last executing test programs:

2m36.11035409s ago: executing program 0 (id=16):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000036000b63861538e186a697fc12b5fc60", 0x14}], 0x1}, 0x0)

2m36.0336154s ago: executing program 0 (id=18):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)

2m35.938463626s ago: executing program 0 (id=21):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x44, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

2m35.788421271s ago: executing program 0 (id=24):
r0 = socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0)

2m35.641393076s ago: executing program 0 (id=27):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

2m35.441899151s ago: executing program 0 (id=30):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a", 0x35}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0xfe)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
close(r3)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x150, 0xb, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x150}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

2m20.701041227s ago: executing program 2 (id=168):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

2m20.386805252s ago: executing program 32 (id=30):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a", 0x35}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0xfe)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
close(r3)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x150, 0xb, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x150}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

2m19.813893726s ago: executing program 2 (id=178):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x1}, 0x20008890)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00'}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r0, 0x0, 0x40000020)

2m18.816609901s ago: executing program 2 (id=185):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x3f, 0x70bd26, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0)

2m18.654807975s ago: executing program 2 (id=187):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)

2m18.564049037s ago: executing program 2 (id=188):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

2m18.491254108s ago: executing program 2 (id=190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)

2m3.271961602s ago: executing program 33 (id=190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)

1m42.550261392s ago: executing program 1 (id=554):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0xf5ff, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050)

1m42.532300864s ago: executing program 1 (id=556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x20, 0x4, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4bef}]})

1m42.36330106s ago: executing program 1 (id=562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0)

1m42.36295653s ago: executing program 1 (id=563):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000200000000010003c0003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

1m42.083733476s ago: executing program 1 (id=565):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m40.120323467s ago: executing program 1 (id=584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xb6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x28a0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x80}}, 0x0)

1m25.066605923s ago: executing program 34 (id=584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xb6}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x28a0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x80}}, 0x0)

1.662992021s ago: executing program 3 (id=1955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.473824888s ago: executing program 3 (id=1957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0)

1.320552117s ago: executing program 3 (id=1959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x97, &(0x7f0000001ac0)={&(0x7f0000000000)={0x28, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x16, 0x0, 0x1, [@typed={0x6, 0x105, 0x0, 0x0, @binary="3b13"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.320299538s ago: executing program 5 (id=1960):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.27649431s ago: executing program 5 (id=1961):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x9)

1.181062212s ago: executing program 5 (id=1964):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4)

1.134349182s ago: executing program 5 (id=1966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

1.045013459s ago: executing program 4 (id=1967):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50)

930.801298ms ago: executing program 4 (id=1968):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33)

925.280515ms ago: executing program 4 (id=1969):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000dc0)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94)

830.021855ms ago: executing program 4 (id=1970):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="000004000036ec08de308c8a0e5ab642075e"], 0x48)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000000000000"], 0x20}, 0x8000)

781.598207ms ago: executing program 4 (id=1971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="95ea63d6962c3d546b85699a91de612079f9f4a9e60454bff9b592145cc1e0ec7fff2e6ab246ba5b97a271f2979f62cb6a6527bf89be72a9531ad0a0b94fedd81e3e45218e2537aa59fc70a4a8d03693e58fa156c061f7ffbc30be1015c459c7a28a77a239e3dea09edaf933065e24a9f3f7e251df9e1dc34863a1bfd7a78ec77f3d0bcbb419bc22e0f584a6c0ba6128f253846e1e55923142d8462cc56603a9e0c6c0266cc448a584213909274989dd8d1601ad8700d6985689ee65cb4bb8658d63c6fee145041e829aa72369136b9e73818b53217fb82c505c082815bde4d90c0e1ef71dc37aaeece155320966cfe7830238f73e21", @ANYRESHEX=r1, @ANYRES8, @ANYRES8=r0], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='spi_setup\x00'}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5411, &(0x7f00000000c0))
socket$kcm(0x29, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000005c0)={'team0\x00'})
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffddb)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
socketpair(0x22, 0x2, 0x22, &(0x7f0000000180))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000a5321354000000003950060a423c4bab", @ANYRES64=r7, @ANYRESOCT], &(0x7f0000000000)='GPL\x00'}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000b20000dd9464120000000000000000000000c28ad73f10cf20d743e4b765d5b5a8606813e3860a61dbbd6e454060ba4eb825c95203ba250ccd15377dac4d0ebdff061a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0xa, 0x5, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0)

182.404858ms ago: executing program 3 (id=1972):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

163.258777ms ago: executing program 4 (id=1973):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, 0x0)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, 0x0, 0x106)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg(r7, &(0x7f0000001a80)={&(0x7f0000000540)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000001880)}, 0x10)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100010, 0x0, 0x0, 0x6, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0)
r9 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}})
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000240081064e81f782db44b9040a02080006000000e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r11 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x8, 0x2, 0x6, 0xdd, 0x0, 0x101, 0x284, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffe}, 0x60, 0x7, 0x8000000, 0x4, 0x45, 0x7, 0xfff, 0x0, 0x5}, 0xffffffffffffffff, 0xd, r11, 0x1)

161.130558ms ago: executing program 5 (id=1974):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0)

4.738978ms ago: executing program 5 (id=1975):
r0 = socket$kcm(0x11, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x10a8, 0x6, 0x0, 0x0, 0x9, 0x7ffffc, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="f6313110b6468473237e58f6892f", 0xe}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

4.405963ms ago: executing program 3 (id=1976):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x85, 0x0, 0x0)

