last executing test programs:

47.752236369s ago: executing program 0 (id=881):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1004a0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid='])

47.679476871s ago: executing program 0 (id=883):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56, 0x0, 0x0, 0xfffffffc}, 0x20)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)

47.678536381s ago: executing program 0 (id=885):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20)
socket$kcm(0xa, 0x2, 0x73)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

47.420863828s ago: executing program 0 (id=886):
socket$kcm(0x29, 0x5, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003300010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000080))

46.492769815s ago: executing program 0 (id=899):
syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

46.347646824s ago: executing program 0 (id=900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

31.340494281s ago: executing program 32 (id=900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.023226797s ago: executing program 3 (id=1352):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000007f000001000000000000000000000000fffd0006000000000a00000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

3.021392571s ago: executing program 3 (id=1353):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

2.950830984s ago: executing program 3 (id=1356):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x42, 0x40, 0x42}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')

2.891837989s ago: executing program 3 (id=1358):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x2, 0x3, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

2.741391273s ago: executing program 3 (id=1363):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x80000000}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8902, &(0x7f0000000080))

2.491521856s ago: executing program 3 (id=1364):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='hrtimer_start\x00', r2}, 0x18)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.375974881s ago: executing program 33 (id=1364):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='hrtimer_start\x00', r2}, 0x18)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

734.396186ms ago: executing program 1 (id=1373):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmsg$kcm(r0, 0x0, 0x12020)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

624.818547ms ago: executing program 2 (id=1374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

551.07722ms ago: executing program 2 (id=1375):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

472.65076ms ago: executing program 2 (id=1376):
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1f}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

470.703793ms ago: executing program 1 (id=1377):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0)

387.241897ms ago: executing program 1 (id=1378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)

386.209342ms ago: executing program 2 (id=1379):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'})

385.018807ms ago: executing program 2 (id=1380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000018000001000000"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xc537, 0x8, 0x8, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x800})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x6, 0x80, 0x4}, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2)
recvmsg$kcm(r3, 0x0, 0x100)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000380), 0x4)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000080)
recvmsg(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0x4000)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000680)="9999e2fe372881d7f84c3e598e63d236241f2a96b0121cfce90155ddc80dc0c46dddea839006fb0976013db4177f38ddcc4c0dc3c727b8a2cf41939de9f0145e24fb038a5c2c1e53ccc5835e63a9207e13b6213da8261a9a1ddde12fc97885671608a926507d176f7f43a634d73f89fff30f28c3543d7d61b239cecbf70a189eb42b5e762523321d9fd8633649c7e9a86d5b45758198cde845709668ca1bb0a15c7e4c266c9704819f684777f99dbe95fe32a49a4833ea90ad43be7a409fe98fb3d3bf2be60711ef97047db9e41c008e56619257a9b2f98e1df7f4d346648c96", 0xe0}, {&(0x7f0000002680)="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", 0x800}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="140000000000000000000000020000000300000000000000140000000000000000000000010000000a0000000000000060000000000000000000000007000000072bb9e0000001ffffffffac1414aa64010101ac1414bb0a0101020a010102e00000010a0101020a010100891f3cffffffffac1e01010a010101ffffffffac1e0101e00000017f0000014404f00100001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="e00000017f0000010000000014000000000000000000000002000000ff0f000000000000110000000000000000000000010000004f0000000000000090f0c141d0b41008713bca69ec00001f1f9130aff315075646be79fe45a6d518fc9e4118a1698d993610d5d60ebb6160476f2050cdf4fc420d85a13167aa588484f1c77feb36373c9da63ce6db8f9744629b3b6c69826e140530ccbdcd4e80a8c73f997f9fc7eda2f897d65fe2dec7b2d1e9d4cf9a7d9bd44d44b66658fd0aaeb53f9fd374d717cf9d5c1455"], 0xe0}, 0x4000000)
close(0x3)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9fa6eb010018000000000000000c0000000c00000002004e571388038f18a2ea3bf781f20000000000000000000d0000030000"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x25, &(0x7f0000000b40)=ANY=[@ANYBLOB="d47f000008000000000000b6090040001811000073806a55f3d4d464387be47313", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000182b0000", @ANYRES32, @ANYBLOB="000000000000010085000000a4000000bf91000000000000b70200007643bfd78500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0xfffffffc, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1e, &(0x7f0000003680)=ANY=[@ANYBLOB="18000000ec456f6a0000000000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018410000020000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d28100008500000006000000185900000e000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

237.121941ms ago: executing program 1 (id=1381):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))

51.891613ms ago: executing program 1 (id=1382):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800a88800", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0)

5.260069ms ago: executing program 1 (id=1383):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

