1740
[  235.949563][T10874]  mld_send_initial_cr+0x288/0x550
[  235.951547][T10874]  mld_dad_work+0x46/0x490
[  235.953313][T10874]  process_scheduled_works+0xae1/0x17b0
[  235.955505][T10874]  worker_thread+0x8a0/0xda0
[  235.957384][T10874]  kthread+0x711/0x8a0
[  235.959047][T10874]  ret_from_fork+0x439/0x7d0
[  235.960854][T10874] 
[  235.961793][T10874] Memory state around the buggy address:
[  235.963998][T10874]  ffff8880281a5b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.967216][T10874]  ffff8880281a5b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.970427][T10874] >ffff8880281a5c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.973575][T10874]                                            ^
[  235.976018][T10874]  ffff8880281a5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.979150][T10874]  ffff8880281a5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  235.982298][T10874] ==================================================================
[  236.022805][T10874] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.025716][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.7.2070 Not tainted syzkaller #0 PREEMPT(full) 
[  236.029430][T10874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.033409][T10874] Call Trace:
[  236.034773][T10874]  <TASK>
[  236.035939][T10874]  dump_stack_lvl+0x99/0x250
[  236.037749][T10874]  ? __asan_memcpy+0x40/0x70
[  236.039600][T10874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.041703][T10874]  ? __pfx__printk+0x10/0x10
[  236.043558][T10874]  vpanic+0x281/0x750
[  236.045170][T10874]  ? preempt_schedule+0xae/0xc0
[  236.047118][T10874]  ? __pfx_vpanic+0x10/0x10
[  236.048955][T10874]  ? preempt_schedule_common+0x83/0xd0
[  236.051137][T10874]  ? preempt_schedule+0xae/0xc0
[  236.053103][T10874]  ? __pfx_preempt_schedule+0x10/0x10
[  236.055255][T10874]  panic+0xb9/0xc0
[  236.056776][T10874]  ? __pfx_panic+0x10/0x10
[  236.058568][T10874]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  236.060959][T10874]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  236.063053][T10874]  check_panic_on_warn+0x89/0xb0
[  236.065047][T10874]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  236.067188][T10874]  end_report+0x78/0x160
[  236.068931][T10874]  kasan_report+0x129/0x150
[  236.070775][T10874]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  236.072931][T10874]  __xfrm_state_lookup+0x6ad/0x8d0
[  236.075008][T10874]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  236.077290][T10874]  ? xfrm_state_lookup+0x45/0x1e0
[  236.079359][T10874]  xfrm_state_lookup+0x11e/0x1e0
[  236.081356][T10874]  xfrm_user_state_lookup+0x231/0x370
[  236.083524][T10874]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  236.085915][T10874]  xfrm_del_sa+0xf1/0x3e0
[  236.087649][T10874]  ? __pfx_xfrm_del_sa+0x10/0x10
[  236.089655][T10874]  ? apparmor_capable+0x137/0x1b0
[  236.091702][T10874]  ? __nla_parse+0x40/0x60
[  236.093496][T10874]  xfrm_user_rcv_msg+0x7a3/0xab0
[  236.095483][T10874]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.097709][T10874]  ? __pfx___mutex_trylock_common+0x10/0x10
[  236.100081][T10874]  ? rcu_is_watching+0x15/0xb0
[  236.102008][T10874]  ? trace_contention_end+0x39/0x120
[  236.104109][T10874]  ? __mutex_lock+0x335/0x1350
[  236.106034][T10874]  netlink_rcv_skb+0x208/0x470
[  236.107957][T10874]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  236.110142][T10874]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  236.112263][T10874]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.114346][T10874]  ? netlink_deliver_tap+0x2e/0x1b0
[  236.116415][T10874]  xfrm_netlink_rcv+0x79/0x90
[  236.118317][T10874]  netlink_unicast+0x82f/0x9e0
[  236.120234][T10874]  ? __pfx_netlink_unicast+0x10/0x10