0s ago: executing program 3 (id=1977):
r0 = socket$kcm(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000001c0)={r0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50237' (ED25519) to the list of known hosts.
syzkaller login: [   55.986885][ T5825] cgroup: Unknown subsys name 'net'
[   56.069354][ T5825] cgroup: Unknown subsys name 'cpuset'
[   56.073930][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.519773][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.263127][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.542783][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.225140][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.228868][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.232308][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.235282][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.238486][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.308820][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.312510][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.327848][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.332184][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.335872][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.350900][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.355855][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.360622][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.365392][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.369515][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.607915][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   68.748640][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.752614][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.755501][ T5870] bridge_slave_0: entered allmulticast mode
[   68.758488][ T5870] bridge_slave_0: entered promiscuous mode
[   68.792523][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.795750][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.798996][ T5870] bridge_slave_1: entered allmulticast mode
[   68.802454][ T5870] bridge_slave_1: entered promiscuous mode
[   68.858877][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.876377][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.910426][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   68.948086][ T5870] team0: Port device team_slave_0 added
[   68.965984][ T5870] team0: Port device team_slave_1 added
[   69.018857][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.021837][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.035572][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.060442][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.063125][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.074145][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.085553][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   69.143843][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.148303][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.151605][ T5875] bridge_slave_0: entered allmulticast mode
[   69.155332][ T5875] bridge_slave_0: entered promiscuous mode
[   69.159326][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.162149][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.165575][ T5875] bridge_slave_1: entered allmulticast mode
[   69.170090][ T5875] bridge_slave_1: entered promiscuous mode
[   69.206980][ T5870] hsr_slave_0: entered promiscuous mode
[   69.212603][ T5870] hsr_slave_1: entered promiscuous mode
[   69.236054][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.263009][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.309750][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.312837][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.317050][ T5877] bridge_slave_0: entered allmulticast mode
[   69.321100][ T5877] bridge_slave_0: entered promiscuous mode
[   69.326654][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.329681][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.332650][ T5877] bridge_slave_1: entered allmulticast mode
[   69.337115][ T5877] bridge_slave_1: entered promiscuous mode
[   69.385837][ T5875] team0: Port device team_slave_0 added
[   69.396192][ T5875] team0: Port device team_slave_1 added
[   69.412120][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.436006][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.491499][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.495877][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.508005][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.513919][ T5877] team0: Port device team_slave_0 added
[   69.532945][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.536274][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.548089][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.554514][ T5877] team0: Port device team_slave_1 added
[   69.599935][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.602351][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.612430][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.623179][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.626814][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.637634][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.695382][ T5875] hsr_slave_0: entered promiscuous mode
[   69.698281][ T5875] hsr_slave_1: entered promiscuous mode
[   69.701065][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   69.704210][ T5875] Cannot create hsr debugfs directory
[   69.765576][ T5877] hsr_slave_0: entered promiscuous mode
[   69.768370][ T5877] hsr_slave_1: entered promiscuous mode
[   69.771724][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   69.774553][ T5877] Cannot create hsr debugfs directory
[   69.890605][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.910650][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.929085][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.958275][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.088912][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.109443][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.122604][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.147698][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.195477][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.213260][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.222103][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.231157][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.275390][ T5873] Bluetooth: hci0: command tx timeout
[   70.338898][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.398972][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.406444][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   70.420740][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.424740][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.434764][ T5873] Bluetooth: hci1: command tx timeout
[   70.434813][ T5878] Bluetooth: hci2: command tx timeout
[   70.449508][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.452729][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.462521][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.477228][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   70.501133][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.504472][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.520554][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   70.541778][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.544927][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.572649][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.575732][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.593590][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.596995][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.873355][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.880769][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.912153][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.969897][ T5870] veth0_vlan: entered promiscuous mode
[   71.005814][ T5877] veth0_vlan: entered promiscuous mode
[   71.009920][ T5870] veth1_vlan: entered promiscuous mode
[   71.020599][ T5875] veth0_vlan: entered promiscuous mode
[   71.033823][ T5877] veth1_vlan: entered promiscuous mode
[   71.049918][ T5875] veth1_vlan: entered promiscuous mode
[   71.092746][ T5877] veth0_macvtap: entered promiscuous mode
[   71.105840][ T5870] veth0_macvtap: entered promiscuous mode
[   71.118999][ T5870] veth1_macvtap: entered promiscuous mode
[   71.124242][ T5877] veth1_macvtap: entered promiscuous mode
[   71.155228][ T5875] veth0_macvtap: entered promiscuous mode
[   71.162005][ T5875] veth1_macvtap: entered promiscuous mode
[   71.170207][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.176815][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.197114][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.202159][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.224010][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.229784][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.232981][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.241140][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.266127][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.283953][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.290424][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.302830][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.309042][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.327365][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.338918][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.341974][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.382360][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.388997][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.400076][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.403368][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.473414][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.477217][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.477257][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.492201][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.531174][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.541000][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.592423][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.600563][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.646520][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.650491][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.738974][ T5939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13'.
[   71.754572][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'.
[   71.767382][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.770892][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.933356][ T5944] netlink: 'syz.2.15': attribute type 21 has an invalid length.
[   72.136204][ T5953] netlink: 176 bytes leftover after parsing attributes in process `syz.2.19'.
[   72.362579][ T5878] Bluetooth: hci0: command tx timeout
[   72.463996][ T5970] =======================================================
[   72.463996][ T5970] WARNING: The mand mount option has been deprecated and
[   72.463996][ T5970]          and is ignored by this kernel. Remove the mand
[   72.463996][ T5970]          option from the mount to silence this warning.
[   72.463996][ T5970] =======================================================
[   72.515991][ T5878] Bluetooth: hci2: command tx timeout
[   72.530428][ T5878] Bluetooth: hci1: command tx timeout
[   72.602154][ T5961] netlink: 'syz.1.23': attribute type 33 has an invalid length.
[   72.615338][ T5961] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23'.
[   72.695123][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   72.699255][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'.
[   72.800055][ T5980] netlink: 204 bytes leftover after parsing attributes in process `syz.2.32'.
[   72.889210][    C1] hrtimer: interrupt took 32870 ns
[   73.102540][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   73.634101][ T5989] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.36'.
[   74.161410][ T5999] netlink: 'syz.2.40': attribute type 10 has an invalid length.
[   74.271754][ T5999] macvlan0: entered allmulticast mode
[   74.444829][ T5878] Bluetooth: hci0: command tx timeout
[   74.549981][ T6005] netlink: 2 bytes leftover after parsing attributes in process `syz.1.42'.
[   74.754654][ T5878] Bluetooth: hci1: command tx timeout
[   74.757569][ T5878] Bluetooth: hci2: command tx timeout
[   74.822122][ T5999] veth1_vlan: entered allmulticast mode
[   74.827591][ T5999] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   76.226221][ T6024] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET)