0s ago: executing program 2 (id=1384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31903' (ED25519) to the list of known hosts.
syzkaller login: [   55.327150][ T5833] cgroup: Unknown subsys name 'net'
[   55.418981][ T5833] cgroup: Unknown subsys name 'cpuset'
[   55.422597][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.761850][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.403073][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.406447][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.409510][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.412940][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.415967][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.480580][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.484272][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.488057][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.492032][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.495484][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.527930][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.531378][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.534150][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.537006][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.539924][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.752179][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   60.804493][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   60.873336][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   60.895795][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.900008][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.902730][ T5847] bridge_slave_0: entered allmulticast mode
[   60.905898][ T5847] bridge_slave_0: entered promiscuous mode
[   60.938403][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.941075][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.943765][ T5847] bridge_slave_1: entered allmulticast mode
[   60.947471][ T5847] bridge_slave_1: entered promiscuous mode
[   61.023645][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.054233][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.057331][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.059748][ T5854] bridge_slave_0: entered allmulticast mode
[   61.062798][ T5854] bridge_slave_0: entered promiscuous mode
[   61.067828][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.070690][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.073675][ T5854] bridge_slave_1: entered allmulticast mode
[   61.077407][ T5854] bridge_slave_1: entered promiscuous mode
[   61.082482][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.131427][ T5847] team0: Port device team_slave_0 added
[   61.133621][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.136299][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.138963][ T5852] bridge_slave_0: entered allmulticast mode
[   61.142126][ T5852] bridge_slave_0: entered promiscuous mode
[   61.147338][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.150220][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.153122][ T5852] bridge_slave_1: entered allmulticast mode
[   61.157037][ T5852] bridge_slave_1: entered promiscuous mode
[   61.175609][ T5847] team0: Port device team_slave_1 added
[   61.202144][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.230900][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.235083][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.237812][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.247971][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.254232][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.278199][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.280789][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.291907][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.297451][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.302387][ T5854] team0: Port device team_slave_0 added
[   61.329411][ T5854] team0: Port device team_slave_1 added
[   61.364874][ T5847] hsr_slave_0: entered promiscuous mode
[   61.367500][ T5847] hsr_slave_1: entered promiscuous mode
[   61.371922][ T5852] team0: Port device team_slave_0 added
[   61.387931][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.390709][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.401415][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.407021][ T5852] team0: Port device team_slave_1 added
[   61.409967][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.412696][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.422919][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.487571][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.489902][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.498948][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.519695][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.521940][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.533579][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.558038][ T5854] hsr_slave_0: entered promiscuous mode
[   61.560726][ T5854] hsr_slave_1: entered promiscuous mode
[   61.563331][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   61.565646][ T5854] Cannot create hsr debugfs directory
[   61.664803][ T5852] hsr_slave_0: entered promiscuous mode
[   61.668599][ T5852] hsr_slave_1: entered promiscuous mode
[   61.671024][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   61.673219][ T5852] Cannot create hsr debugfs directory
[   61.857296][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.873760][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.879889][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.903342][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.961852][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.971686][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.993768][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.010455][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.052879][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.059825][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.075634][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.083084][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.186749][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.193649][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.221534][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   62.237630][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   62.243191][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.245938][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.260931][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.264101][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.274677][  T703] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.278658][  T703] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.294434][  T703] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.297222][  T703] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.305695][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.348928][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   62.368202][  T703] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.370668][  T703] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.388828][  T703] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.391792][  T703] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.481837][   T55] Bluetooth: hci0: command tx timeout
[   62.556668][   T55] Bluetooth: hci2: command tx timeout
[   62.557310][ T5237] Bluetooth: hci1: command tx timeout
[   62.565681][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.624176][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.645849][ T5847] veth0_vlan: entered promiscuous mode
[   62.662418][ T5847] veth1_vlan: entered promiscuous mode
[   62.674943][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.704244][ T5852] veth0_vlan: entered promiscuous mode
[   62.719247][ T5852] veth1_vlan: entered promiscuous mode
[   62.745982][ T5847] veth0_macvtap: entered promiscuous mode
[   62.761489][ T5847] veth1_macvtap: entered promiscuous mode
[   62.790276][ T5852] veth0_macvtap: entered promiscuous mode
[   62.799770][ T5854] veth0_vlan: entered promiscuous mode
[   62.805061][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.811428][ T5852] veth1_macvtap: entered promiscuous mode
[   62.818803][ T5854] veth1_vlan: entered promiscuous mode
[   62.828536][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.840755][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.844136][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.855344][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.860516][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.875457][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.894605][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.921287][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.933284][ T5854] veth0_macvtap: entered promiscuous mode
[   62.946904][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.950483][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.964072][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.968074][ T5854] veth1_macvtap: entered promiscuous mode
[   62.990885][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.993849][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.048127][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.068880][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.085650][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.096707][ T5716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.100936][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.104827][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.108705][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.131421][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.167946][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.178301][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.213876][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.233139][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.237587][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.326951][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.330018][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.377876][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.382897][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.516035][    C1] hrtimer: interrupt took 36949 ns
[   64.388522][ T5965] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   64.391578][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   64.556467][ T5237] Bluetooth: hci0: command tx timeout
[   64.636334][ T5237] Bluetooth: hci1: command tx timeout
[   64.636365][   T55] Bluetooth: hci2: command tx timeout
