last executing test programs:

2m40.884451161s ago: executing program 0 (id=225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xbdd645277854b6ae}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m40.819498391s ago: executing program 0 (id=226):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
ioctl$TUNSETOFFLOAD(r0, 0x541b, 0x0)

2m40.003124739s ago: executing program 1 (id=237):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000240)=""/247, 0xf7, 0x0, &(0x7f0000000080)=""/77, 0x4d}}, 0x10)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000)
socket$netlink(0x10, 0x3, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0xd2d, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c3c00000000000000000000000000060400"], 0x0, 0x26, 0x0, 0x1}, 0x28)
socket$kcm(0x2c, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0300001903986e00000000000a00000000000000c536b336a4568947f87adf9144194bb24e665e679687a150a7f8125fa7d02d4b1792c45bb3553a66064dd5020db47377051c2e9adb4f87ff3e13af105619427b88d6dc037bcd48a1c8450cb211798e1e9480f2027dcf5af4562e9d3246ca63de55131dac8d00b52858baac74a312a36dfbff50420a7acd5d9f652161e432e64df74d9325f39dfc612a1cc44fdaead56902", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)

2m39.937339072s ago: executing program 0 (id=239):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111530000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

2m39.862679287s ago: executing program 0 (id=242):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x8884)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x44004040)

2m39.691485045s ago: executing program 1 (id=244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cc, 0x313)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11)

2m39.522981709s ago: executing program 1 (id=248):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x800000}, @initr0, @exit, @alu={0x7, 0x0, 0x2, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

2m39.45116284s ago: executing program 1 (id=250):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x5f, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3ee901"], 0x9a)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000680)=@bloom_filter={0x1e, 0x100, 0x0, 0x0, 0x2800, 0xffffffffffffffff, 0xf, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='ext4_es_find_extent_range_exit\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x55)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x8a, &(0x7f0000000040)=r11, 0x4)
r12 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfef8a)
sendmsg$inet(r12, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

2m39.384262671s ago: executing program 1 (id=251):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000020100"})

2m39.165764775s ago: executing program 1 (id=252):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2m39.113403468s ago: executing program 32 (id=252):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2m38.688025409s ago: executing program 0 (id=254):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc)

2m38.286302983s ago: executing program 0 (id=255):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

2m38.286112318s ago: executing program 33 (id=255):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

2m19.872778661s ago: executing program 4 (id=432):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x56}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r0, &(0x7f0000002240), &(0x7f0000002340)=""/166}, 0x20)

2m19.872443203s ago: executing program 4 (id=434):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x1d0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd2c, 0x10}}, @algo_auth_trunc={0xc4, 0x14, {{'md5\x00'}, 0x3c0, 0x18, "1efa6d49f5684e26467d62ab831a8fd213388a4cbaac46ec54f30c5f355fe3032ba87864c899c6f74814e66e04b59a7e1169cd4720bbad478da16846a8e0f4b3af2a127aaa76a6776be50dff4cd60dbe39facb226ed2f343443281635d3cbbd4d66384596e9fd5a8f865eca427229344dc6ea751f9bb4d12"}}]}, 0x1d0}}, 0x800)

2m19.794561973s ago: executing program 4 (id=435):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000002c0081024e81f782db44b9f4011d080005000300e8fe55a1180015000600142603600e120900260000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40806d9ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040e3d95667e00681ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701e258edfaf3ca34b6f3a29a9ea453aef3", 0xd8}], 0x1}, 0x24080)