[   76.389243][ T6026] Zero length message leads to an empty skb
[   76.515137][ T5878] Bluetooth: hci0: command tx timeout
[   76.715587][ T6041] lo speed is unknown, defaulting to 1000
[   76.718170][ T6041] lo speed is unknown, defaulting to 1000
[   76.741320][ T6041] lo speed is unknown, defaulting to 1000
[   76.761602][ T6041] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.779718][ T6041] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.836414][ T5878] Bluetooth: hci2: command tx timeout
[   76.836460][ T5873] Bluetooth: hci1: command tx timeout
[   76.877899][ T6041] lo speed is unknown, defaulting to 1000
[   76.895058][ T6041] lo speed is unknown, defaulting to 1000
[   76.907184][ T6041] lo speed is unknown, defaulting to 1000
[   77.296380][ T6052] __nla_validate_parse: 1 callbacks suppressed
[   77.296399][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'.
[   77.506359][ T6064] netlink: 'syz.2.68': attribute type 11 has an invalid length.
[   77.758301][ T6073] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   77.935899][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[   78.131858][ T6081] netlink: 'syz.2.76': attribute type 10 has an invalid length.
[   78.169148][ T6081] veth0_vlan: left promiscuous mode
[   78.173429][ T6081] veth0_vlan: entered promiscuous mode
[   78.184027][ T6081] team0: Device veth0_vlan failed to register rx_handler
[   78.273634][ T6081] syz.2.76 (6081) used greatest stack depth: 19384 bytes left
[   78.537458][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.82'.
[   78.727006][ T6101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.86'.
[   79.379377][ T6121] Illegal XDP return value 41639992 on prog  (id 34) dev N/A, expect packet loss!
[   79.408635][ T6115] bridge_slave_1: left allmulticast mode
[   79.411850][ T6115] bridge_slave_1: left promiscuous mode
[   80.230626][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.265110][ T6115] bridge_slave_0: left allmulticast mode
[   80.269291][ T6115] bridge_slave_0: left promiscuous mode
[   80.274162][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.396780][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.400393][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.406800][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.410486][ T6126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[   80.480666][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.97'.
[   80.781055][ T6139] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.101'.
[   81.030997][ T5873] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23
[   81.278140][ T6144] : port 1(veth0_to_bridge) entered blocking state
[   81.287290][ T6144] : port 1(veth0_to_bridge) entered disabled state
[   81.290297][ T6144] veth0_to_bridge: entered allmulticast mode
[   81.296309][ T6144] veth0_to_bridge: entered promiscuous mode
[   81.304878][ T6144] : port 2(veth0_to_team) entered blocking state
[   81.308260][ T6144] : port 2(veth0_to_team) entered disabled state
[   81.311361][ T6144] veth0_to_team: entered allmulticast mode
[   81.324952][ T6144] veth0_to_team: entered promiscuous mode
[   81.702736][ T6157] netlink: 'syz.1.108': attribute type 29 has an invalid length.
[   82.488060][ T6181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.170104][ T6206] __nla_validate_parse: 2 callbacks suppressed
[   83.170115][ T6206] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.130'.
[   83.185468][ T6203] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.130'.
[   83.191671][ T6203] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.130'.
[   83.710911][ T6222] netlink: 'syz.1.136': attribute type 29 has an invalid length.
[   84.013102][ T6229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.958596][ T6262] netlink: 'syz.1.151': attribute type 10 has an invalid length.
[   85.995810][ T6262] team0: Port device netdevsim0 added
[   86.736083][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.1.163'.
[   86.756436][   T24] cfg80211: failed to load regulatory.db
[   86.851862][ T6291] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   86.924584][ T6292] netlink: 'syz.1.163': attribute type 10 has an invalid length.
[   87.251542][ T6298] netlink: 67 bytes leftover after parsing attributes in process `syz.2.166'.
[   88.065362][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.068873][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.072839][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.077549][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.080915][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.259783][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.339853][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.383792][ T6317] chnl_net:caif_netlink_parms(): no params data found
[   88.473973][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.748161][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.831218][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.839056][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.842180][ T6317] bridge_slave_0: entered allmulticast mode
[   88.850393][ T6317] bridge_slave_0: entered promiscuous mode
[   88.857936][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.861227][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.865169][ T6317] bridge_slave_1: entered allmulticast mode
[   88.869145][ T6317] bridge_slave_1: entered promiscuous mode
[   88.928874][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.941508][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.086208][ T6317] team0: Port device team_slave_0 added
[   89.185251][ T6317] team0: Port device team_slave_1 added
[   89.360098][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.363116][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.377459][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.413327][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.417601][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.428794][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.445069][   T12] bridge_slave_1: left allmulticast mode
[   89.447748][   T12] bridge_slave_1: left promiscuous mode
[   89.451494][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.517396][   T12] bridge_slave_0: left allmulticast mode
[   89.519838][   T12] bridge_slave_0: left promiscuous mode
[   89.522377][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.043056][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.052663][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.059964][   T12] bond0 (unregistering): Released all slaves
[   90.114536][ T5873] Bluetooth: hci1: command tx timeout
[   90.162248][ T6317] hsr_slave_0: entered promiscuous mode
[   90.173527][ T6317] hsr_slave_1: entered promiscuous mode
[   90.181262][ T6317] debugfs: 'hsr0' already exists in 'hsr'
[   90.183816][ T6317] Cannot create hsr debugfs directory
[   90.573199][   T12] hsr_slave_0: left promiscuous mode
[   90.589042][   T12] hsr_slave_1: left promiscuous mode
[   90.592252][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.617344][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.625521][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.628740][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.669832][   T12] veth1_macvtap: left promiscuous mode
[   90.672427][   T12] veth0_macvtap: left promiscuous mode
[   90.696668][   T12] veth1_vlan: left promiscuous mode
[   90.699227][   T12] veth0_vlan: left promiscuous mode
[   91.187539][   T12] team0 (unregistering): Port device team_slave_1 removed
[   91.251744][   T12] team0 (unregistering): Port device team_slave_0 removed
[   91.688073][ T6392] syzkaller0: entered promiscuous mode
[   91.690627][ T6392] syzkaller0: entered allmulticast mode
[   92.204661][ T5873] Bluetooth: hci1: command tx timeout
[   92.921992][ T6317] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.955898][ T6317] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.986254][ T6317] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.989512][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[   93.000810][ T6317] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.183243][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.223982][ T6317] 8021q: adding VLAN 0 to HW filter on device team0
[   93.243375][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.246567][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.276870][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.280033][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.356852][ T6317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.628510][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.710992][ T6317] veth0_vlan: entered promiscuous mode
[   93.720590][ T6317] veth1_vlan: entered promiscuous mode
[   93.779873][ T6317] veth0_macvtap: entered promiscuous mode
[   93.795253][ T6317] veth1_macvtap: entered promiscuous mode
[   93.807801][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.817795][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.826646][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.833850][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.838377][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.842002][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.153668][ T6433] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.206'.
[   94.190387][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.193387][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.229052][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.231795][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.284836][ T5873] Bluetooth: hci1: command tx timeout
[   94.447235][ T5873] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   96.355458][ T5873] Bluetooth: hci1: command tx timeout
[   96.441072][ T6482] netlink: 'syz.1.227': attribute type 17 has an invalid length.
[   96.444965][ T6482] netlink: 148 bytes leftover after parsing attributes in process `syz.1.227'.
[   96.493160][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'.
[   96.515364][ T5873] Bluetooth: hci2: command tx timeout
[   96.903492][ T6498] netlink: 'syz.3.235': attribute type 39 has an invalid length.
[  100.394039][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1049418429 wd_nsec: 1049418456
[  102.137041][ T6526] netlink: 'syz.3.243': attribute type 2 has an invalid length.
[  102.140031][ T6526] netlink: 130532 bytes leftover after parsing attributes in process `syz.3.243'.
[  102.419780][ T6535] warning: `syz.1.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.559970][ T6535] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  103.843605][ T6569] netlink: 'syz.3.258': attribute type 1 has an invalid length.
[  103.861893][ T6569] netlink: 'syz.3.258': attribute type 4 has an invalid length.
[  103.875078][ T6569] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.258'.
[  103.893232][ T6569] netlink: 'syz.3.258': attribute type 1 has an invalid length.
[  103.903252][ T6569] netlink: 'syz.3.258': attribute type 4 has an invalid length.
[  103.909792][ T6569] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.258'.
[  104.159276][ T6581] netlink: 'syz.3.263': attribute type 3 has an invalid length.
[  104.162009][ T6581] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.263'.
[  104.458113][ T6598] netlink: 'syz.1.264': attribute type 1 has an invalid length.
[  104.474473][ T6598] netlink: 'syz.1.264': attribute type 2 has an invalid length.
[  104.538547][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'.
[  105.411412][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.420015][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.428050][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.440384][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.444494][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.782997][ T6607] chnl_net:caif_netlink_parms(): no params data found
[  105.883943][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.887297][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.889691][ T6607] bridge_slave_0: entered allmulticast mode
[  105.892486][ T6607] bridge_slave_0: entered promiscuous mode
[  105.896595][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.904055][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.914484][ T6607] bridge_slave_1: entered allmulticast mode
[  105.917993][ T6607] bridge_slave_1: entered promiscuous mode
[  106.003090][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.028621][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.042896][ T6651] netlink: 277 bytes leftover after parsing attributes in process `syz.1.284'.