[   65.421378][ T5978] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   65.424406][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   65.552743][ T5986] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   65.622964][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'.
[   65.788694][ T6006] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.45'.
[   65.851469][ T6013] netlink: 763 bytes leftover after parsing attributes in process `syz.2.50'.
[   65.945055][ T6020] netlink: 'syz.0.51': attribute type 3 has an invalid length.
[   66.052075][ T6028] netlink: 'syz.0.56': attribute type 4 has an invalid length.
[   66.055636][ T6028] netlink: 152 bytes leftover after parsing attributes in process `syz.0.56'.
[   66.093959][ T6030] Zero length message leads to an empty skb
[   66.177109][ T6034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'.
[   66.645904][   T55] Bluetooth: hci0: command tx timeout
[   66.716957][   T55] Bluetooth: hci1: command tx timeout
[   66.782379][   T55] Bluetooth: hci2: command tx timeout
[   66.882393][ T6028] netlink: 6 bytes leftover after parsing attributes in process `syz.0.56'.
[   66.889783][ T6028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   66.900687][ T6030] netlink: 'syz.2.58': attribute type 29 has an invalid length.
[   66.918179][ T6035] netlink: 'syz.2.58': attribute type 29 has an invalid length.
[   67.049272][ T6045] netlink: 124 bytes leftover after parsing attributes in process `syz.2.64'.
[   67.095506][ T6047] netlink: 'syz.1.65': attribute type 29 has an invalid length.
[   67.100443][ T6047] netlink: 'syz.1.65': attribute type 29 has an invalid length.
[   67.104502][ T6047] netlink: 'syz.1.65': attribute type 29 has an invalid length.
[   67.164400][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   67.178973][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'.
[   67.289236][ T6056] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.334689][ T6061] veth1_macvtap: left promiscuous mode
[   67.336911][ T6061] macsec0: entered allmulticast mode
[   67.351847][ T6061] veth1_macvtap: entered promiscuous mode
[   67.354207][ T6061] veth1_macvtap: entered allmulticast mode
[   67.357552][ T6061] macsec0: entered promiscuous mode
[   67.586677][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.850639][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.856416][ T6063] bond0 (unregistering): Released all slaves
[   68.452382][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.742496][   T55] Bluetooth: hci0: command tx timeout
[   68.802655][   T55] Bluetooth: hci2: command tx timeout
[   68.805211][   T55] Bluetooth: hci1: command tx timeout
[   68.981314][ T6111] =======================================================
[   68.981314][ T6111] WARNING: The mand mount option has been deprecated and
[   68.981314][ T6111]          and is ignored by this kernel. Remove the mand
[   68.981314][ T6111]          option from the mount to silence this warning.
[   68.981314][ T6111] =======================================================
[   69.059262][ T6113] Driver unsupported XDP return value 0 on prog  (id 34) dev N/A, expect packet loss!
[   69.917834][   T10] cfg80211: failed to load regulatory.db
[   69.939016][ T6121] validate_nla: 3 callbacks suppressed
[   69.939029][ T6121] netlink: 'syz.2.94': attribute type 7 has an invalid length.
[   69.978587][ T6123] __nla_validate_parse: 5 callbacks suppressed
[   69.978602][ T6123] netlink: 14 bytes leftover after parsing attributes in process `syz.1.96'.
[   70.000016][ T6125] syz.0.97 uses obsolete (PF_INET,SOCK_PACKET)
[   70.203364][ T6132] syzkaller0: entered promiscuous mode
[   70.206807][ T6132] syzkaller0: entered allmulticast mode
[   70.482315][ T6134] netlink: 'syz.0.101': attribute type 9 has an invalid length.
[   70.490759][ T6134] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.101'.
[   71.264318][ T6150] syzkaller0: entered promiscuous mode
[   71.268207][ T6150] syzkaller0: entered allmulticast mode
[   71.282790][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.286403][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.334994][ T6142] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   72.222787][ T6166] netlink: 168 bytes leftover after parsing attributes in process `syz.2.112'.
[   72.868280][ T6181] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.413466][ T6199] cgroup: fork rejected by pids controller in /syz0
[   73.531936][ T6209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.132'.
[   73.768951][ T5716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.919032][ T5716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.977565][ T5716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.028100][ T5716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.171269][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.177564][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.181191][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.184258][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.187655][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.223843][ T5716] bridge_slave_1: left allmulticast mode
[   74.227217][ T5716] bridge_slave_1: left promiscuous mode
[   74.233974][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.251335][ T5716] bridge_slave_0: left allmulticast mode
[   74.253709][ T5716] bridge_slave_0: left promiscuous mode
[   74.270184][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.623330][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.630280][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.634958][ T5716] bond0 (unregistering): Released all slaves
[   75.217876][ T6228] chnl_net:caif_netlink_parms(): no params data found
[   75.445128][ T6254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.484261][ T5716] hsr_slave_0: left promiscuous mode
[   75.488131][ T5716] hsr_slave_1: left promiscuous mode
[   75.490817][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.493983][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.499427][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.502497][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.540533][ T5716] veth1_macvtap: left promiscuous mode
[   75.542998][ T5716] veth0_macvtap: left promiscuous mode
[   75.545991][ T5716] veth1_vlan: left promiscuous mode
[   75.549623][ T5716] veth0_vlan: left promiscuous mode
[   75.832688][ T5716] team0 (unregistering): Port device team_slave_1 removed
[   75.853901][ T5716] team0 (unregistering): Port device team_slave_0 removed
[   76.130930][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.134063][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.139286][ T6228] bridge_slave_0: entered allmulticast mode
[   76.143932][ T6228] bridge_slave_0: entered promiscuous mode
[   76.171966][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.178400][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.182724][ T6228] bridge_slave_1: entered allmulticast mode
[   76.192730][ T6228] bridge_slave_1: entered promiscuous mode
[   76.236469][   T55] Bluetooth: hci0: command tx timeout
[   76.244257][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.268395][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.423339][ T6228] team0: Port device team_slave_0 added
[   76.433911][ T6228] team0: Port device team_slave_1 added
[   76.499621][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.517006][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.536289][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.551331][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.563510][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.575833][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.660627][ T6299] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.158'.
[   76.672392][ T6228] hsr_slave_0: entered promiscuous mode
[   76.680938][ T6228] hsr_slave_1: entered promiscuous mode
[   76.684551][ T6296] bridge_slave_1: left allmulticast mode
[   76.687731][ T6296] bridge_slave_1: left promiscuous mode
[   76.690472][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.695852][ T6296] bridge_slave_0: left promiscuous mode
[   76.699020][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.081236][ T6315] cgroup: fork rejected by pids controller in /syz1
[   77.609494][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.685719][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.827061][ T6330] netlink: 'syz.2.169': attribute type 2 has an invalid length.
[   77.831136][ T6330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.169'.
[   77.841592][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.961113][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.054625][ T6228] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.070704][ T6228] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.092428][ T6228] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.249037][ T6228] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.266559][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.269443][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.273570][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.278087][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.282424][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.326456][ T5237] Bluetooth: hci0: command tx timeout
[   78.471199][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.515526][ T6361] netlink: 'syz.2.170': attribute type 64 has an invalid length.
[   78.533821][ T5716] hsr_slave_0: left promiscuous mode
[   78.539342][ T5716] hsr_slave_1: left promiscuous mode
[   78.542085][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.545037][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.555359][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.559658][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.577517][ T5716] veth1_macvtap: left promiscuous mode
[   78.580028][ T5716] veth0_macvtap: left promiscuous mode
[   78.582470][ T5716] veth1_vlan: left promiscuous mode
[   78.584778][ T5716] veth0_vlan: left promiscuous mode
[   78.940134][ T5716] team0 (unregistering): Port device team_slave_1 removed
[   78.966356][ T5716] team0 (unregistering): Port device team_slave_0 removed
[   79.273867][ T6228] 8021q: adding VLAN 0 to HW filter on device team0
[   79.311238][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.314364][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.327235][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.330481][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.386511][ T6228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.390985][ T6228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.401924][ T6346] chnl_net:caif_netlink_parms(): no params data found
[   79.408454][ T6372] openvswitch: netlink: Message has 4 unknown bytes.
[   79.623344][ T6382] netlink: 1 bytes leftover after parsing attributes in process `syz.2.173'.