2m19.732742286s ago: executing program 4 (id=437):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000100)="40bde6045bc34346e99a24c57860524fcd2a4a4cd13e3bbdfbf52c6c60c665d02c92deaf46bb5fa8e6e5aa9e4d566b145f7a609927754f95bbce9f39ae09acc8f64fd73ff732a6d70973859d5cc2c68ba26f98d9264d0b8ac1e08be422b51cd2a35a98f6a0dd13368e00e45fa28f086753fc390d967cf849609ea7f442c3861608fbfb0e5f1d56f2f1712c0675c38d3385511b2389eaadbfc04c9bf4405b7828ad9ea7ecd19c92ece68e939ca8d71a5cbb16789972bc39c2147a7f2183deae97f8651c", 0xc3}, {&(0x7f0000002780)="28abd056980d917deab6f7ba5e2c9d32447fdc9a97bb6a9956ef6eef13c17788f5ca9ee3114c2a5a2f865bbe488ee5ec6cd124fd8084e2e72f9be21dceded37e19cdda9eb8a1691d38e8d460a84ab62501bd9459af23f0c988cff018be8e9c14bbbfde", 0x63}], 0x2, &(0x7f0000002880)=ANY=[], 0x410}, 0x8000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="00000c0000000c00000004000000010000000000008403000000005f300008ea725c1b344cf3e99da484104a7971b6aed9f2642c0e6104b000204b806975d0948f59703339f49c57d4f661795a3565aa7ea9b3f6a28e4469bb00c871e166d22fea247e4b44253b431a6327925bceaa6d18e95cfb"], 0x0, 0x28, 0x0, 0x1, 0x401}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
fstat(r1, &(0x7f0000000840))
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x21, 0x7, 0x2)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="203431b300", @ANYRES32, @ANYRES16=0x0, @ANYBLOB, @ANYRES64=r4], 0x20)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"})
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10)

2m19.600149118s ago: executing program 4 (id=440):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

2m19.52391071s ago: executing program 4 (id=444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="1300"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)

2m4.394679881s ago: executing program 34 (id=444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="1300"/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)

1m43.2813716s ago: executing program 5 (id=796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6)

1m43.151125228s ago: executing program 5 (id=798):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x84000)

1m42.830837886s ago: executing program 2 (id=801):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

1m42.669291765s ago: executing program 5 (id=802):
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)

1m42.668961334s ago: executing program 2 (id=803):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000700)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)

1m42.552058142s ago: executing program 2 (id=804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m42.551944515s ago: executing program 5 (id=805):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000004c0)=r0, 0x64)

1m42.422360359s ago: executing program 2 (id=807):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28)

1m42.422158782s ago: executing program 5 (id=808):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x1f}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90)

1m42.35924371s ago: executing program 2 (id=809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbad7ffe1001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94)

1m42.106620218s ago: executing program 5 (id=810):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4)
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33)

1m42.02164508s ago: executing program 35 (id=810):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4)
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33)

1m41.967392904s ago: executing program 2 (id=812):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m41.944664147s ago: executing program 36 (id=812):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000040002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m24.008846333s ago: executing program 6 (id=981):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10)

1m23.922250325s ago: executing program 6 (id=982):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffffe, @mcast1, 0x20000000}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0xc, 0x29, 0x32}], 0xc}, 0x0)

1m23.800902627s ago: executing program 6 (id=984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1m23.730266794s ago: executing program 6 (id=985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a0000000500010006000000140007"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1m23.656260648s ago: executing program 6 (id=989):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

1m23.546296432s ago: executing program 6 (id=993):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000002800)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m8.529521053s ago: executing program 37 (id=993):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f0000002800)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.434270842s ago: executing program 8 (id=1798):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
r3 = socket$kcm(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x800, &(0x7f0000000200)="0b7d4cd2ade6888e080f168edb8364c7f2ab7f253a90d28f3529fe5c802cedf7de345e3ca6029ab5d86aa670fb6c79b9b597e43cd038d9c7c8973fbd2033790f1d606a520b15f46967085a3b7ddfbb1bec85f03e7770b39ff909d03af33c330df5529b245572f101c127b553de8462ca4a8db512ec701052537eb23cfe7faf0eb77a2a84a5d05bcad157fd639ade019911529bdde0a10e4a7ddcc09130f0a6ff18511fde92aaa39aa92ca3", 0xab, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x5, 0x3, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x0, 0x485, 0x0, 0x0)

9.142175316s ago: executing program 8 (id=1804):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

9.024612009s ago: executing program 8 (id=1807):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd)

8.165848129s ago: executing program 8 (id=1815):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000200)={[{@gid}, {@uid={'uid', 0x3d, 0xee01}}]})

8.165522239s ago: executing program 8 (id=1816):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0)

7.495588109s ago: executing program 8 (id=1820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x13, 0x30, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x2000d041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
r5 = socket$kcm(0xa, 0x3, 0x87)
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)="0000ffffffffa000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNGETVNETBE(r5, 0x800454df, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r4, 0x0, 0xfe33)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)