[  106.068577][ T6607] team0: Port device team_slave_0 added
[  106.075222][ T6607] team0: Port device team_slave_1 added
[  106.171505][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.179616][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.191658][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.196982][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.199518][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.209833][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.272495][ T6607] hsr_slave_0: entered promiscuous mode
[  106.275628][ T6607] hsr_slave_1: entered promiscuous mode
[  106.277994][ T6607] debugfs: 'hsr0' already exists in 'hsr'
[  106.280020][ T6607] Cannot create hsr debugfs directory
[  106.282239][ T6662] syzkaller0: entered promiscuous mode
[  106.284845][ T6662] syzkaller0: entered allmulticast mode
[  106.444209][ T6665] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.289'.
[  106.486160][ T6607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.501767][ T6607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.538840][ T6607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.548023][ T6607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.666513][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.683864][ T6607] 8021q: adding VLAN 0 to HW filter on device team0
[  106.702993][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.706699][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.720208][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.723148][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.802903][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'.
[  106.913918][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.960034][ T6693] netlink: 'syz.3.297': attribute type 2 has an invalid length.
[  106.980463][ T6693] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.297'.
[  107.089247][ T6700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.092185][ T6700] IPv6: NLM_F_CREATE should be set when creating new route
[  107.095167][ T6700] IPv6: NLM_F_CREATE should be set when creating new route
[  107.098016][ T6700] IPv6: NLM_F_CREATE should be set when creating new route
[  107.180588][ T6607] veth0_vlan: entered promiscuous mode
[  107.188056][ T6607] veth1_vlan: entered promiscuous mode
[  107.213489][ T6607] veth0_macvtap: entered promiscuous mode
[  107.355306][ T6711] netlink: 'syz.3.300': attribute type 16 has an invalid length.
[  107.358989][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.300'.
[  107.453366][ T6607] veth1_macvtap: entered promiscuous mode
[  107.462180][ T6709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.302'.
[  107.471468][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.484581][ T5873] Bluetooth: hci0: command tx timeout
[  107.496855][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.511283][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.522484][ T6713] xt_socket: unknown flags 0x6
[  107.531865][ T5900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.536744][ T5900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.542464][ T5900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.554558][ T5900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.636514][ T6715] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[  107.639859][ T6715] netlink: 'syz.1.304': attribute type 2 has an invalid length.
[  107.647224][ T6715] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.304'.
[  107.676829][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.696199][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.769613][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.773761][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.279765][ T6745] delete_channel: no stack
[  108.430351][ T6752] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  108.660829][ T6772] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.329'.
[  108.665742][ T6772] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.742971][ T6776] netlink: 152 bytes leftover after parsing attributes in process `syz.4.331'.
[  108.747067][ T6776] tc_dump_action: action bad kind
[  108.803549][ T6780] netlink: 'syz.4.333': attribute type 21 has an invalid length.
[  109.401449][ T6812] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.347'.
[  109.564829][ T5873] Bluetooth: hci0: command tx timeout
[  109.723409][ T6835] netlink: 703 bytes leftover after parsing attributes in process `syz.1.358'.
[  110.106637][ T6854] netlink: 'syz.4.366': attribute type 1 has an invalid length.
[  110.122303][ T6854] netlink: 'syz.4.366': attribute type 2 has an invalid length.
[  110.127427][ T6854] netlink: 'syz.4.366': attribute type 7 has an invalid length.
[  110.130902][ T6854] netlink: 37 bytes leftover after parsing attributes in process `syz.4.366'.
[  110.137045][ T6854] netlink: 'syz.4.366': attribute type 1 has an invalid length.
[  110.140490][ T6854] netlink: 'syz.4.366': attribute type 2 has an invalid length.
[  110.143892][ T6854] netlink: 130076 bytes leftover after parsing attributes in process `syz.4.366'.
[  111.007530][ T6865] netlink: 'syz.4.371': attribute type 29 has an invalid length.
[  111.395383][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'.
[  111.644644][ T5873] Bluetooth: hci0: command tx timeout
[  111.872935][ T6928] netlink: 'syz.4.399': attribute type 11 has an invalid length.
[  111.887516][ T6928] netlink: 'syz.4.399': attribute type 11 has an invalid length.
[  112.382578][ T6945] __nla_validate_parse: 5 callbacks suppressed
[  112.382636][ T6945] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.406'.
[  113.206679][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.210673][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.214062][ T6980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.218979][ T6980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.717011][ T5873] Bluetooth: hci0: command tx timeout
[  118.109602][ T7041] validate_nla: 5 callbacks suppressed
[  118.109613][ T7041] netlink: 'syz.1.446': attribute type 7 has an invalid length.
[  119.022127][ T7043] syz.4.447 (7043) used greatest stack depth: 19256 bytes left
[  119.059218][ T7067] netlink: 'syz.4.459': attribute type 3 has an invalid length.
[  119.219179][ T7075] netlink: 204 bytes leftover after parsing attributes in process `syz.1.463'.
[  119.490712][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.468'.
[  119.721252][ T7109] netlink: 'syz.3.478': attribute type 10 has an invalid length.
[  120.098171][ T7115] tap0: tun_chr_ioctl cmd 1074812118
[  120.583866][ T7124] delete_channel: no stack
[  120.586039][ T7124] delete_channel: no stack
[  120.592292][ T7109] syz.3.478 (7109) used greatest stack depth: 18808 bytes left
[  120.665090][ T7130] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.955428][ T7139] sit0: entered promiscuous mode
[  120.957634][ T7139] sit0: entered allmulticast mode
[  121.038333][ T7136] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.489'.
[  121.167299][ T7134] netlink: 'syz.1.486': attribute type 39 has an invalid length.
[  121.859551][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'.
[  121.931849][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'.
[  121.935702][ T7159] netlink: 6 bytes leftover after parsing attributes in process `syz.4.498'.
[  122.023170][ T7172] netlink: 'syz.3.503': attribute type 5 has an invalid length.
[  122.027161][ T7172] netlink: 'syz.3.503': attribute type 5 has an invalid length.
[  122.093535][ T7175] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.369923][ T7192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.512'.
[  123.498830][ T7223] netlink: 'syz.4.519': attribute type 2 has an invalid length.
[  123.502389][ T7223] netlink: 'syz.4.519': attribute type 1 has an invalid length.
[  123.508372][ T7223] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.519'.
[  123.512182][ T7223] block nbd5: not configured, cannot reconfigure
[  124.049009][ T7228] netlink: 'syz.1.522': attribute type 25 has an invalid length.
[  124.051792][ T7228] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.522'.
[  124.125622][ T7238] netlink: 'syz.3.527': attribute type 1 has an invalid length.
[  124.840611][ T7255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.292914][ T7274] : renamed from hsr0 (while UP)
[  127.400291][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'.
[  127.754814][ T7372] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.582'.
[  127.769422][ T7378] netlink: 'syz.3.581': attribute type 1 has an invalid length.
[  128.553692][ T7469] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.587'.
[  128.567511][ T7469] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.587'.
[  129.155179][ T7475] netlink: 'syz.4.588': attribute type 1 has an invalid length.
[  129.157963][ T7475] netlink: 17 bytes leftover after parsing attributes in process `syz.4.588'.
[  129.882243][ T7489] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.594'.
[  130.237607][ T7503] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.598'.
[  131.442043][ T7516] netlink: 'syz.3.606': attribute type 1 has an invalid length.
[  131.445530][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  131.740612][ T7526] openvswitch: netlink: Multiple metadata blocks provided
[  131.881116][ T7522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'.
[  132.086090][ T7539] option changes via remount are deprecated (pid=7538 comm=syz.3.615)
[  132.177377][ T7541] netlink: 'syz.4.616': attribute type 25 has an invalid length.
[  132.839567][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.842226][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.149610][   T33] audit: type=1107 audit(1759350172.132:2): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  133.916832][ T7589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.920902][ T7589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.896091][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  134.926747][ T7609] : entered promiscuous mode
[  135.070850][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'.
[  135.462481][ T7636] netlink: 'syz.3.658': attribute type 2 has an invalid length.
[  135.467731][ T7636] netlink: 'syz.3.658': attribute type 2 has an invalid length.
[  135.527123][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'.
[  135.530887][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'.
[  135.538412][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'.
[  135.542783][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'.
[  135.830555][ T7655] netlink: 'syz.3.667': attribute type 10 has an invalid length.
[  136.116735][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'.
[  136.120462][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.673'.
[  136.124176][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.4.673'.
[  136.258954][ T7676] netlink: 26 bytes leftover after parsing attributes in process `syz.4.677'.
[  136.280558][ T7678] netlink: 'syz.3.678': attribute type 4 has an invalid length.
[  136.319014][ T7678] .`: renamed from bond0 (while UP)
[  137.654165][ T7706] netlink: 'syz.3.687': attribute type 27 has an invalid length.
[  137.658390][ T7706] netlink: 'syz.3.687': attribute type 4 has an invalid length.
[  138.232002][ T7714] GPL: port 1(gretap0) entered blocking state
[  138.236724][ T7714] GPL: port 1(gretap0) entered disabled state
[  138.239282][ T7714] gretap0: entered allmulticast mode
[  138.247540][ T7714] gretap0: entered promiscuous mode
[  138.319291][ T7716] netlink: 'syz.4.692': attribute type 1 has an invalid length.
[  138.323747][ T7716] netlink: 'syz.4.692': attribute type 2 has an invalid length.
[  138.488215][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.490907][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.495689][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.535703][ T7721] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  138.631893][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.641924][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.654679][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.660598][ T7721] wlan1 speed is unknown, defaulting to 1000
[  138.917264][ T7737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.577852][ T7767] netlink: 'syz.3.709': attribute type 10 has an invalid length.
[  139.581174][ T7767] .`: entered promiscuous mode
[  139.583200][ T7767] bond_slave_0: entered promiscuous mode
[  139.592906][ T7767] bond_slave_1: entered promiscuous mode
[  139.606389][ T7767] 8021q: adding VLAN 0 to HW filter on device .`
[  139.621932][ T7767] bridge0: port 3(.`) entered blocking state