[  236.122352][T10874]  ? netlink_sendmsg+0x642/0xb30
[  236.124327][T10874]  ? skb_put+0x11b/0x210
[  236.126047][T10874]  netlink_sendmsg+0x805/0xb30
[  236.127977][T10874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.130088][T10874]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.132071][T10874]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.134184][T10874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.136287][T10874]  __sock_sendmsg+0x21c/0x270
[  236.138187][T10874]  ____sys_sendmsg+0x505/0x830
[  236.140105][T10874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.142234][T10874]  ? import_iovec+0x74/0xa0
[  236.144076][T10874]  ___sys_sendmsg+0x21f/0x2a0
[  236.145978][T10874]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.148082][T10874]  ? __fget_files+0x2a/0x420
[  236.149948][T10874]  ? __fget_files+0x2a/0x420
[  236.151817][T10874]  ? __fget_files+0x3a0/0x420
[  236.153726][T10874]  __x64_sys_sendmsg+0x19b/0x260
[  236.155716][T10874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  236.157914][T10874]  ? rcu_is_watching+0x15/0xb0
[  236.159835][T10874]  ? do_syscall_64+0xbe/0x3b0
[  236.161742][T10874]  do_syscall_64+0xfa/0x3b0
[  236.163557][T10874]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.165699][T10874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.168124][T10874]  ? exc_page_fault+0x9f/0xf0
[  236.170061][T10874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.172357][T10874] RIP: 0033:0x7fde9098ec29
[  236.174147][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.181753][T10874] RSP: 002b:00007fde91744038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.185053][T10874] RAX: ffffffffffffffda RBX: 00007fde90bd5fa0 RCX: 00007fde9098ec29
[  236.188160][T10874] RDX: 0000000000000040 RSI: 0000200000000780 RDI: 0000000000000003
[  236.191172][T10874] RBP: 00007fde90a11e41 R08: 0000000000000000 R09: 0000000000000000
[  236.194262][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.197330][T10874] R13: 00007fde90bd6038 R14: 00007fde90bd5fa0 R15: 00007ffdbf823018
[  236.200372][T10874]  </TASK>
[  236.202236][T10874] Kernel Offset: disabled
[  236.203961][T10874] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:34:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001762 RDI=0000000000001763 RBP=00000000000003f8 RSP=ffffc90003aae970
R8 =ffff888100aa0237 R9 =1ffff11020154046 R10=dffffc0000000000 R11=ffffffff85504a80
R12=dffffc0000000000 R13=ffffffff99b04900 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504afc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fde917446c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000780 CR3=0000000035036000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fde90a12e7b
XMM06=0000000000000000 00007fde90a12e75 XMM07=0000000000000000 00007fde90a12e89
XMM08=0000000000000000 00007fde90a12f0f XMM09=0000000000000000 00007fde90a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=0000000000000202 RCX=b40c11b1295bb900 RDX=ffffffff8172d195
RSI=ffffffff8d9cea92 RDI=ffffffff8be34480 RBP=dffffc0000000000 RSP=ffffc900001b7370
R8 =ffffc900001b74f8 R9 =0000000000000000 R10=ffffc900001b7558 R11=fffff52000036ead
R12=ffffc900001b7508 R13=ffffffff8172d195 R14=ffffffff8e13a160 R15=ffff8881006b5640
RIP=ffffffff819d857f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3301fff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8173d34f ffffffff81688aff
XMM02=ffffffff817495cb ffffffff81688aff XMM03=ffffffff8174987f ffffffff817497e0
XMM04=ffffffff817499cb ffffffff8174994f XMM05=ffffffff817498a8 ffffffff8174987f
XMM06=ffffffff817497e0 ffffffff817495cb XMM07=ffffffff81688aff ffffffff81688a6d
XMM08=0000000000000000 00007f5ddfe12f0f XMM09=0000000000000000 00007f5ddfe12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