784.529787ms ago: executing program 7 (id=1852):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@d, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x8}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0xc, &(0x7f0000000000)=""/12, 0x41000, 0xc}, 0x94)

645.221141ms ago: executing program 7 (id=1853):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

545.374509ms ago: executing program 3 (id=1854):
socket(0x1d, 0x800, 0x5)
socket$alg(0x26, 0x5, 0x0)
socket(0x1d, 0x3, 0x3)

545.108211ms ago: executing program 7 (id=1855):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

373.669614ms ago: executing program 7 (id=1856):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004000000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

373.280232ms ago: executing program 3 (id=1857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x4000000)

241.681893ms ago: executing program 7 (id=1858):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007514feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x8, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf2, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)

241.304604ms ago: executing program 3 (id=1859):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

165.696322ms ago: executing program 7 (id=1860):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, 0x0, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg(r3, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

82.130328ms ago: executing program 3 (id=1861):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21e0461, 0x0)

435.876µs ago: executing program 3 (id=1862):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=1863):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, @perf_config_ext={0x9, 0x1}, 0x4b0, 0xc8, 0x0, 0x2, 0x1000000000003}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_int(r2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37509' (ED25519) to the list of known hosts.
syzkaller login: [   55.991141][ T5823] cgroup: Unknown subsys name 'net'
[   56.144142][ T5823] cgroup: Unknown subsys name 'cpuset'
[   56.149864][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.894018][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.546233][   T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.550080][   T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.553228][   T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.559231][   T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.573491][   T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.601501][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.606147][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.611098][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.659169][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.659898][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.668608][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.678816][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.682338][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.682545][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.688228][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.128204][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   71.140106][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   71.224829][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   71.297328][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.300707][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.303257][ T5869] bridge_slave_0: entered allmulticast mode
[   71.306886][ T5869] bridge_slave_0: entered promiscuous mode
[   71.342347][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.345330][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.348105][ T5869] bridge_slave_1: entered allmulticast mode
[   71.352753][ T5869] bridge_slave_1: entered promiscuous mode
[   71.381789][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.384499][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.387238][ T5873] bridge_slave_0: entered allmulticast mode
[   71.391621][ T5873] bridge_slave_0: entered promiscuous mode
[   71.414403][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.416418][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.423778][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.426439][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.429294][ T5873] bridge_slave_1: entered allmulticast mode
[   71.434221][ T5873] bridge_slave_1: entered promiscuous mode
[   71.441071][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.472236][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.475798][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.478873][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.482090][ T5872] bridge_slave_0: entered allmulticast mode
[   71.485823][ T5872] bridge_slave_0: entered promiscuous mode
[   71.507903][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.536459][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.538876][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.542150][ T5872] bridge_slave_1: entered allmulticast mode
[   71.545239][ T5872] bridge_slave_1: entered promiscuous mode
[   71.558988][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.572801][ T5869] team0: Port device team_slave_0 added
[   71.598615][ T5873] team0: Port device team_slave_0 added
[   71.601735][ T5869] team0: Port device team_slave_1 added
[   71.605999][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.636195][ T5873] team0: Port device team_slave_1 added
[   71.639369][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.642224][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.651035][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.659259][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.690754][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.693229][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.701771][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.733514][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.735825][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.745924][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.752496][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.755189][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.764866][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.771222][ T5872] team0: Port device team_slave_0 added