[  139.628884][ T7767] bridge0: port 3(.`) entered disabled state
[  139.639055][ T7767] .`: entered allmulticast mode
[  139.644428][ T7767] bond_slave_0: entered allmulticast mode
[  139.646872][ T7767] bond_slave_1: entered allmulticast mode
[  139.667525][ T7767] bridge0: port 3(.`) entered blocking state
[  139.670219][ T7767] bridge0: port 3(.`) entered forwarding state
[  139.833012][ T7769] netlink: 'syz.3.710': attribute type 20 has an invalid length.
[  141.173419][ T7814] netlink: 'syz.4.730': attribute type 10 has an invalid length.
[  141.189242][ T7814] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  141.319668][ T7820] __nla_validate_parse: 4 callbacks suppressed
[  141.319686][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'.
[  141.343552][ T7820] netlink: 312 bytes leftover after parsing attributes in process `syz.3.733'.
[  141.351957][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'.
[  141.471624][ T7828] netlink: 'syz.3.737': attribute type 1 has an invalid length.
[  141.474991][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'.
[  141.519461][ T7830] netlink: 'syz.3.738': attribute type 46 has an invalid length.
[  141.802720][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.944480][ T7853] : renamed from pim6reg1
[  142.982419][ T7855] netlink: 144 bytes leftover after parsing attributes in process `syz.4.747'.
[  143.368678][ T7867] netlink: 152 bytes leftover after parsing attributes in process `syz.4.753'.
[  143.372508][ T7867] netlink: 6 bytes leftover after parsing attributes in process `syz.4.753'.
[  143.402029][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.406424][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.410062][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.414160][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.420482][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.473511][ T7868] wlan1 speed is unknown, defaulting to 1000
[  143.569888][ T7876] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.756'.
[  143.575704][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.583308][ T7876] netlink: zone id is out of range
[  143.587310][ T7876] netlink: zone id is out of range
[  143.589728][ T7876] netlink: get zone limit has 8 unknown bytes
[  143.712591][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.805633][ T7885] netlink: 64 bytes leftover after parsing attributes in process `syz.3.759'.
[  143.831676][ T7868] chnl_net:caif_netlink_parms(): no params data found
[  143.832239][ T7887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.760'.
[  143.879192][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.043871][   T13] team0: Port device netdevsim0 removed
[  144.055136][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.207011][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.214611][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.217101][ T7868] bridge_slave_0: entered allmulticast mode
[  144.223521][ T7868] bridge_slave_0: entered promiscuous mode
[  144.238871][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.241521][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.243865][ T7868] bridge_slave_1: entered allmulticast mode
[  144.264585][ T7868] bridge_slave_1: entered promiscuous mode
[  144.318885][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.323242][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.393108][ T7868] team0: Port device team_slave_0 added
[  144.397904][ T7868] team0: Port device team_slave_1 added
[  144.436893][   T13] veth0_to_team: left allmulticast mode
[  144.438974][   T13] veth0_to_team: left promiscuous mode
[  144.447211][   T13] : port 2(veth0_to_team) entered disabled state
[  144.452688][   T13] veth0_to_bridge: left allmulticast mode
[  144.461927][   T13] veth0_to_bridge: left promiscuous mode
[  144.465664][   T13] : port 1(veth0_to_bridge) entered disabled state
[  144.470336][ T7928] netlink: 'syz.4.775': attribute type 1 has an invalid length.
[  144.473206][ T7928] netlink: 'syz.4.775': attribute type 2 has an invalid length.
[  144.762644][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.771069][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.776479][   T13] bond0 (unregistering): Released all slaves
[  144.949497][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.953550][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.965896][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.973135][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.976470][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.989248][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.029094][ T7953] wg2: entered promiscuous mode
[  145.035596][ T7953] wg2: entered allmulticast mode
[  145.150267][ T7868] hsr_slave_0: entered promiscuous mode
[  145.171052][ T7868] hsr_slave_1: entered promiscuous mode
[  145.173721][ T7868] debugfs: 'hsr0' already exists in 'hsr'
[  145.192205][ T7868] Cannot create hsr debugfs directory
[  145.217182][ T7960] netlink: 'syz.3.786': attribute type 4 has an invalid length.
[  145.220460][ T7960] netlink: 'syz.3.786': attribute type 3 has an invalid length.
[  145.475159][ T5873] Bluetooth: hci2: command tx timeout
[  145.734020][   T13] hsr_slave_0: left promiscuous mode
[  145.738249][   T13] hsr_slave_1: left promiscuous mode
[  145.749406][   T13] veth1_macvtap: left promiscuous mode
[  145.751275][   T13] veth0_macvtap: left promiscuous mode
[  145.753100][   T13] veth1_vlan: left promiscuous mode
[  145.755573][   T13] veth0_vlan: left promiscuous mode
[  146.200819][   T13] team0 (unregistering): Port device team_slave_1 removed
[  146.281256][   T13] team0 (unregistering): Port device team_slave_0 removed
[  146.559241][ T7990] .`: left allmulticast mode
[  146.561293][ T7990] bond_slave_0: left allmulticast mode
[  146.563820][ T7990] bond_slave_1: left allmulticast mode
[  146.567116][ T7990] bridge0: port 3(.`) entered disabled state
[  146.572016][ T7990] bridge_slave_1: left allmulticast mode
[  146.574949][ T7990] bridge_slave_1: left promiscuous mode
[  146.577756][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.583436][ T7990] bridge_slave_0: left promiscuous mode
[  146.586453][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.782706][ T8009] syzkaller0: entered promiscuous mode
[  146.785188][ T8009] syzkaller0: entered allmulticast mode
[  147.554466][ T5873] Bluetooth: hci2: command tx timeout
[  147.778362][ T8024] netlink: 'syz.3.807': attribute type 10 has an invalid length.
[  147.781650][ T8024] __nla_validate_parse: 9 callbacks suppressed
[  147.781665][ T8024] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.807'.
[  147.870159][ T8027] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.808'.
[  147.890353][ T7868] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.905795][ T7868] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.923265][ T7868] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  147.932992][ T7868] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.038165][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.049952][ T7868] 8021q: adding VLAN 0 to HW filter on device team0
[  148.059399][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.062047][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.078328][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.080973][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.239606][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.243157][ T8055] netlink: 'syz.3.814': attribute type 10 has an invalid length.
[  148.258959][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.814'.
[  148.285567][ T8055] batman_adv: batadv0: Adding interface: virt_wifi0
[  148.288432][ T8055] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.327285][ T8055] batman_adv: batadv0: Interface activated: virt_wifi0
[  148.493596][ T7868] veth0_vlan: entered promiscuous mode
[  148.529403][ T7868] veth1_vlan: entered promiscuous mode
[  148.569157][ T7868] veth0_macvtap: entered promiscuous mode
[  148.585322][ T7868] veth1_macvtap: entered promiscuous mode
[  148.595593][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.603153][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.621613][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.632587][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.648796][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.674104][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.733914][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.739744][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.786633][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.795126][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.960435][ T8102] netlink: ct family unspecified
[  148.962494][ T8102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.063579][ T8106] netlink: 'syz.3.831': attribute type 39 has an invalid length.
[  149.413970][ T8128] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.840'.
[  149.640545][ T5873] Bluetooth: hci2: command tx timeout
[  149.689089][ T8143] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.847'.
[  149.693013][ T8143] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.847'.
[  150.181696][ T8166] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.186248][ T8166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.282150][ T8186] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.863'.
[  151.305694][ T8186] openvswitch: netlink: Message has 6 unknown bytes.
[  151.354966][ T8191] netlink: 80 bytes leftover after parsing attributes in process `syz.4.865'.
[  151.365873][ T8186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  151.427732][ T8186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.435690][ T8193] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.863'.
[  151.714979][ T5873] Bluetooth: hci2: command tx timeout
[  151.839185][ T8211] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.873'.
[  152.289037][ T8223] netlink: 'syz.3.878': attribute type 10 has an invalid length.
[  152.353822][ T8225] netlink: 'syz.3.879': attribute type 21 has an invalid length.
[  152.423064][ T8225] netlink: 'syz.3.879': attribute type 15 has an invalid length.
[  152.426696][ T8225] IPv6: NLM_F_CREATE should be specified when creating new route
[  152.436026][ T8225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.438737][ T8225] IPv6: NLM_F_CREATE should be set when creating new route
[  152.441837][ T8225] IPv6: NLM_F_CREATE should be set when creating new route
[  152.444607][ T8225] IPv6: NLM_F_CREATE should be set when creating new route
[  152.577085][ T8208] delete_channel: no stack
[  152.807856][ T8236] tc_dump_action: action bad kind
[  153.010678][ T8240] netlink: 'syz.4.885': attribute type 2 has an invalid length.
[  153.014222][ T8240] __nla_validate_parse: 2 callbacks suppressed
[  153.034028][ T8240] netlink: 164 bytes leftover after parsing attributes in process `syz.4.885'.
[  153.066549][ T8246] netlink: 'syz.4.885': attribute type 2 has an invalid length.
[  153.066564][ T8246] netlink: 164 bytes leftover after parsing attributes in process `syz.4.885'.
[  153.312094][ T8256] netlink: 'syz.3.893': attribute type 10 has an invalid length.
[  153.500891][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'.
[  153.505269][ T8268] netlink: 'syz.3.899': attribute type 3 has an invalid length.
[  153.938184][ T5873] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  155.478735][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'.
[  155.528289][ T8326] netlink: 'syz.3.923': attribute type 3 has an invalid length.
[  155.539036][ T8326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'.
[  155.703553][ T8335] netlink: 'syz.3.926': attribute type 13 has an invalid length.
[  155.913772][ T8351] netlink: 'syz.3.934': attribute type 2 has an invalid length.
[  155.921168][ T8351] netlink: 51 bytes leftover after parsing attributes in process `syz.3.934'.
[  156.149355][ T8364] netlink: 72 bytes leftover after parsing attributes in process `syz.5.940'.
[  156.153108][ T8364] netlink: 72 bytes leftover after parsing attributes in process `syz.5.940'.
[  156.198689][ T8362] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.217434][ T8362] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.243310][ T8369] netlink: 'syz.4.942': attribute type 10 has an invalid length.
[  156.250197][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.4.942'.
[  156.271313][ T8369] dummy0: entered promiscuous mode
[  156.291748][ T8369] bond0: (slave dummy0): Releasing backup interface
[  156.302505][ T8369] bridge0: port 3(dummy0) entered blocking state