[   79.654378][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.658789][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.661862][ T6346] bridge_slave_0: entered allmulticast mode
[   79.665684][ T6346] bridge_slave_0: entered promiscuous mode
[   79.673017][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.677701][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.680579][ T6346] bridge_slave_1: entered allmulticast mode
[   79.684929][ T6346] bridge_slave_1: entered promiscuous mode
[   79.785470][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.792827][ T6346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.807362][ T6346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.844300][ T6346] team0: Port device team_slave_0 added
[   79.857707][ T6346] team0: Port device team_slave_1 added
[   79.899545][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.902363][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.913786][ T6346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.922723][ T6346] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.925711][ T6346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.937282][ T6346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.955943][ T6228] veth0_vlan: entered promiscuous mode
[   80.002551][ T6228] veth1_vlan: entered promiscuous mode
[   80.015307][ T6346] hsr_slave_0: entered promiscuous mode
[   80.018925][ T6346] hsr_slave_1: entered promiscuous mode
[   80.025041][ T6346] debugfs: 'hsr0' already exists in 'hsr'
[   80.028509][ T6346] Cannot create hsr debugfs directory
[   80.098115][ T6228] veth0_macvtap: entered promiscuous mode
[   80.111966][ T6228] veth1_macvtap: entered promiscuous mode
[   80.175455][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.186466][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.208001][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.212330][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.241866][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.254790][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.316486][ T5237] Bluetooth: hci1: command tx timeout
[   80.396642][ T5237] Bluetooth: hci0: command tx timeout
[   80.435370][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.450460][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.511816][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.515643][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.624835][ T6346] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.650420][ T6346] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.661429][ T6346] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.687853][ T6346] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.694672][ T6416] netlink: 830 bytes leftover after parsing attributes in process `syz.0.141'.
[   80.861350][ T6346] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.904359][ T6346] 8021q: adding VLAN 0 to HW filter on device team0
[   80.924369][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.927490][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.949072][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.952227][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.041641][ T6346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.051915][ T6346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.214986][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   81.367537][ T6346] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.414809][ T6346] veth0_vlan: entered promiscuous mode
[   81.431638][ T6453] xt_l2tp: v2 tid > 0xffff: 327812
[   81.433840][ T6346] veth1_vlan: entered promiscuous mode
[   81.464406][ T6346] veth0_macvtap: entered promiscuous mode
[   81.473593][ T6346] veth1_macvtap: entered promiscuous mode
[   81.492445][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.503614][ T6346] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.530524][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.534557][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.638539][ T6457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.643692][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.651196][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.796596][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.800333][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.828861][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.832201][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.927202][ T6465] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.191'.
[   82.069060][ T6475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.130762][ T6478] netlink: 'syz.2.196': attribute type 5 has an invalid length.
[   82.396285][ T5237] Bluetooth: hci1: command tx timeout
[   82.476288][ T5237] Bluetooth: hci0: command tx timeout
[   82.502613][ T6492] netlink: 148 bytes leftover after parsing attributes in process `syz.2.203'.
[   82.507510][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'.
[   82.641609][ T6494] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   82.947388][ T6508] netlink: 196 bytes leftover after parsing attributes in process `syz.1.210'.
[   83.375092][ T6525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'.
[   83.379463][ T6525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'.
[   83.865372][ T6532] netlink: 'syz.0.220': attribute type 49 has an invalid length.
[   84.481727][ T5237] Bluetooth: hci1: command tx timeout
[   85.432961][ T6590] netlink: 'syz.1.242': attribute type 2 has an invalid length.
[   85.437960][ T6590] netlink: 'syz.1.242': attribute type 8 has an invalid length.
[   85.441593][ T6590] netlink: 132 bytes leftover after parsing attributes in process `syz.1.242'.
[   85.984439][ T6602] netlink: 'syz.2.247': attribute type 2 has an invalid length.
[   86.022324][ T6605] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.249'.
[   86.028471][ T6605] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.249'.
[   86.316719][ T6616] netlink: 'syz.2.253': attribute type 10 has an invalid length.
[   86.319913][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'.
[   86.334208][ T6616] batman_adv: batadv0: Adding interface: virt_wifi0
[   86.338107][ T6616] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.348512][ T6616] batman_adv: batadv0: Interface activated: virt_wifi0
[   86.488073][ T6625] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   86.492094][ T6625] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   86.556975][ T5237] Bluetooth: hci1: command tx timeout
[   87.186892][ T6635] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[   87.339844][ T6649] __nla_validate_parse: 5 callbacks suppressed
[   87.339859][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   87.372492][ T6646] netlink: 'syz.0.258': attribute type 2 has an invalid length.
[   87.456347][ T6657] netlink: 'syz.2.270': attribute type 1 has an invalid length.
[   87.498248][ T6659] netlink: 'syz.2.271': attribute type 16 has an invalid length.
[   87.503081][ T6659] netlink: 156 bytes leftover after parsing attributes in process `syz.2.271'.
[   87.584126][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'.
[   87.699328][ T6665] GPL: port 1(gretap0) entered blocking state
[   87.702568][ T6665] GPL: port 1(gretap0) entered disabled state
[   87.705382][ T6665] gretap0: entered allmulticast mode
[   87.718409][ T6665] gretap0: entered promiscuous mode
[   87.915299][ T6679] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.281'.
[   87.924650][ T6679] nbd: must specify a device to reconfigure
[   87.962488][ T6686] netlink: 152 bytes leftover after parsing attributes in process `syz.0.284'.
[   88.155198][ T6698] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.289'.
[   88.724554][ T6741] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.308'.
[   88.917003][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   91.011703][ T6816] validate_nla: 6 callbacks suppressed
[   91.011716][ T6816] netlink: 'syz.2.343': attribute type 29 has an invalid length.
[   91.090658][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'.
[   91.236834][ T6823] netlink: 'syz.1.346': attribute type 21 has an invalid length.
[   92.049607][ T6842] netlink: 32 bytes leftover after parsing attributes in process `syz.1.355'.
[   92.385545][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'.
[   92.389428][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'.
[   92.522464][ T6867] netlink: 'syz.2.366': attribute type 21 has an invalid length.
[   92.525881][ T6867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.366'.
[   92.531360][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'.
[   92.541134][ T6867] netlink: 'syz.2.366': attribute type 4 has an invalid length.
[   92.548398][ T6867] netlink: 'syz.2.366': attribute type 5 has an invalid length.
[   92.551582][ T6867] netlink: 3 bytes leftover after parsing attributes in process `syz.2.366'.
[   92.888944][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'.
[   92.949894][ T6891] syzkaller0: entered promiscuous mode
[   92.951985][ T6891] syzkaller0: entered allmulticast mode
[   94.519522][ T6923] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.524677][ T6923] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.571050][ T6930] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   94.642720][ T6923] syz.2.391 (6923) used greatest stack depth: 18552 bytes left
[   95.204303][ T6951] netlink: 'syz.0.400': attribute type 10 has an invalid length.
[   95.386579][ T6951] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   95.442841][ T6958] netlink: 'syz.1.403': attribute type 21 has an invalid length.
[   95.584502][ T6964] blkio.reset_stats is deprecated
[   96.094603][ T6987] netlink: 'syz.0.416': attribute type 32 has an invalid length.
[   96.100601][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'.
[   98.084938][ T7042] netlink: 'syz.2.438': attribute type 21 has an invalid length.
[   98.348795][ T7050] netlink: 'syz.1.442': attribute type 1 has an invalid length.
[   98.514895][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[   98.520599][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.961271][ T7088] IPv6: NLM_F_CREATE should be specified when creating new route
[   98.990056][ T7090] TCP: TCP_TX_DELAY enabled
[   99.074083][ T7100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'.
[   99.121330][ T7104] vxcan1: entered allmulticast mode
[   99.133747][ T7100] netlink: 'syz.1.464': attribute type 21 has an invalid length.
[   99.160703][ T7106] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.467'.
[   99.212585][ T7111] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   99.222945][ T7111] netlink: 17 bytes leftover after parsing attributes in process `syz.0.469'.
[   99.234203][ T7100] netlink: 'syz.1.464': attribute type 10 has an invalid length.