[   71.789210][ T5872] team0: Port device team_slave_1 added
[   71.842891][ T5869] hsr_slave_0: entered promiscuous mode
[   71.846195][ T5869] hsr_slave_1: entered promiscuous mode
[   71.864367][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.866656][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.875095][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.881255][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.883761][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.891757][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.943402][ T5873] hsr_slave_0: entered promiscuous mode
[   71.946691][ T5873] hsr_slave_1: entered promiscuous mode
[   71.950260][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   71.952148][ T5873] Cannot create hsr debugfs directory
[   72.009339][ T5872] hsr_slave_0: entered promiscuous mode
[   72.012969][ T5872] hsr_slave_1: entered promiscuous mode
[   72.015814][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   72.018108][ T5872] Cannot create hsr debugfs directory
[   72.331082][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.341489][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.348299][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.361265][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.399099][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.412883][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.417819][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.435505][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.500275][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.512550][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.525429][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.542968][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.635243][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.682805][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   72.690651][   T57] Bluetooth: hci2: command tx timeout
[   72.690760][ T5870] Bluetooth: hci0: command tx timeout
[   72.703357][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.709517][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.712518][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.732663][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.735354][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.766337][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   72.771970][ T5870] Bluetooth: hci1: command tx timeout
[   72.793223][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.800310][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.803136][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.828593][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.831272][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.853515][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   72.882868][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.885422][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.901784][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.904520][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.988870][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.999140][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.053415][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.132505][ T5869] veth0_vlan: entered promiscuous mode
[   73.158498][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.166374][ T5869] veth1_vlan: entered promiscuous mode
[   73.187995][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.239098][ T5873] veth0_vlan: entered promiscuous mode
[   73.244607][ T5869] veth0_macvtap: entered promiscuous mode
[   73.257131][ T5869] veth1_macvtap: entered promiscuous mode
[   73.267617][ T5873] veth1_vlan: entered promiscuous mode
[   73.286370][ T5872] veth0_vlan: entered promiscuous mode
[   73.305843][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.317002][ T5872] veth1_vlan: entered promiscuous mode
[   73.326488][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.353415][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.359109][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.364082][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.367815][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.376267][ T5873] veth0_macvtap: entered promiscuous mode
[   73.387735][ T5873] veth1_macvtap: entered promiscuous mode
[   73.451709][ T5872] veth0_macvtap: entered promiscuous mode
[   73.458361][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.475432][ T5872] veth1_macvtap: entered promiscuous mode
[   73.483413][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.515471][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.518657][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.537133][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.541062][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.544343][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.547575][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.584806][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.604675][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.609344][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.615655][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.630256][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.633830][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.637211][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.663889][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.699198][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.714994][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.719966][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.819284][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.823157][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.866287][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.869263][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.942231][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.947327][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.127148][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'.
[   74.625165][ T5870] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   74.772209][ T5870] Bluetooth: hci0: command tx timeout
[   74.772668][   T57] Bluetooth: hci2: command tx timeout
[   74.851187][   T57] Bluetooth: hci1: command tx timeout