[  156.308295][ T8369] bridge0: port 3(dummy0) entered disabled state
[  156.311747][ T8369] dummy0: entered allmulticast mode
[  156.538712][ T8375] xt_HMARK: proto mask must be zero with L3 mode
[  156.555625][ T8375] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.944'.
[  156.559480][ T8375] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  156.562774][ T8375] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  157.013706][ T8396] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.021221][ T8396] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  157.588770][ T8416] bridge_slave_1: left allmulticast mode
[  157.591534][ T8416] bridge_slave_1: left promiscuous mode
[  157.594369][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.141417][ T8416] bridge_slave_0: left allmulticast mode
[  158.148323][ T8416] bridge_slave_0: left promiscuous mode
[  158.157024][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.241395][ T8422] __nla_validate_parse: 1 callbacks suppressed
[  158.241409][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'.
[  158.249959][ T5873] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  158.323109][ T8426] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.965'.
[  158.543245][ T8442] netlink: 'syz.3.973': attribute type 10 has an invalid length.
[  158.863857][ T8442] team0 (unregistering): Port device team_slave_0 removed
[  158.872749][ T8442] team0 (unregistering): Port device team_slave_1 removed
[  160.087429][ T8488] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.984'.
[  160.138775][ T8494] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  160.180842][ T8499] netlink: 36 bytes leftover after parsing attributes in process `syz.5.988'.
[  160.218330][ T8501] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  160.370771][ T8505] sctp: [Deprecated]: syz.5.991 (pid 8505) Use of int in maxseg socket option.
[  160.370771][ T8505] Use struct sctp_assoc_value instead
[  161.050781][ T8536] netlink: 'syz.3.1004': attribute type 29 has an invalid length.
[  161.056154][ T8536] netlink: 'syz.3.1004': attribute type 29 has an invalid length.
[  161.062340][ T8536] netlink: 'syz.3.1004': attribute type 29 has an invalid length.
[  161.067725][ T8536] netlink: 'syz.3.1004': attribute type 29 has an invalid length.
[  161.268419][ T8545] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1008'.
[  162.111491][ T8553] netlink: 'syz.3.1009': attribute type 21 has an invalid length.
[  162.114905][ T8553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1009'.
[  162.219282][ T8560] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1010'.
[  162.230110][ T8557] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1010'.
[  162.270041][ T8564] tmpfs: Bad value for 'uid'
[  162.275504][ T8564] tmpfs: Bad value for 'uid'
[  162.831258][ T5873] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  163.461981][ T8621] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1040'.
[  164.465517][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.468995][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.481193][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.506573][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.989210][ T8682] netlink: 'syz.5.1069': attribute type 9 has an invalid length.
[  164.993851][ T8682] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.1069'.
[  165.150551][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  165.152400][ T8691] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1073'.
[  165.194713][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.282986][ T5873] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  166.489303][ T8741] netlink: 'syz.5.1093': attribute type 21 has an invalid length.
[  166.776008][ T5873] Bluetooth: hci2: unknown advertising packet type: 0x65
[  166.776065][ T5873] Bluetooth: hci2: Dropping invalid advertising data
[  166.783474][ T5873] Bluetooth: hci2: Malformed LE Event: 0x02
[  166.895541][ T8755] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1100'.
[  167.017506][ T8762] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1105'.
[  167.330713][ T5873] Bluetooth: hci1: command tx timeout
[  167.578948][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.699072][ T8801] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.1120'.
[  168.786112][ T8833] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1131'.
[  169.190523][ T8838] netlink: 'syz.3.1135': attribute type 29 has an invalid length.
[  170.153214][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1152'.
[  170.157604][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1152'.
[  170.160560][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1152'.
[  172.521834][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'.
[  173.384183][ T8980] netlink: 'syz.5.1197': attribute type 33 has an invalid length.
[  173.399333][ T8980] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1197'.
[  175.443234][ T9046] netlink: 'syz.4.1224': attribute type 11 has an invalid length.
[  175.609935][ T9060] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1228'.
[  175.621232][ T9062] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1229'.
[  176.038533][ T9089] netlink: 'syz.4.1240': attribute type 39 has an invalid length.
[  176.049486][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'.
[  176.263991][ T9099] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  176.462960][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1241'.
[  176.609947][ T9117] : entered promiscuous mode
[  176.802427][ T9129] netlink: 'syz.3.1256': attribute type 4 has an invalid length.
[  176.806483][ T9129] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1256'.
[  177.301666][ T9148] syzkaller1: tun_chr_ioctl cmd 1074025677
[  177.317801][ T9148] syzkaller1: linktype set to 823
[  177.393386][ T9151] netlink: 'syz.3.1265': attribute type 1 has an invalid length.
[  177.404954][ T9151] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1265'.
[  177.417952][ T9151] netlink: 'syz.3.1265': attribute type 1 has an invalid length.
[  177.421695][ T9151] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1265'.
[  178.217447][   T33] audit: type=1107 audit(1759350217.292:3): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  178.304904][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1282'.
[  178.695487][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1286'.
[  179.221275][ T9216] netlink: 'syz.3.1290': attribute type 97 has an invalid length.
[  179.231161][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'.
[  179.239236][ T9216] netlink: 'syz.3.1290': attribute type 97 has an invalid length.
[  179.600080][ T9230] netlink: 'syz.3.1294': attribute type 11 has an invalid length.
[  179.658797][ T9225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.020800][ T9251] netlink: 'syz.5.1305': attribute type 1 has an invalid length.
[  180.069803][ T9253] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  180.073447][ T9253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.921525][ T9297] netlink: 'syz.4.1326': attribute type 6 has an invalid length.
[  180.925173][ T9297] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.329163][ T9328] netlink: 'syz.4.1341': attribute type 4 has an invalid length.
[  181.330876][ T9330] __nla_validate_parse: 4 callbacks suppressed
[  181.330895][ T9330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1342'.
[  181.332441][ T9328] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.337910][ T9330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1342'.
[  181.347206][ T9330] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1342'.
[  181.376695][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1341'.
[  182.462046][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'.
[  182.728447][ T9375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1358'.
[  182.757128][ T9375] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1358'.
[  182.770315][ T9375] netlink: 'syz.4.1358': attribute type 5 has an invalid length.
[  182.774800][ T9375] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1358'.
[  182.861384][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  182.867388][ T9382] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  183.117094][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1366'.
[  184.963612][ T9487] : entered promiscuous mode
[  186.413224][ T9540] __nla_validate_parse: 11 callbacks suppressed
[  186.413236][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1434'.
[  186.581569][ T9545] netlink: 'syz.3.1436': attribute type 21 has an invalid length.
[  187.238351][ T9578] netlink: 'syz.3.1451': attribute type 10 has an invalid length.
[  187.351063][ T9580] netlink: 'syz.4.1452': attribute type 21 has an invalid length.
[  187.628856][ T9584] wlan1 speed is unknown, defaulting to 1000
[  187.986469][ T9594] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1458'.
[  188.017984][ T5873] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  188.546962][ T9638] xt_time: invalid argument - start or stop time greater than 23:59:59
[  189.022488][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'.
[  189.028924][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'.
[  189.032980][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'.
[  189.167857][ T9658] netlink: 'syz.5.1489': attribute type 1 has an invalid length.
[  189.289677][ T9668] tap0: tun_chr_ioctl cmd 1074025675
[  189.292412][ T9668] tap0: persist disabled
[  189.449074][ T9679] netlink: 'syz.5.1499': attribute type 1 has an invalid length.
[  189.578299][ T9689] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1504'.
[  189.590441][ T9692] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1505'.
[  190.019339][ T9717] bpf: Bad value for 'gid'
[  190.130087][ T9719] netlink: 'syz.3.1515': attribute type 39 has an invalid length.
[  190.271197][ T9719] hsr_slave_0 (unregistering): left promiscuous mode
[  190.491547][ T9721] netlink: 'syz.3.1516': attribute type 21 has an invalid length.
[  190.497016][ T9721] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1516'.
[  191.691601][ T9751] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[  191.695285][ T9751] netlink: 'syz.3.1529': attribute type 4 has an invalid length.
[  191.723476][ T9752] netlink: 'syz.4.1530': attribute type 13 has an invalid length.
[  191.743015][ T9752] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1530'.
[  191.768333][ T9754] netlink: 'syz.3.1531': attribute type 21 has an invalid length.
[  191.777197][ T9752] erspan0: refused to change device tx_queue_len
[  191.780618][ T9752] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  191.791145][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1531'.
[  191.975080][ T5873] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  192.003445][ T9765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1536'.
[  193.820628][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'.
[  194.019256][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'.
[  194.289721][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.292497][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.596955][ T9769] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1538'.
[  194.736569][ T9803] netlink: 211 bytes leftover after parsing attributes in process `syz.5.1552'.
[  194.967811][ T9817] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1555'.
[  194.971068][ T9817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  195.261461][ T9825] netlink: 'syz.3.1561': attribute type 29 has an invalid length.
[  195.268168][ T9825] netlink: 'syz.3.1561': attribute type 29 has an invalid length.
[  195.289609][ T9825] netlink: 'syz.3.1561': attribute type 29 has an invalid length.
[  195.309754][ T9825] netlink: 'syz.3.1561': attribute type 29 has an invalid length.
[  195.503747][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1571'.
[  196.275338][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.381886][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1580'.
[  196.528309][ T9881] netlink: 'syz.4.1585': attribute type 10 has an invalid length.
[  196.535939][ T9881] bond0: entered promiscuous mode
[  196.542571][ T9881] bond_slave_0: entered promiscuous mode
[  196.551555][ T9881] bond_slave_1: entered promiscuous mode
[  196.578669][ T9881] bridge0: port 4(bond0) entered blocking state
[  196.587811][ T9881] bridge0: port 4(bond0) entered disabled state
[  196.592698][ T9881] bond0: entered allmulticast mode
[  196.596182][ T9881] bond_slave_0: entered allmulticast mode
[  196.599699][ T9881] bond_slave_1: entered allmulticast mode