[   99.573067][ T5237] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6
[  100.395578][ T7138] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[  100.404380][ T7138] netlink: 'syz.0.479': attribute type 4 has an invalid length.
[  100.411566][ T7138] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.479'.
[  100.419448][ T7138] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[  100.422802][ T7138] netlink: 'syz.0.479': attribute type 4 has an invalid length.
[  100.426734][ T7138] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.479'.
[  101.001273][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'.
[  101.005222][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'.
[  101.069008][ T7161] netlink: 6 bytes leftover after parsing attributes in process `syz.2.489'.
[  101.193094][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'.
[  101.222392][ T7165] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  102.480667][ T7201] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[  102.599191][ T7208] netlink: 'syz.0.508': attribute type 3 has an invalid length.
[  103.168833][ T7243] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  105.240793][ T7280] __nla_validate_parse: 13 callbacks suppressed
[  105.240807][ T7280] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.539'.
[  105.379256][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'.
[  105.384657][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'.
[  106.161610][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[  106.165363][ T7301] openvswitch: netlink: Missing key (keys=40, expected=80)
[  106.260143][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[  106.808337][ T7283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'.
[  106.980254][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'.
[  107.112791][ T7315] delete_channel: no stack
[  107.157459][ T7287] netlink: 532 bytes leftover after parsing attributes in process `syz.1.541'.
[  107.372986][ T7321] delete_channel: no stack
[  107.433606][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'.
[  108.755015][ T7344] netlink: 'syz.2.563': attribute type 10 has an invalid length.
[  109.842304][ T7358] netlink: 64 bytes leftover after parsing attributes in process `syz.1.569'.
[  110.298320][ T7372] __nla_validate_parse: 1 callbacks suppressed
[  110.298397][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  111.352168][ T7397] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.586'.
[  112.411579][ T7422] netlink: 'syz.2.597': attribute type 12 has an invalid length.
[  112.420568][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.597'.
[  112.432428][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.598'.
[  112.435558][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.598'.
[  112.490733][ T5237] Bluetooth: hci0: adv larger than maximum supported
[  112.490777][ T5237] Bluetooth: hci0: Unknown advertising packet type: 0x18
[  112.493781][ T5237] Bluetooth: hci0: Malformed LE Event: 0x0d
[  112.561063][ T7436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.604'.
[  112.564881][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  112.756807][ T7447] -1: renamed from syzkaller0
[  113.171977][ T7459] netlink: 'syz.0.615': attribute type 3 has an invalid length.
[  113.175674][ T7459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'.
[  113.583373][ T7485] netlink: 'syz.1.625': attribute type 21 has an invalid length.
[  114.539519][ T7497] netlink: 180 bytes leftover after parsing attributes in process `syz.0.629'.
[  114.745678][ T7499] netlink: 'syz.0.630': attribute type 10 has an invalid length.
[  116.149853][ T7535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'.
[  116.153865][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'.
[  116.161505][ T7535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.644'.
[  116.488570][ T7545] netlink: 'syz.0.649': attribute type 29 has an invalid length.
[  116.510683][ T7552] netlink: 'syz.0.649': attribute type 29 has an invalid length.
[  116.515766][ T7554] netlink: 'syz.0.649': attribute type 29 has an invalid length.
[  116.561870][ T7545] netlink: 'syz.0.649': attribute type 29 has an invalid length.
[  116.903253][ T7558] netlink: 300 bytes leftover after parsing attributes in process `syz.0.653'.
[  117.344506][ T7573] netlink: 'syz.1.659': attribute type 33 has an invalid length.
[  117.352167][ T7573] netlink: 152 bytes leftover after parsing attributes in process `syz.1.659'.
[  117.358112][ T7573] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  117.418357][ T7577] netlink: 'syz.1.661': attribute type 10 has an invalid length.
[  117.507044][ T7577] syz_tun: entered promiscuous mode
[  117.514437][ T7577] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  117.552203][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'.
[  117.632597][ T7588] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  117.832588][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'.
[  117.956690][ T7620] syzkaller0: entered promiscuous mode
[  117.957414][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'.
[  117.958933][ T7620] syzkaller0: entered allmulticast mode
[  118.058672][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'.
[  118.960527][ T7627] netlink: 'syz.0.684': attribute type 29 has an invalid length.
[  121.147769][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.460509][ T7722] sctp: [Deprecated]: syz.1.726 (pid 7722) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.460509][ T7722] Use struct sctp_sack_info instead
[  121.512130][ T7726] netlink: 'syz.1.728': attribute type 3 has an invalid length.
[  121.526281][ T7726] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.728'.
[  121.725365][ T7741] netlink: 'syz.1.735': attribute type 3 has an invalid length.
[  121.861432][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'.
[  121.902447][ T7752] netlink: 'syz.0.740': attribute type 1 has an invalid length.
[  122.387826][ T7767] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.747'.
[  122.391979][ T7767] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  122.512050][ T7783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.754'.
[  122.811784][ T7798] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.761'.
[  122.815147][ T7798] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  122.818763][ T7798] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.011112][ T7855] netlink: 'syz.2.787': attribute type 1 has an invalid length.
[  125.084951][ T7851] C: renamed from team_slave_0 (while UP)
[  125.091118][ T7851] netlink: 'syz.0.785': attribute type 3 has an invalid length.
[  125.094398][ T7851] netlink: 152 bytes leftover after parsing attributes in process `syz.0.785'.
[  125.098633][ T7851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  125.230333][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  125.782309][ T7886] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[  126.184690][   T33] audit: type=1107 audit(1758309209.737:2): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  126.322045][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.326446][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.333623][ T7902] bridge0: entered allmulticast mode
[  126.458003][ T7902] bridge_slave_1: left allmulticast mode
[  126.461480][ T7902] bridge_slave_1: left promiscuous mode
[  126.469311][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.524669][ T7902] bridge_slave_0: left allmulticast mode
[  126.527690][ T7902] bridge_slave_0: left promiscuous mode
[  126.533489][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.823163][ T7903] : entered promiscuous mode
[  128.228167][ T7947] netlink: 22 bytes leftover after parsing attributes in process `syz.1.826'.
[  128.512485][ T7966] netlink: 'syz.1.835': attribute type 10 has an invalid length.
[  128.514414][ T7967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'.
[  128.519058][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[  128.533339][ T7966] bridge0: port 3(netdevsim0) entered blocking state
[  128.543368][ T7966] bridge0: port 3(netdevsim0) entered disabled state
[  128.548318][ T7966] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  128.553555][ T7966] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  128.951632][ T7980] C: renamed from team_slave_0 (while UP)
[  129.020197][ T7980] netlink: 164 bytes leftover after parsing attributes in process `syz.2.841'.
[  129.153486][ T7980] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  129.246679][ T7981] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  129.254281][ T7986] pim6reg1: entered allmulticast mode
[  129.366563][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  130.024165][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[  130.095353][ T5237] Bluetooth: hci2: Unable to find connection for big 0x00
[  130.575452][ T8040] syzkaller0: entered promiscuous mode
[  130.579559][ T8040] syzkaller0: entered allmulticast mode
[  130.640956][ T8043] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.865'.
[  130.723565][ T8050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.868'.
[  130.729848][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'.
[  130.734535][ T8050] netlink: 43 bytes leftover after parsing attributes in process `syz.0.868'.
[  131.051374][ T8078] tmpfs: Bad value for 'uid'
[  131.053607][ T8078] tmpfs: Bad value for 'uid'
[  131.145243][ T8086] netlink: 'syz.0.885': attribute type 10 has an invalid length.
[  132.220517][ T8113] netlink: 'syz.2.896': attribute type 2 has an invalid length.
[  132.223532][ T8113] netlink: 'syz.2.896': attribute type 9 has an invalid length.
[  132.731016][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.733613][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.150238][ T8134] netlink: 'syz.1.907': attribute type 39 has an invalid length.
[  135.084534][ T8170] nftables ruleset with unbound chain
[  136.058392][ T8173] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[  136.061717][ T8173] __nla_validate_parse: 3 callbacks suppressed
[  136.061730][ T8173] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.924'.
[  136.388413][ T8181] netlink: 168 bytes leftover after parsing attributes in process `syz.2.928'.
[  136.490559][ T5237] Bluetooth: hci2: Dropping invalid advertising data
[  136.493549][ T5237] Bluetooth: hci2: unknown advertising packet type: 0xff
[  139.532122][ T8287] netlink: 'syz.1.979': attribute type 13 has an invalid length.
[  139.556549][ T8287] netlink: 160 bytes leftover after parsing attributes in process `syz.1.979'.
[  139.577225][ T8287] erspan0: refused to change device tx_queue_len
[  139.582137][ T8287] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  140.143785][ T8297] netlink: 'syz.2.983': attribute type 21 has an invalid length.