[   75.884978][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   76.289445][    C1] hrtimer: interrupt took 45208 ns
[   76.829046][ T6066] netlink: 'syz.1.64': attribute type 49 has an invalid length.
[   76.852761][   T57] Bluetooth: hci0: command tx timeout
[   76.853020][ T5870] Bluetooth: hci2: command tx timeout
[   76.941250][ T5870] Bluetooth: hci1: command tx timeout
[   77.462786][ T6088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.312983][ T6113] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   78.437070][ T6119] netlink: 'syz.1.87': attribute type 10 has an invalid length.
[   78.440290][ T6119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.87'.
[   78.444646][ T6119] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   78.568590][ T6125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.581795][ T6127] netlink: 'syz.0.91': attribute type 29 has an invalid length.
[   78.586262][ T6127] netlink: 'syz.0.91': attribute type 29 has an invalid length.
[   78.602607][ T6127] netlink: 'syz.0.91': attribute type 29 has an invalid length.
[   78.932502][ T5870] Bluetooth: hci0: command tx timeout
[   78.942598][ T5870] Bluetooth: hci2: command tx timeout
[   79.019716][ T5870] Bluetooth: hci1: command tx timeout
[   79.813942][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.100'.
[   81.160815][ T6181] netlink: 'syz.1.115': attribute type 39 has an invalid length.
[   81.161007][ T6186] syzkaller0: entered promiscuous mode
[   81.165976][ T6186] syzkaller0: entered allmulticast mode
[   81.171901][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   81.175727][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   81.295828][ T6181] hsr_slave_0 (unregistering): left promiscuous mode
[   82.945730][ T6207] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET)
[   83.622556][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'.
[   83.793363][ T6222] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.132'.
[   84.037701][ T6234] netlink: 2 bytes leftover after parsing attributes in process `syz.2.138'.
[   84.042791][ T6234] batadv_slave_1: entered promiscuous mode
[   84.242991][ T6238] netlink: 76 bytes leftover after parsing attributes in process `syz.2.139'.
[   84.406510][ T6244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.141'.
[   84.426609][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.141'.
[   84.776721][ T6254] netlink: 'syz.1.145': attribute type 21 has an invalid length.
[   85.237881][ T6264] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   85.242092][ T6264] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.150'.
[   85.799097][ T6249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.849033][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   85.897975][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   86.318888][ T6315] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   86.326893][ T6315] netlink: 'syz.1.172': attribute type 2 has an invalid length.
[   86.581006][ T6332] netlink: 'syz.0.180': attribute type 21 has an invalid length.
[   86.775793][   T47] cfg80211: failed to load regulatory.db
[   89.002092][ T6366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.193'.
[   89.995899][ T5870] Bluetooth: hci0: Received unexpected HCI Event 0x00
[   90.089773][ T6385] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.200'.
[   90.218560][ T6392] C: renamed from team_slave_0 (while UP)
[   90.233139][ T6392] netlink: 'syz.2.205': attribute type 4 has an invalid length.
[   90.235636][ T6392] netlink: 116 bytes leftover after parsing attributes in process `syz.2.205'.
[   90.249617][ T6392] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   90.561088][ T6405] netlink: 'syz.1.212': attribute type 10 has an invalid length.
[   91.151593][ T6421] Zero length message leads to an empty skb
[   91.310455][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.222'.
[   92.584735][ T6457] netlink: 'syz.1.237': attribute type 10 has an invalid length.
[   92.588357][ T6457] netlink: 55 bytes leftover after parsing attributes in process `syz.1.237'.
[   92.694103][ T6470] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.241'.
[   92.767002][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'.
[   94.041673][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.151108][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.271302][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.360860][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.494822][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   94.561357][   T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.565292][   T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.569247][   T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.574706][   T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.579061][   T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.629666][   T57] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.634129][   T57] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.637800][   T57] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.641734][   T57] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.645234][   T57] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.659699][   T13] bridge_slave_1: left allmulticast mode
[   94.661774][   T13] bridge_slave_1: left promiscuous mode
[   94.664530][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.713749][   T13] bridge_slave_0: left allmulticast mode
[   94.716183][   T13] bridge_slave_0: left promiscuous mode
[   94.722492][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.171792][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.178231][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.183918][   T13] bond0 (unregistering): Released all slaves
[   95.434008][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[   95.653089][   T13] hsr_slave_0: left promiscuous mode
[   95.656186][   T13] hsr_slave_1: left promiscuous mode
[   95.658620][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.669822][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.674395][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.676975][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.714983][   T13] veth1_macvtap: left promiscuous mode
[   95.717162][   T13] veth0_macvtap: left promiscuous mode
[   95.719761][   T13] veth1_vlan: left promiscuous mode
[   95.722189][   T13] veth0_vlan: left promiscuous mode