[  196.652286][ T9881] bridge0: port 4(bond0) entered blocking state
[  196.656198][ T9881] bridge0: port 4(bond0) entered forwarding state
[  196.893942][ T5873] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  196.900590][ T5873] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  197.191877][ T9900] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  197.733333][ T9919] cgroup: fork rejected by pids controller in /syz3
[  197.745518][ T9921] __nla_validate_parse: 1 callbacks suppressed
[  197.745538][ T9921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1603'.
[  199.030337][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  199.037123][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  199.040940][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  199.077439][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  199.091224][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  199.251645][ T9949] wlan1 speed is unknown, defaulting to 1000
[  199.297803][ T9958] wlan1 speed is unknown, defaulting to 1000
[  199.438130][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.520757][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.536241][ T9958] chnl_net:caif_netlink_parms(): no params data found
[  199.572307][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.620608][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.623541][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.634772][ T9958] bridge_slave_0: entered allmulticast mode
[  199.637927][ T9958] bridge_slave_0: entered promiscuous mode
[  199.645379][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.648568][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.651194][ T9958] bridge_slave_1: entered allmulticast mode
[  199.654028][ T9958] bridge_slave_1: entered promiscuous mode
[  199.689459][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.827771][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.834121][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.872923][ T9958] team0: Port device team_slave_0 added
[  200.878488][ T9958] team0: Port device team_slave_1 added
[  200.923804][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.954874][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.983943][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.001306][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.004564][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.020744][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.158214][ T5878] Bluetooth: hci1: command tx timeout
[  201.168914][ T9958] hsr_slave_0: entered promiscuous mode
[  201.189040][ T9958] hsr_slave_1: entered promiscuous mode
[  201.192085][ T9958] debugfs: 'hsr0' already exists in 'hsr'
[  201.197894][ T9958] Cannot create hsr debugfs directory
[  201.259176][ T9977] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1622'.
[  201.290344][   T13] bridge_slave_1: left allmulticast mode
[  201.292616][   T13] bridge_slave_1: left promiscuous mode
[  201.306603][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.335299][   T13] bridge_slave_0: left allmulticast mode
[  201.337797][   T13] bridge_slave_0: left promiscuous mode
[  201.340688][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.503951][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1627'.
[  201.819709][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.826609][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.854145][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  201.859621][   T13] veth1_vlan: left allmulticast mode
[  201.863062][   T13] bond0 (unregistering): Released all slaves
[  202.172396][T10004] netlink: 'syz.5.1632': attribute type 13 has an invalid length.
[  202.178602][T10004] netlink: 'syz.5.1632': attribute type 17 has an invalid length.
[  203.234799][ T5878] Bluetooth: hci1: command tx timeout
[  203.336082][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.555172][T10018] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1635'.
[  203.655961][ T9958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.712941][   T13] hsr_slave_0: left promiscuous mode
[  203.746236][   T13] hsr_slave_1: left promiscuous mode
[  203.758495][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.761072][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.768523][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.771562][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.800614][   T13] veth1_macvtap: left promiscuous mode
[  203.810955][   T13] veth0_macvtap: left promiscuous mode
[  203.813296][   T13] veth1_vlan: left promiscuous mode
[  204.300725][T10049] netlink: 'syz.5.1642': attribute type 10 has an invalid length.
[  204.365488][   T13] team0 (unregistering): Port device team_slave_1 removed
[  204.401829][   T13] team0 (unregistering): Port device team_slave_0 removed
[  204.802881][ T9958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.842956][T10049] team0: Port device wlan1 added
[  204.867216][T10035] wlan1 speed is unknown, defaulting to 1000
[  204.900718][ T9958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.975812][ T9958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.129693][ T9958] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  205.136363][ T9958] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.142542][ T9958] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.149191][ T9958] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  205.249949][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.288135][ T9958] 8021q: adding VLAN 0 to HW filter on device team0
[  205.302382][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.305623][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.314605][ T5878] Bluetooth: hci1: command tx timeout
[  205.317976][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.321078][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.712114][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.780789][ T9958] veth0_vlan: entered promiscuous mode
[  205.792385][ T9958] veth1_vlan: entered promiscuous mode
[  205.820642][ T9958] veth0_macvtap: entered promiscuous mode
[  205.826118][ T9958] veth1_macvtap: entered promiscuous mode
[  205.841264][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.860120][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.884002][ T5676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.895642][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.899894][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.906817][ T5900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.996692][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.999347][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.030669][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.034621][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.063825][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1615'.
[  206.159981][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1655'.
[  206.163844][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1655'.
[  206.202553][T10098] netlink: 'syz.3.1659': attribute type 1 has an invalid length.
[  206.803779][T10121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'.
[  206.808359][T10121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1668'.
[  207.198733][T10133] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.204823][T10133] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.223934][T10133] bridge0: entered allmulticast mode
[  207.247802][T10133] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.251471][T10133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.256014][T10133] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.259751][T10133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.271254][T10133] bridge0: entered promiscuous mode
[  207.285183][T10141] netlink: 825 bytes leftover after parsing attributes in process `syz.4.1677'.
[  207.289469][T10141] netlink: 130144 bytes leftover after parsing attributes in process `syz.4.1677'.
[  207.372788][T10145] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1679'.
[  207.394564][ T5878] Bluetooth: hci1: command tx timeout
[  207.612396][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1684'.
[  208.292059][T10194] netlink: 'syz.4.1701': attribute type 27 has an invalid length.
[  208.370160][ T5878] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  208.452548][T10203] netlink: 'syz.4.1705': attribute type 39 has an invalid length.
[  208.726391][T10215] __nla_validate_parse: 1 callbacks suppressed
[  208.726406][T10215] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1711'.
[  209.370358][T10233] netlink: 'syz.4.1718': attribute type 10 has an invalid length.
[  209.448596][T10233] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  209.453679][T10233] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  209.474182][T10233] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  209.627711][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'.
[  209.755668][T10242] netlink: 'syz.5.1722': attribute type 2 has an invalid length.
[  209.759152][T10242] netlink: 'syz.5.1722': attribute type 8 has an invalid length.
[  209.762389][T10242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1722'.
[  210.018548][T10258] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1730'.
[  210.404496][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'.
[  210.685801][T10292] netlink: 'syz.5.1747': attribute type 10 has an invalid length.
[  210.842364][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1751'.
[  210.943515][T10312] netlink: 'syz.5.1755': attribute type 1 has an invalid length.
[  211.092506][T10320] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1759'.
[  211.779530][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'.
[  211.858552][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1765'.
[  211.871361][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1766'.
[  212.181337][T10345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  212.188927][T10345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  212.311268][T10353] syzkaller0: entered promiscuous mode
[  212.313713][T10353] syzkaller0: entered allmulticast mode
[  213.283466][T10390] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  214.613988][T10449] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  214.634547][T10445] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  214.638750][T10445] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  214.679255][T10452] __nla_validate_parse: 8 callbacks suppressed
[  214.679272][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'.
[  215.232927][T10472] siw: device registration error -23
[  215.314036][T10479] delete_channel: no stack
[  215.339336][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'.
[  215.343164][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'.
[  215.350115][T10482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1828'.
[  215.386906][T10484] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1829'.
[  215.769548][T10510] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1842'.
[  215.816979][T10512] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  215.826264][T10512] netlink: 'syz.4.1843': attribute type 10 has an invalid length.
[  215.850363][T10512] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  215.853058][T10512] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  215.857502][T10512] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  215.943420][T10518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1846'.
[  216.154639][T10524] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.159087][T10524] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.164220][T10524] bridge0: left promiscuous mode
[  216.175947][T10524] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.179540][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.182965][T10524] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.186095][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.195610][T10524] bridge0: entered promiscuous mode
[  216.624896][T10538] syzkaller0: entered promiscuous mode
[  216.637339][T10538] syzkaller0: entered allmulticast mode
[  217.209006][T10550] netlink: 'syz.4.1858': attribute type 2 has an invalid length.
[  217.212925][T10550] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1858'.
[  217.874454][   T32] wlan1: Trigger new scan to find an IBSS to join
[  218.617062][T10554] netlink: 'syz.3.1860': attribute type 29 has an invalid length.
[  218.621169][T10555] netlink: 'syz.3.1860': attribute type 29 has an invalid length.
[  218.626942][T10556] netlink: 'syz.3.1860': attribute type 29 has an invalid length.