[  140.147442][ T8297] netlink: 'syz.2.983': attribute type 5 has an invalid length.
[  141.146804][ T8338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1001'.
[  141.377777][ T5237] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  143.436623][   T55] Bluetooth: hci2: command tx timeout
[  144.751014][ T8426] netlink: 'syz.2.1041': attribute type 10 has an invalid length.
[  144.891634][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'.
[  145.262571][ T8433] syzkaller0: entered promiscuous mode
[  145.264979][ T8433] syzkaller0: entered allmulticast mode
[  145.328508][ T8438] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  145.331548][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'.
[  145.349926][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'.
[  147.500982][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1057'.
[  147.851064][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  147.855670][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  147.861876][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  147.867088][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  147.872313][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.080902][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.212701][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.248031][ T8483] chnl_net:caif_netlink_parms(): no params data found
[  148.310337][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.412749][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  148.437524][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.533687][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.539099][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.542329][ T8483] bridge_slave_0: entered allmulticast mode
[  148.546424][ T8483] bridge_slave_0: entered promiscuous mode
[  148.550930][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.554250][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.560731][ T8483] bridge_slave_1: entered allmulticast mode
[  148.565204][ T8483] bridge_slave_1: entered promiscuous mode
[  148.649301][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.655566][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.720745][ T8483] team0: Port device team_slave_0 added
[  148.724714][ T8483] team0: Port device team_slave_1 added
[  149.033501][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.040232][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.045300][   T12] bond0 (unregistering): Released all slaves
[  149.061241][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.063985][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.178130][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.213886][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.223107][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.238309][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.370990][ T8483] hsr_slave_0: entered promiscuous mode
[  149.381221][ T8483] hsr_slave_1: entered promiscuous mode
[  149.389425][ T8483] debugfs: 'hsr0' already exists in 'hsr'
[  149.394021][ T8483] Cannot create hsr debugfs directory
[  149.631243][   T12] hsr_slave_0: left promiscuous mode
[  149.661386][   T12] hsr_slave_1: left promiscuous mode
[  149.665538][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.680382][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.694037][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.700663][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.728155][   T12] veth1_vlan: left promiscuous mode
[  149.730624][   T12] veth0_vlan: left promiscuous mode
[  149.916270][   T55] Bluetooth: hci0: command tx timeout
[  150.058875][   T12] team0 (unregistering): Port device team_slave_1 removed
[  150.088846][   T12] team0 (unregistering): Port device C removed
[  150.530150][ T8483] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.631242][ T8569] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  150.635219][ T8569] netlink: 'syz.2.1090': attribute type 4 has an invalid length.
[  150.645138][ T8569] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1090'.
[  151.167909][ T8483] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  151.175814][ T8483] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  151.189422][ T8483] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.329859][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.360491][ T8483] 8021q: adding VLAN 0 to HW filter on device team0
[  151.371932][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.374742][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.405396][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.408341][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.410891][ T8592] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  151.598443][ T8608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1101'.
[  151.714142][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.825611][ T8483] veth0_vlan: entered promiscuous mode
[  151.851643][ T8483] veth1_vlan: entered promiscuous mode
[  151.919655][ T8483] veth0_macvtap: entered promiscuous mode
[  151.949772][ T8483] veth1_macvtap: entered promiscuous mode
[  152.042419][   T55] Bluetooth: hci0: command tx timeout
[  152.064412][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.087974][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.096469][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.109721][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.113124][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.393949][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.500812][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.503888][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.538017][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.541294][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.931657][ T8641] netlink: 'syz.3.1109': attribute type 27 has an invalid length.
[  152.934812][ T8641] netlink: 'syz.3.1109': attribute type 3 has an invalid length.
[  152.941025][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1109'.
[  153.232150][ T8649] netlink: 'syz.3.1114': attribute type 21 has an invalid length.
[  153.235259][ T8649] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1114'.
[  153.418538][ T8657] sctp: [Deprecated]: syz.3.1116 (pid 8657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.418538][ T8657] Use struct sctp_sack_info instead
[  154.076266][   T55] Bluetooth: hci0: command tx timeout
[  154.335265][ T8678] netlink: 'syz.2.1122': attribute type 33 has an invalid length.
[  154.348444][ T8678] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1122'.
[  154.370761][ T8678] mac80211_hwsim hwsim7 : renamed from wlan1
[  154.559711][ T8678] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  154.567199][ T8680] bridge0: port 3(syz_tun) entered blocking state
[  154.577005][ T8680] bridge0: port 3(syz_tun) entered disabled state
[  154.579975][ T8680] syz_tun: entered allmulticast mode
[  154.583942][ T8680] syz_tun: entered promiscuous mode
[  154.589967][ T8680] bridge0: port 3(syz_tun) entered blocking state
[  154.592874][ T8680] bridge0: port 3(syz_tun) entered forwarding state
[  154.880694][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'.
[  155.008926][ T8702] delete_channel: no stack
[  155.012726][ T8702] delete_channel: no stack
[  155.104427][ T8710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1138'.
[  155.349346][ T8734] wg2: entered allmulticast mode
[  155.358193][ T8734] wg2: entered promiscuous mode
[  155.415471][ T8739] netlink: 'syz.1.1151': attribute type 1 has an invalid length.
[  155.418246][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'.
[  155.994692][ T8759] syzkaller1: tun_chr_ioctl cmd 1074025677
[  155.997578][ T8759] syzkaller1: linktype set to 776
[  156.177659][   T55] Bluetooth: hci0: command tx timeout
[  157.069315][ T8776] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1166'.
[  157.133526][ T8780] netlink: 'syz.3.1167': attribute type 6 has an invalid length.
[  157.137279][ T8780] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1167'.
[  157.482877][ T8795] syzkaller0: entered promiscuous mode
[  157.485293][ T8795] syzkaller0: entered allmulticast mode
[  159.632617][ T8824] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1184'.
[  160.308774][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1189'.
[  160.314821][ T8839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1189'.
[  160.321181][ T8842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1189'.
[  160.331809][ T8843] netlink: 'syz.1.1188': attribute type 1 has an invalid length.
[  160.336435][ T8843] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1188'.
[  161.856651][ T8905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.830222][ T8941] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1225'.
[  162.894014][ T8943] syzkaller0: entered promiscuous mode
[  162.898510][ T8943] syzkaller0: entered allmulticast mode
[  163.234634][ T8952] netlink: 'syz.3.1232': attribute type 1 has an invalid length.
[  166.258046][ T8994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1244'.
[  166.486301][   T12] syzkaller0: tun_net_xmit 76
[  166.488739][   T12] syzkaller0: tun_net_xmit 48
[  166.492120][ T9001] syzkaller0: tun_chr_ioctl cmd 1074025677
[  166.499311][ T9001] syzkaller0: Linktype set failed because interface is up
[  166.516332][    T9] syzkaller0: tun_net_xmit 76
[  166.598135][ T9006] netlink: 'syz.3.1248': attribute type 11 has an invalid length.
[  166.606544][ T9006] netlink: 147436 bytes leftover after parsing attributes in process `syz.3.1248'.
[  166.878384][ T5889] syzkaller0: tun_net_xmit 76
[  169.082089][ T9060] syzkaller0: entered promiscuous mode
[  169.084286][ T9060] syzkaller0: entered allmulticast mode
[  169.443800][ T9086] netlink: 'syz.1.1283': attribute type 5 has an invalid length.
[  169.452468][ T9086] netlink: 'syz.1.1283': attribute type 15 has an invalid length.
[  169.748062][ T9109] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1292'.
[  169.752288][ T9108] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1292'.
[  169.763577][ T9109] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1292'.
[  169.782098][ T9111] netlink: 'syz.3.1293': attribute type 2 has an invalid length.
[  169.784752][ T9111] netlink: 'syz.3.1293': attribute type 1 has an invalid length.
[  169.789177][ T9111] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1293'.
[  169.795024][ T9111] nbd: must specify at least one socket
[  169.918355][ T9121] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1298'.
[  169.936552][ T9117] netlink: 'syz.2.1294': attribute type 21 has an invalid length.
[  170.041832][ T9126] netlink: 'syz.2.1294': attribute type 4 has an invalid length.
[  170.045003][ T9126] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1294'.