[   96.247924][   T13] team0 (unregistering): Port device team_slave_1 removed
[   96.270180][   T13] team0 (unregistering): Port device team_slave_0 removed
[   96.526303][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   96.615861][ T6508] chnl_net:caif_netlink_parms(): no params data found
[   96.622801][ T5870] Bluetooth: hci0: command tx timeout
[   96.689554][ T5870] Bluetooth: hci1: command tx timeout
[   96.736760][ T6554] syzkaller0: entered promiscuous mode
[   96.739095][ T6554] syzkaller0: entered allmulticast mode
[   97.886249][ T6510] chnl_net:caif_netlink_parms(): no params data found
[   97.941031][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.946725][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.953596][ T6508] bridge_slave_0: entered allmulticast mode
[   97.957155][ T6508] bridge_slave_0: entered promiscuous mode
[   97.990201][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.993375][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.996428][ T6508] bridge_slave_1: entered allmulticast mode
[   98.001618][ T6508] bridge_slave_1: entered promiscuous mode
[   98.061567][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.091323][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.093642][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.096001][ T6510] bridge_slave_0: entered allmulticast mode
[   98.099329][ T6510] bridge_slave_0: entered promiscuous mode
[   98.104892][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.121324][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.124262][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.127194][ T6510] bridge_slave_1: entered allmulticast mode
[   98.132556][ T6510] bridge_slave_1: entered promiscuous mode
[   98.164344][ T6508] team0: Port device team_slave_0 added
[   98.191461][ T6508] team0: Port device team_slave_1 added
[   98.197610][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.223398][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.318718][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.324847][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.335893][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.396437][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.399324][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.413878][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.431742][ T6510] team0: Port device team_slave_0 added
[   98.454448][ T6583] netlink: 'syz.2.271': attribute type 39 has an invalid length.
[   98.469865][ T6510] team0: Port device team_slave_1 added
[   98.627038][ T6508] hsr_slave_0: entered promiscuous mode
[   98.631497][ T6508] hsr_slave_1: entered promiscuous mode
[   98.634688][ T6508] debugfs: 'hsr0' already exists in 'hsr'
[   98.637106][ T6508] Cannot create hsr debugfs directory
[   98.690172][ T5870] Bluetooth: hci0: command tx timeout
[   98.702794][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.705747][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.717183][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.753569][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.756504][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.769372][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.773838][ T5870] Bluetooth: hci1: command tx timeout
[   98.882019][ T6510] hsr_slave_0: entered promiscuous mode
[   98.884578][ T6510] hsr_slave_1: entered promiscuous mode
[   98.887418][ T6510] debugfs: 'hsr0' already exists in 'hsr'
[   98.891032][ T6510] Cannot create hsr debugfs directory
[   98.925450][ T6596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.275'.
[   99.184108][ T6508] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   99.210544][ T6508] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   99.237860][ T6508] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   99.252119][ T6508] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   99.376170][ T6510] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   99.394707][ T6510] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   99.407104][ T6510] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   99.430852][ T6510] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.712038][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.796699][ T6508] 8021q: adding VLAN 0 to HW filter on device team0
[   99.819370][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.822018][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.861687][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.864403][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.886384][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.932446][ T6510] 8021q: adding VLAN 0 to HW filter on device team0
[   99.962624][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.965607][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.984217][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.987142][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.144702][ T6624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.152405][ T6624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.299169][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.406508][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.439720][ T6510] veth0_vlan: entered promiscuous mode
[  100.448600][ T6510] veth1_vlan: entered promiscuous mode
[  100.492385][ T6510] veth0_macvtap: entered promiscuous mode
[  100.504773][ T6510] veth1_macvtap: entered promiscuous mode
[  100.527228][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.537146][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.555939][ T6538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.558965][ T6538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.572512][ T6538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.577034][ T6508] veth0_vlan: entered promiscuous mode
[  100.580457][ T6538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.598577][ T6508] veth1_vlan: entered promiscuous mode
[  100.655088][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.660922][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.674276][ T6508] veth0_macvtap: entered promiscuous mode
[  100.701127][ T6508] veth1_macvtap: entered promiscuous mode
[  100.707535][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.714959][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.733514][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.747686][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.770005][ T5870] Bluetooth: hci0: command tx timeout