[  218.724501][T10562] netlink: 'syz.5.1863': attribute type 39 has an invalid length.
[  218.806512][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'.
[  219.099388][T10576] netlink: 'syz.5.1869': attribute type 4 has an invalid length.
[  219.184081][T10584] netlink: 'syz.5.1873': attribute type 27 has an invalid length.
[  219.188356][T10584] netlink: 'syz.5.1873': attribute type 3 has an invalid length.
[  219.191140][T10584] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1873'.
[  219.739621][T10622] netlink: 'syz.3.1891': attribute type 28 has an invalid length.
[  219.754675][T10622] __nla_validate_parse: 2 callbacks suppressed
[  219.754686][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1891'.
[  219.966140][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1896'.
[  219.970009][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1896'.
[  220.098791][T10637] netlink: 'syz.3.1899': attribute type 11 has an invalid length.
[  220.103129][T10637] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1899'.
[  220.112607][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.979953][ T1031] wlan1: Trigger new scan to find an IBSS to join
[  222.925534][T10668] netlink: 'syz.4.1912': attribute type 11 has an invalid length.
[  222.928854][T10668] validate_nla: 1 callbacks suppressed
[  222.928898][T10668] netlink: 'syz.4.1912': attribute type 5 has an invalid length.
[  222.942438][T10668] netlink: 4112 bytes leftover after parsing attributes in process `syz.4.1912'.
[  223.443715][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'.
[  223.786548][T10693] netlink: 'syz.4.1921': attribute type 2 has an invalid length.
[  223.790277][T10693] netlink: 'syz.4.1921': attribute type 3 has an invalid length.
[  223.793087][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1921'.
[  223.846086][T10689] netlink: 'syz.3.1919': attribute type 10 has an invalid length.
[  223.849528][T10689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1919'.
[  223.859250][T10689] bridge0: port 3(batadv0) entered blocking state
[  223.864014][T10689] bridge0: port 3(batadv0) entered disabled state
[  223.868253][T10689] batadv0: entered allmulticast mode
[  223.877481][T10689] batadv0: entered promiscuous mode
[  223.882273][T10689] bridge0: port 3(batadv0) entered blocking state
[  223.885190][T10689] bridge0: port 3(batadv0) entered forwarding state
[  224.226278][ T5676] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  224.230480][ T5676] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  224.598303][T10699] wlan1 speed is unknown, defaulting to 1000
[  224.687320][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1934'.
[  224.692996][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1934'.
[  224.915851][ T1031] wlan1: Trigger new scan to find an IBSS to join
[  225.091842][   T13] gretap0: left allmulticast mode
[  225.095868][   T13] gretap0: left promiscuous mode
[  225.098397][   T13] GPL: port 1(gretap0) entered disabled state
[  225.492217][T10740] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  225.600456][   T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.603974][   T13] bond_slave_0: left promiscuous mode
[  225.608690][   T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.611858][   T13] bond_slave_1: left promiscuous mode
[  225.615374][   T13] .` (unregistering): Released all slaves
[  225.845404][   T32] wlan1: Creating new IBSS network, BSSID 12:26:48:1f:a3:27
[  226.235359][   T13] hsr_slave_1: left promiscuous mode
[  226.239312][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.253671][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.274006][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.282076][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.293103][   T13] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  226.300246][   T13] batman_adv: batadv0: Removing interface: virt_wifi0
[  226.350626][   T13] veth1_vlan: left promiscuous mode
[  226.353468][   T13] veth0_vlan: left promiscuous mode
[  226.753808][T10780] netlink: 'syz.3.1959': attribute type 11 has an invalid length.
[  226.887732][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'.
[  227.325551][T10804] delete_channel: no stack
[  227.329359][T10804] delete_channel: no stack
[  227.416144][T10804] netlink: 'syz.4.1971': attribute type 6 has an invalid length.
[  227.429929][T10804] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1971'.
[  228.034376][T10814] raw_sendmsg: syz.4.1973 forgot to set AF_INET. Fix it!
[  228.112575][   T13] ------------[ cut here ]------------
[  228.115080][   T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  228.118651][   T13] Modules linked in:
[  228.120485][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  228.124985][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.128665][   T13] Workqueue: netns cleanup_net
[  228.130494][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  228.132537][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b 6d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c9 27 e1 f7 e8 44 47 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 47 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  228.139717][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  228.142167][   T13] RAX: ffffffff8a237e5c RBX: ffff88802752a440 RCX: ffff88801c690000
[  228.145504][   T13] RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffff88801c690000
[  228.148394][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  228.151066][   T13] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffffffff8f633dc0
[  228.154214][   T13] R13: 1ffff92000020f40 R14: ffff88802752b8c0 R15: dffffc0000000000
[  228.158041][   T13] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  228.161276][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  228.163576][   T13] CR2: 000055555eae9808 CR3: 000000011a612000 CR4: 00000000000006f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  228.166936][   T13] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  228.170123][   T13] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  228.173475][   T13] Call Trace:
[  228.175523][   T13]  <TASK>
[  228.176805][   T13]  xfrm_net_exit+0x2d/0x70
[  228.178771][   T13]  ops_undo_list+0x49a/0x990
[  228.180772][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  228.183064][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  228.185698][   T13]  cleanup_net+0x4c5/0x800
[  228.187623][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  228.189781][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.192388][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  228.195510][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  228.198014][   T13]  process_scheduled_works+0xae1/0x17b0
[  228.200454][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.203096][   T13]  worker_thread+0x8a0/0xda0
[  228.205631][   T13]  kthread+0x711/0x8a0
[  228.207404][   T13]  ? __pfx_worker_thread+0x10/0x10
[  228.209630][   T13]  ? __pfx_kthread+0x10/0x10
[  228.211608][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.213924][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.217126][   T13]  ? __pfx_kthread+0x10/0x10
[  228.219160][   T13]  ret_from_fork+0x439/0x7d0
[  228.221170][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  228.223953][   T13]  ? __switch_to_asm+0x39/0x70
[  228.226177][   T13]  ? __switch_to_asm+0x33/0x70
[  228.228264][   T13]  ? __pfx_kthread+0x10/0x10
[  228.230284][   T13]  ret_from_fork_asm+0x1a/0x30
[  228.232376][   T13]  </TASK>
[  228.233747][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  228.236982][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  228.240873][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.245092][   T13] Workqueue: netns cleanup_net
[  228.247114][   T13] Call Trace:
[  228.248587][   T13]  <TASK>
[  228.249875][   T13]  dump_stack_lvl+0x99/0x250
[  228.251911][   T13]  ? __asan_memcpy+0x40/0x70
[  228.253916][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.256113][   T13]  ? __pfx__printk+0x10/0x10
[  228.258199][   T13]  vpanic+0x281/0x750
[  228.260005][   T13]  ? __pfx__printk+0x10/0x10
[  228.262049][   T13]  ? __pfx_vpanic+0x10/0x10
[  228.263919][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  228.266186][   T13]  panic+0xb9/0xc0
[  228.267790][   T13]  ? __pfx_panic+0x10/0x10
[  228.269737][   T13]  __warn+0x31b/0x4b0
[  228.271424][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  228.273563][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  228.275709][   T13]  report_bug+0x2be/0x4f0
[  228.277534][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  228.279559][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  228.281646][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  228.283723][   T13]  handle_bug+0x84/0x160
[  228.285550][   T13]  exc_invalid_op+0x1a/0x50
[  228.287534][   T13]  asm_exc_invalid_op+0x1a/0x20
[  228.289565][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  228.291937][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b 6d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c9 27 e1 f7 e8 44 47 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 47 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  228.299867][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  228.302424][   T13] RAX: ffffffff8a237e5c RBX: ffff88802752a440 RCX: ffff88801c690000
[  228.305735][   T13] RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffff88801c690000
[  228.309063][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  228.312309][   T13] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffffffff8f633dc0
[  228.315667][   T13] R13: 1ffff92000020f40 R14: ffff88802752b8c0 R15: dffffc0000000000
[  228.319062][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  228.321353][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  228.323464][   T13]  xfrm_net_exit+0x2d/0x70
[  228.325404][   T13]  ops_undo_list+0x49a/0x990
[  228.327440][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  228.329653][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  228.331857][   T13]  cleanup_net+0x4c5/0x800
[  228.333822][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  228.335946][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.338178][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  228.340623][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  228.343042][   T13]  process_scheduled_works+0xae1/0x17b0
[  228.345389][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  228.347943][   T13]  worker_thread+0x8a0/0xda0
[  228.349964][   T13]  kthread+0x711/0x8a0
[  228.351689][   T13]  ? __pfx_worker_thread+0x10/0x10
[  228.353790][   T13]  ? __pfx_kthread+0x10/0x10
[  228.355793][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  228.358030][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.360224][   T13]  ? __pfx_kthread+0x10/0x10
[  228.362212][   T13]  ret_from_fork+0x439/0x7d0
[  228.364187][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  228.366348][   T13]  ? __switch_to_asm+0x39/0x70
[  228.368397][   T13]  ? __switch_to_asm+0x33/0x70
[  228.370451][   T13]  ? __pfx_kthread+0x10/0x10
[  228.372364][   T13]  ret_from_fork_asm+0x1a/0x30
[  228.374387][   T13]  </TASK>
[  228.376533][   T13] Kernel Offset: disabled
[  228.378398][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:24:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888020a28237 R9 =1ffff11004145046 R10=dffffc0000000000 R11=ffffffff85504bc0
R12=dffffc0000000000 R13=ffffffff99b048d2 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504c3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555eae9808 CR3=000000011a612000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f33bbe12e7b
XMM06=0000000000000000 00007f33bbe12e75 XMM07=0000000000000000 00007f33bbe12e89
XMM08=0000000000000000 00007f33bbe12f0f XMM09=0000000000000000 00007f33bbe12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000345 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000000345 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae1b4e R10=0000000000000003 R11=ffffffff81704490
R12=000000000ffffca5 R13=dffffc0000000000 R14=0000000000000345 R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f22819d56c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33bbdb69c0 CR3=00000000218f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 000000ff00000000 XMM05=0000000000000000 00007f33bbe12e7b
XMM06=0000000000000000 00007f33bbe12e75 XMM07=0000000000000000 00007f33bbe12e89
XMM08=0000000000000000 00007f33bbe12f0f XMM09=0000000000000000 00007f33bbe12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