[  170.049223][ T9126] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  170.058668][ T9126] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1294'.
[  170.588847][ T9141] netlink: 'syz.2.1307': attribute type 21 has an invalid length.
[  170.592257][ T9141] netlink: 'syz.2.1307': attribute type 6 has an invalid length.
[  170.599186][ T9141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1307'.
[  171.371367][ T9184] netlink: 'syz.3.1326': attribute type 32 has an invalid length.
[  171.747995][ T9194] __nla_validate_parse: 3 callbacks suppressed
[  171.748005][ T9194] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1330'.
[  171.983676][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'.
[  175.347118][ T9225] netlink: 'syz.2.1340': attribute type 21 has an invalid length.
[  175.478014][   T55] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  175.482142][   T55] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  175.513256][ T9234] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1344'.
[  175.621612][ T9243] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1348'.
[  175.645850][ T9239] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  175.824151][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1355'.
[  175.829032][ T9256] netlink: 'syz.1.1355': attribute type 2 has an invalid length.
[  176.108043][ T9274] bridge0: port 3(syz_tun) entered disabled state
[  176.119066][ T9274] syz_tun (unregistering): left allmulticast mode
[  176.121413][ T9274] syz_tun (unregistering): left promiscuous mode
[  176.124168][ T9274] bridge0: port 3(syz_tun) entered disabled state
[  176.291287][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.355959][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.439831][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.498232][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.643753][   T12] bridge_slave_1: left allmulticast mode
[  176.647980][   T12] bridge_slave_1: left promiscuous mode
[  176.650852][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.657844][   T12] bridge_slave_0: left allmulticast mode
[  176.660001][   T12] bridge_slave_0: left promiscuous mode
[  176.662245][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.943654][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.948934][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.952860][   T12] bond0 (unregistering): Released all slaves
[  177.244226][   T12] hsr_slave_0: left promiscuous mode
[  177.252084][   T12] hsr_slave_1: left promiscuous mode
[  177.254883][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.260116][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.263784][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.266954][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.279846][   T12] veth1_macvtap: left promiscuous mode
[  177.282248][   T12] veth0_macvtap: left promiscuous mode
[  177.285551][   T12] veth1_vlan: left promiscuous mode
[  177.292058][   T12] veth0_vlan: left promiscuous mode
[  177.593362][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.598884][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.608702][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.614509][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.618043][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.712205][   T12] team0 (unregistering): Port device team_slave_1 removed
[  177.739362][   T12] team0 (unregistering): Port device team_slave_0 removed
[  178.290702][ T9309] chnl_net:caif_netlink_parms(): no params data found
[  178.434301][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.438014][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.440873][ T9309] bridge_slave_0: entered allmulticast mode
[  178.443613][ T9309] bridge_slave_0: entered promiscuous mode
[  178.448049][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.450439][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.452891][ T9309] bridge_slave_1: entered allmulticast mode
[  178.455655][ T9309] bridge_slave_1: entered promiscuous mode
[  178.488916][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.493438][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.545204][ T9309] team0: Port device team_slave_0 added
[  178.558110][ T9309] team0: Port device team_slave_1 added
[  178.618402][ T9346] veth1_to_bond: entered allmulticast mode
[  178.643356][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.647272][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.656874][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.661647][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.663984][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.672334][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.710204][ T9309] hsr_slave_0: entered promiscuous mode
[  178.712584][ T9309] hsr_slave_1: entered promiscuous mode
[  178.874322][ T9360] ==================================================================
[  178.877582][ T9360] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  178.880647][ T9360] Read of size 2 at addr ffff88802e7097c2 by task syz.1.1385/9360
[  178.884988][ T9360] 
[  178.885991][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.1.1385 Not tainted syzkaller #0 PREEMPT(full) 
[  178.886004][ T9360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.886012][ T9360] Call Trace:
[  178.886017][ T9360]  <TASK>
[  178.886023][ T9360]  dump_stack_lvl+0x189/0x250
[  178.886041][ T9360]  ? __kasan_check_byte+0x12/0x40
[  178.886059][ T9360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.886072][ T9360]  ? lock_release+0x4b/0x3e0
[  178.886091][ T9360]  ? __virt_addr_valid+0x4a5/0x5c0
[  178.886111][ T9360]  print_report+0xca/0x240
[  178.886122][ T9360]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  178.886139][ T9360]  kasan_report+0x118/0x150
[  178.886155][ T9360]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  178.886171][ T9360]  __xfrm_state_lookup+0x6ad/0x8d0
[  178.886212][ T9360]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  178.886227][ T9360]  ? xfrm_state_lookup+0x45/0x1e0
[  178.886242][ T9360]  xfrm_state_lookup+0x11e/0x1e0
[  178.886259][ T9360]  ipcomp4_init_state+0x205/0xb20
[  178.886277][ T9360]  ? __xfrm_init_state+0x7ef/0x13f0
[  178.886294][ T9360]  __xfrm_init_state+0xa76/0x13f0
[  178.886311][ T9360]  ? __xfrm_init_state+0x7ef/0x13f0
[  178.886328][ T9360]  xfrm_add_sa+0x2f5b/0x4070
[  178.886347][ T9360]  ? __pfx_xfrm_add_sa+0x10/0x10
[  178.886361][ T9360]  ? apparmor_capable+0x137/0x1b0
[  178.886376][ T9360]  ? __nla_parse+0x40/0x60
[  178.886390][ T9360]  xfrm_user_rcv_msg+0x7a3/0xab0
[  178.886407][ T9360]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.886430][ T9360]  ? __pfx___mutex_trylock_common+0x10/0x10
[  178.886470][ T9360]  ? rcu_is_watching+0x15/0xb0
[  178.886483][ T9360]  ? trace_contention_end+0x39/0x120
[  178.886496][ T9360]  ? __mutex_lock+0x335/0x1350
[  178.886512][ T9360]  netlink_rcv_skb+0x208/0x470
[  178.886525][ T9360]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.886542][ T9360]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  178.886557][ T9360]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.886569][ T9360]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.886581][ T9360]  xfrm_netlink_rcv+0x79/0x90
[  178.886597][ T9360]  netlink_unicast+0x82f/0x9e0
[  178.886609][ T9360]  ? __pfx_netlink_unicast+0x10/0x10
[  178.886619][ T9360]  ? netlink_sendmsg+0x642/0xb30
[  178.886630][ T9360]  ? skb_put+0x11b/0x210
[  178.886643][ T9360]  netlink_sendmsg+0x805/0xb30
[  178.886658][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.886670][ T9360]  ? aa_sock_msg_perm+0xf1/0x1d0
[  178.886681][ T9360]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  178.886694][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.886707][ T9360]  __sock_sendmsg+0x21c/0x270
[  178.886723][ T9360]  ____sys_sendmsg+0x505/0x830
[  178.886738][ T9360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  178.886755][ T9360]  ? import_iovec+0x74/0xa0
[  178.886768][ T9360]  ___sys_sendmsg+0x21f/0x2a0
[  178.886783][ T9360]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.886805][ T9360]  ? __fget_files+0x2a/0x420
[  178.886816][ T9360]  ? __fget_files+0x3a0/0x420
[  178.886827][ T9360]  __x64_sys_sendmsg+0x19b/0x260
[  178.886841][ T9360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.886856][ T9360]  ? rcu_is_watching+0x15/0xb0
[  178.886868][ T9360]  ? do_syscall_64+0xbe/0x3b0
[  178.886882][ T9360]  do_syscall_64+0xfa/0x3b0
[  178.886893][ T9360]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.886905][ T9360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.886915][ T9360]  ? exc_page_fault+0x9f/0xf0
[  178.886925][ T9360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.886936][ T9360] RIP: 0033:0x7fe50c58eba9
[  178.886947][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.886957][ T9360] RSP: 002b:00007fe50d489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.886970][ T9360] RAX: ffffffffffffffda RBX: 00007fe50c7d5fa0 RCX: 00007fe50c58eba9
[  178.886978][ T9360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  178.886985][ T9360] RBP: 00007fe50c611e19 R08: 0000000000000000 R09: 0000000000000000
[  178.886991][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.886997][ T9360] R13: 00007fe50c7d6038 R14: 00007fe50c7d5fa0 R15: 00007ffdae013198
[  178.887010][ T9360]  </TASK>
[  178.887016][ T9360] 
[  178.925601][ T9309] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  178.926667][ T9360] Allocated by task 7529:
[  178.926679][ T9360]  kasan_save_track+0x3e/0x80
[  178.926700][ T9360]  __kasan_slab_alloc+0x6c/0x80
[  178.926715][ T9360]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  178.926731][ T9360]  xfrm_state_alloc+0x24/0x2f0
[  178.926742][ T9360]  __find_acq_core+0x8a7/0x1c00
[  178.926755][ T9360]  xfrm_find_acq+0x78/0xa0
[  178.926768][ T9360]  xfrm_alloc_userspi+0x6b3/0xc90
[  178.926782][ T9360]  xfrm_user_rcv_msg+0x7a3/0xab0
[  178.926795][ T9360]  netlink_rcv_skb+0x208/0x470
[  178.926808][ T9360]  xfrm_netlink_rcv+0x79/0x90
[  178.926823][ T9360]  netlink_unicast+0x82f/0x9e0
[  178.926833][ T9360]  netlink_sendmsg+0x805/0xb30
[  178.926845][ T9360]  __sock_sendmsg+0x21c/0x270
[  178.926859][ T9360]  ____sys_sendmsg+0x505/0x830
[  178.926871][ T9360]  ___sys_sendmsg+0x21f/0x2a0
[  178.926883][ T9360]  __x64_sys_sendmsg+0x19b/0x260
[  178.926895][ T9360]  do_syscall_64+0xfa/0x3b0
[  178.926907][ T9360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.926917][ T9360] 
[  178.926921][ T9360] Freed by task 9:
[  178.926926][ T9360]  kasan_save_track+0x3e/0x80
[  178.926939][ T9360]  kasan_save_free_info+0x46/0x50
[  178.926949][ T9360]  __kasan_slab_free+0x5b/0x80
[  178.926962][ T9360]  kmem_cache_free+0x18f/0x400
[  178.926977][ T9360]  xfrm_state_gc_task+0x52d/0x6b0