[  100.784241][ T6538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.787958][ T6538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.793553][ T6538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.804648][ T6538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.851867][ T5870] Bluetooth: hci1: command tx timeout
[  100.883101][  T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.886398][  T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.935610][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.939819][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.662130][ T6624] syz.2.279 (6624) used greatest stack depth: 18576 bytes left
[  102.732907][ T6673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.290'.
[  102.849711][ T5870] Bluetooth: hci0: command tx timeout
[  102.929991][ T5870] Bluetooth: hci1: command tx timeout
[  103.315837][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'.
[  104.415988][ T6725] netlink: 'syz.4.311': attribute type 4 has an invalid length.
[  104.418624][ T6725] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.311'.
[  104.428675][ T6725] netlink: 5 bytes leftover after parsing attributes in process `syz.4.311'.
[  106.659992][ T6799] netlink: 'syz.4.343': attribute type 16 has an invalid length.
[  106.663028][ T6799] netlink: 'syz.4.343': attribute type 3 has an invalid length.
[  106.666296][ T6799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.343'.
[  106.842745][ T6806] warning: `syz.3.345' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  106.993301][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'.
[  107.050462][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'.
[  107.177501][ T6813] dvmrp0: tun_chr_ioctl cmd 2147767520
[  107.562338][ T6840] netlink: 'syz.2.360': attribute type 13 has an invalid length.
[  107.836307][ T6850] netlink: 'syz.2.362': attribute type 10 has an invalid length.
[  107.844778][ T6850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.362'.
[  107.967530][ T6850] ipvlan1: entered promiscuous mode
[  107.971839][ T6850] ipvlan1: entered allmulticast mode
[  107.974477][ T6850] veth0_vlan: entered allmulticast mode
[  107.982492][ T6850] bridge0: port 3(ipvlan1) entered blocking state
[  107.985683][ T6850] bridge0: port 3(ipvlan1) entered disabled state
[  107.991416][ T6850] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  108.394741][ T6863] netlink: 'syz.4.369': attribute type 7 has an invalid length.
[  109.008541][ T6898] netlink: 'syz.4.383': attribute type 39 has an invalid length.
[  109.025305][ T6857] delete_channel: no stack
[  109.343749][ T6913] netlink: 'syz.3.388': attribute type 11 has an invalid length.
[  109.348459][ T6913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.388'.
[  109.396686][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.915186][ T6941] netlink: 44 bytes leftover after parsing attributes in process `syz.4.396'.
[  109.921031][ T6941] netlink: 51 bytes leftover after parsing attributes in process `syz.4.396'.
[  109.926608][ T6941] netlink: 'syz.4.396': attribute type 4 has an invalid length.
[  110.024568][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'.
[  110.062885][ T6943] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  111.384050][ T6969] netlink: 10 bytes leftover after parsing attributes in process `syz.4.406'.
[  111.533060][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'.
[  112.004245][ T7005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.419'.
[  112.246643][ T7009] =======================================================
[  112.246643][ T7009] WARNING: The mand mount option has been deprecated and
[  112.246643][ T7009]          and is ignored by this kernel. Remove the mand
[  112.246643][ T7009]          option from the mount to silence this warning.
[  112.246643][ T7009] =======================================================
[  112.378774][ T7019] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.426'.
[  112.383709][ T7019] openvswitch: netlink: ufid size 8198 bytes exceeds the range (1, 16)
[  112.391654][ T7019] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  112.689943][ T7038] netlink: 'syz.4.435': attribute type 1 has an invalid length.
[  114.429009][ T7068] netlink: 'syz.2.450': attribute type 21 has an invalid length.
[  114.433358][ T7068] netlink: 164 bytes leftover after parsing attributes in process `syz.2.450'.
[  115.630823][ T7084] netlink: 'syz.3.456': attribute type 9 has an invalid length.
[  116.503565][ T7108] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  116.536655][ T7108] syzkaller0: entered promiscuous mode
[  116.538979][ T7108] syzkaller0: entered allmulticast mode
[  119.434495][ T7124] netlink: 277 bytes leftover after parsing attributes in process `syz.3.472'.
[  119.489013][ T7126] netlink: 'syz.2.473': attribute type 10 has an invalid length.
[  120.602590][ T7160] netlink: 'syz.2.488': attribute type 10 has an invalid length.
[  120.605831][ T7160] netlink: 'syz.2.488': attribute type 16 has an invalid length.
[  120.612310][ T7160] netlink: 156 bytes leftover after parsing attributes in process `syz.2.488'.
[  124.682250][ T7190] netlink: 'syz.2.499': attribute type 49 has an invalid length.
[  124.798465][ T7197] netlink: 'syz.3.502': attribute type 16 has an invalid length.
[  124.828472][ T7197] netlink: 156 bytes leftover after parsing attributes in process `syz.3.502'.
[  124.861527][ T7201] netlink: 809 bytes leftover after parsing attributes in process `syz.3.502'.
[  124.864428][ T7201] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.502'.
[  124.867415][ T7201] netlink: 809 bytes leftover after parsing attributes in process `syz.3.502'.
[  125.006809][ T7209] option changes via remount are deprecated (pid=7208 comm=syz.2.507)
[  125.192850][ T7217] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.511'.
[  125.250543][ T7219] netlink: 'syz.3.512': attribute type 21 has an invalid length.
[  125.261334][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'.
[  125.607336][ T7228] syzkaller0: entered promiscuous mode
[  125.609779][ T7228] syzkaller0: entered allmulticast mode
[  127.330296][ T7240] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'.
[  127.445526][ T5870] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11