[  178.926987][ T9360]  process_scheduled_works+0xae1/0x17b0
[  178.926997][ T9360]  worker_thread+0x8a0/0xda0
[  178.927008][ T9360]  kthread+0x711/0x8a0
[  178.927020][ T9360]  ret_from_fork+0x439/0x7d0
[  178.927031][ T9360]  ret_from_fork_asm+0x1a/0x30
[  178.927045][ T9360] 
[  178.927049][ T9360] The buggy address belongs to the object at ffff88802e709680
[  178.927049][ T9360]  which belongs to the cache xfrm_state of size 928
[  178.927058][ T9360] The buggy address is located 322 bytes inside of
[  178.927058][ T9360]  freed 928-byte region [ffff88802e709680, ffff88802e709a20)
[  178.927069][ T9360] 
[  178.927073][ T9360] The buggy address belongs to the physical page:
[  178.927080][ T9360] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e709200 pfn:0x2e708
[  178.927092][ T9360] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  178.927108][ T9360] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  178.927121][ T9360] page_type: f5(slab)
[  178.927132][ T9360] raw: 00fff00000000040 ffff88801ab3cc80 dead000000000122 0000000000000000
[  178.927146][ T9360] raw: ffff88802e709200 00000000800e0008 00000000f5000000 0000000000000000
[  178.927177][ T9360] head: 00fff00000000040 ffff88801ab3cc80 dead000000000122 0000000000000000
[  178.927188][ T9360] head: ffff88802e709200 00000000800e0008 00000000f5000000 0000000000000000
[  178.927197][ T9360] head: 00fff00000000002 ffffea0000b9c201 00000000ffffffff 00000000ffffffff
[  178.927206][ T9360] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  179.137758][ T9360] page dumped because: kasan: bad access detected
[  179.140228][ T9360] page_owner tracks the page as allocated
[  179.142056][ T9360] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6620, tgid 6619 (syz.2.254), ts 86394703373, free_ts 86333711551
[  179.148158][ T9360]  post_alloc_hook+0x240/0x2a0
[  179.149892][ T9360]  get_page_from_freelist+0x21e4/0x22c0
[  179.151705][ T9360]  __alloc_frozen_pages_noprof+0x181/0x370
[  179.153638][ T9360]  alloc_pages_mpol+0x232/0x4a0
[  179.155219][ T9360]  allocate_slab+0x8a/0x370
[  179.156959][ T9360]  ___slab_alloc+0xbeb/0x1420
[  179.158686][ T9360]  kmem_cache_alloc_noprof+0x283/0x3c0
[  179.160632][ T9360]  xfrm_state_alloc+0x24/0x2f0
[  179.162196][ T9360]  xfrm_add_acquire+0xf7/0xb20
[  179.164010][ T9360]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.165795][ T9360]  netlink_rcv_skb+0x208/0x470
[  179.167261][ T9360]  xfrm_netlink_rcv+0x79/0x90
[  179.168891][ T9360]  netlink_unicast+0x82f/0x9e0
[  179.170378][ T9360]  netlink_sendmsg+0x805/0xb30
[  179.171909][ T9360]  __sock_sendmsg+0x21c/0x270
[  179.173410][ T9360]  ____sys_sendmsg+0x505/0x830
[  179.174960][ T9360] page last free pid 6616 tgid 6615 stack trace:
[  179.176970][ T9360]  __free_frozen_pages+0xbc4/0xd30
[  179.178630][ T9360]  stack_depot_save_flags+0x436/0x860
[  179.180756][ T9360]  kasan_save_track+0x4f/0x80
[  179.182607][ T9360]  __kasan_kmalloc+0x93/0xb0
[  179.184403][ T9360]  __kmalloc_cache_noprof+0x230/0x3d0
[  179.186509][ T9360]  ref_tracker_alloc+0x133/0x460
[  179.188483][ T9360]  batadv_hardif_enable_interface+0x1dd/0xa10
[  179.190854][ T9360]  batadv_meshif_slave_add+0x79/0x100
[  179.192927][ T9360]  do_set_master+0x533/0x6d0
[  179.194719][ T9360]  do_setlink+0xcf0/0x41c0
[  179.196375][ T9360]  rtnl_setlink+0x604/0x900
[  179.197936][ T9360]  rtnetlink_rcv_msg+0x7cf/0xb70
[  179.199794][ T9360]  netlink_rcv_skb+0x208/0x470
[  179.201602][ T9360]  netlink_unicast+0x82f/0x9e0
[  179.203247][ T9360]  netlink_sendmsg+0x805/0xb30
[  179.205067][ T9360]  __sock_sendmsg+0x21c/0x270
[  179.206797][ T9360] 
[  179.207705][ T9360] Memory state around the buggy address:
[  179.209604][ T9360]  ffff88802e709680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.212530][ T9360]  ffff88802e709700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.215457][ T9360] >ffff88802e709780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.218167][ T9360]                                            ^
[  179.220212][ T9360]  ffff88802e709800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.223043][ T9360]  ffff88802e709880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.226099][ T9360] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  179.255734][ T9360] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  179.258348][ T9360] CPU: 0 UID: 0 PID: 9360 Comm: syz.1.1385 Not tainted syzkaller #0 PREEMPT(full) 
[  179.261816][ T9360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.265159][ T9360] Call Trace:
[  179.266430][ T9360]  <TASK>
[  179.267628][ T9360]  dump_stack_lvl+0x99/0x250
[  179.269201][ T9360]  ? __asan_memcpy+0x40/0x70
[  179.270695][ T9360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.272307][ T9360]  ? __pfx__printk+0x10/0x10
[  179.273839][ T9360]  vpanic+0x281/0x750
[  179.275171][ T9360]  ? preempt_schedule+0xae/0xc0
[  179.276874][ T9360]  ? __pfx_vpanic+0x10/0x10
[  179.278766][ T9360]  ? preempt_schedule_common+0x83/0xd0
[  179.281032][ T9360]  ? preempt_schedule+0xae/0xc0
[  179.283050][ T9360]  ? __pfx_preempt_schedule+0x10/0x10
[  179.285289][ T9360]  panic+0xb9/0xc0
[  179.286867][ T9360]  ? __pfx_panic+0x10/0x10
[  179.288669][ T9360]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  179.291082][ T9360]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.293250][ T9360]  check_panic_on_warn+0x89/0xb0
[  179.295294][ T9360]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.297573][ T9360]  end_report+0x78/0x160
[  179.299356][ T9360]  kasan_report+0x129/0x150
[  179.301260][ T9360]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.303485][ T9360]  __xfrm_state_lookup+0x6ad/0x8d0
[  179.305580][ T9360]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  179.307857][ T9360]  ? xfrm_state_lookup+0x45/0x1e0
[  179.309997][ T9360]  xfrm_state_lookup+0x11e/0x1e0
[  179.312058][ T9360]  ipcomp4_init_state+0x205/0xb20
[  179.314145][ T9360]  ? __xfrm_init_state+0x7ef/0x13f0
[  179.316293][ T9360]  __xfrm_init_state+0xa76/0x13f0
[  179.318348][ T9360]  ? __xfrm_init_state+0x7ef/0x13f0
[  179.320492][ T9360]  xfrm_add_sa+0x2f5b/0x4070
[  179.322414][ T9360]  ? __pfx_xfrm_add_sa+0x10/0x10
[  179.324486][ T9360]  ? apparmor_capable+0x137/0x1b0
[  179.326569][ T9360]  ? __nla_parse+0x40/0x60
[  179.328410][ T9360]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.330550][ T9360]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.332861][ T9360]  ? __pfx___mutex_trylock_common+0x10/0x10
[  179.335298][ T9360]  ? rcu_is_watching+0x15/0xb0
[  179.337318][ T9360]  ? trace_contention_end+0x39/0x120
[  179.339541][ T9360]  ? __mutex_lock+0x335/0x1350
[  179.341541][ T9360]  netlink_rcv_skb+0x208/0x470
[  179.343535][ T9360]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.345796][ T9360]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.347985][ T9360]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.350127][ T9360]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.352285][ T9360]  xfrm_netlink_rcv+0x79/0x90
[  179.354266][ T9360]  netlink_unicast+0x82f/0x9e0
[  179.356209][ T9360]  ? __pfx_netlink_unicast+0x10/0x10
[  179.358491][ T9360]  ? netlink_sendmsg+0x642/0xb30
[  179.360575][ T9360]  ? skb_put+0x11b/0x210
[  179.362325][ T9360]  netlink_sendmsg+0x805/0xb30
[  179.364359][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.366610][ T9360]  ? aa_sock_msg_perm+0xf1/0x1d0
[  179.368670][ T9360]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.370875][ T9360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.373088][ T9360]  __sock_sendmsg+0x21c/0x270
[  179.375043][ T9360]  ____sys_sendmsg+0x505/0x830
[  179.377030][ T9360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.379280][ T9360]  ? import_iovec+0x74/0xa0
[  179.381158][ T9360]  ___sys_sendmsg+0x21f/0x2a0
[  179.383151][ T9360]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.385321][ T9360]  ? __fget_files+0x2a/0x420
[  179.387236][ T9360]  ? __fget_files+0x3a0/0x420
[  179.389214][ T9360]  __x64_sys_sendmsg+0x19b/0x260
[  179.391264][ T9360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.393511][ T9360]  ? rcu_is_watching+0x15/0xb0
[  179.395486][ T9360]  ? do_syscall_64+0xbe/0x3b0
[  179.397451][ T9360]  do_syscall_64+0xfa/0x3b0
[  179.399371][ T9360]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.401512][ T9360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.404024][ T9360]  ? exc_page_fault+0x9f/0xf0
[  179.405989][ T9360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.408416][ T9360] RIP: 0033:0x7fe50c58eba9
[  179.410253][ T9360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.418055][ T9360] RSP: 002b:00007fe50d489038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.421483][ T9360] RAX: ffffffffffffffda RBX: 00007fe50c7d5fa0 RCX: 00007fe50c58eba9
[  179.424674][ T9360] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  179.428092][ T9360] RBP: 00007fe50c611e19 R08: 0000000000000000 R09: 0000000000000000
[  179.431348][ T9360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.434607][ T9360] R13: 00007fe50c7d6038 R14: 00007fe50c7d5fa0 R15: 00007ffdae013198
[  179.437857][ T9360]  </TASK>
[  179.439953][ T9360] Kernel Offset: disabled
[  179.441756][ T9360] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:14:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000135f RDI=0000000000001360 RBP=00000000000003f8 RSP=ffffc9000317e930
R8 =ffff888020db0237 R9 =1ffff110041b6046 R10=dffffc0000000000 R11=ffffffff854fa440
R12=dffffc0000000000 R13=ffffffff99b028e9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa4bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe50d4896c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000002e99c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe50c7a7498 00007fe50c7a7470 XMM03=00007fe50c7a74a8 00007fe50c7a74a0
XMM04=00007fe50d30d100 00007fe50c7a7460 XMM05=00007fe50c7a7478 00007fe50c7a74c0
XMM06=00007fe50c7a74b8 00007fe50c7a74b0 XMM07=00007fe50c7a74a8 00007fe50c7a74a0
XMM08=0000000000000000 00007fe50c612ee7 XMM09=0000000000000000 00007fe50c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000097d2625b RBX=0000000000000c01 RCX=00000000dc990df7 RDX=ffffc9000330ed74
RSI=000000000000000d RDI=00000000cde76546 RBP=000000002c72fd27 RSP=ffffc9000330ec58
R8 =000000007b715f2d R9 =00000000dc990df7 R10=000000000000001d R11=ffffffff81ac4d00
R12=ffff888112ee9a70 R13=0000000000000cc0 R14=ffffc9000330ecc0 R15=ffffc9000330ecc0
RIP=ffffffff84ff4f3a RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558969a500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005580f77c4950 CR3=0000000105b1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb4e4a12e53
XMM06=0000000000000000 00007fb4e4a12e4d XMM07=0000000000000000 00007fb4e4a12e61
XMM08=0000000000000000 00007fb4e4a12ee7 XMM09=0000000000000000 00007fb4e4a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