[  127.502905][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[  127.514363][ T7246] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  127.517291][ T7246] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  128.281540][   T57] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.285592][   T57] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.297866][   T57] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.302476][   T57] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.305908][   T57] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.628324][ T7255] chnl_net:caif_netlink_parms(): no params data found
[  128.632432][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'.
[  128.636328][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'.
[  129.493696][ T7276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.532'.
[  129.547198][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.551733][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.554548][ T7255] bridge_slave_0: entered allmulticast mode
[  129.558196][ T7255] bridge_slave_0: entered promiscuous mode
[  129.562830][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.567646][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.570843][ T7255] bridge_slave_1: entered allmulticast mode
[  129.585020][ T7255] bridge_slave_1: entered promiscuous mode
[  129.617808][ T6538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.673317][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.679048][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.699574][ T6538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.722017][ T7255] team0: Port device team_slave_0 added
[  129.727823][ T7255] team0: Port device team_slave_1 added
[  129.910835][ T7292] netlink: 'syz.3.539': attribute type 33 has an invalid length.
[  129.914430][ T7292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.539'.
[  130.369613][ T5870] Bluetooth: hci3: command tx timeout
[  130.552619][ T6538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.579074][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.581529][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.591691][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.596764][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.598995][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.611551][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.646338][ T6538] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.731081][ T7255] hsr_slave_0: entered promiscuous mode
[  130.743029][ T7255] hsr_slave_1: entered promiscuous mode
[  130.753604][ T7255] debugfs: 'hsr0' already exists in 'hsr'
[  130.755849][ T7255] Cannot create hsr debugfs directory
[  130.782679][ T7305] netlink: 'syz.3.543': attribute type 29 has an invalid length.
[  130.785446][ T7305] netlink: 'syz.3.543': attribute type 3 has an invalid length.
[  130.789196][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.543'.
[  131.037405][ T6538] bridge_slave_1: left allmulticast mode
[  131.041958][ T6538] bridge_slave_1: left promiscuous mode
[  131.044249][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.055543][ T6538] bridge_slave_0: left allmulticast mode
[  131.057362][ T6538] bridge_slave_0: left promiscuous mode
[  131.059327][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.207740][ T7316] netlink: 'syz.3.549': attribute type 2 has an invalid length.
[  131.210971][ T7316] netlink: 'syz.3.549': attribute type 3 has an invalid length.
[  131.213999][ T7316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.549'.
[  131.431748][ T7326] netlink: 'syz.3.553': attribute type 21 has an invalid length.
[  131.484052][ T7328] netlink: 'syz.2.554': attribute type 21 has an invalid length.
[  131.763392][ T7332] netlink: 14 bytes leftover after parsing attributes in process `syz.2.554'.
[  131.969334][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.974824][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.069935][ T6538] bond0 (unregistering): Released all slaves
[  132.102174][ T7326] netlink: 'syz.3.553': attribute type 6 has an invalid length.
[  132.105390][ T7326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.553'.
[  132.115886][ T7331] netlink: 'syz.2.554': attribute type 4 has an invalid length.
[  132.119833][ T7331] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  132.241630][ T7255] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.577307][ T5870] Bluetooth: hci3: command tx timeout
[  132.599632][ T7255] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  132.652163][ T7255] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.698909][ T7255] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  132.858854][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.862365][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.109255][ T6538] hsr_slave_0: left promiscuous mode
[  133.118948][ T6538] hsr_slave_1: left promiscuous mode
[  133.121516][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.127835][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.150038][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.152602][ T6538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.182706][ T6538] veth1_macvtap: left promiscuous mode
[  133.184854][ T6538] veth0_macvtap: left promiscuous mode
[  133.188043][ T6538] veth1_vlan: left promiscuous mode
[  133.190044][ T6538] veth0_vlan: left promiscuous mode
[  133.736805][ T6538] team0 (unregistering): Port device team_slave_1 removed
[  133.750635][ T7369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.759488][ T7369] IPv6: NLM_F_CREATE should be set when creating new route
[  133.762566][ T7369] IPv6: NLM_F_CREATE should be set when creating new route
[  133.856242][ T6538] team0 (unregistering): Port device team_slave_0 removed
[  134.256090][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.313343][ T7255] 8021q: adding VLAN 0 to HW filter on device team0
[  134.332435][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.334832][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.363327][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.365695][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.453864][ T7380] __nla_validate_parse: 1 callbacks suppressed
[  134.453904][ T7380] netlink: 9900 bytes leftover after parsing attributes in process `syz.3.564'.
[  134.609541][ T5870] Bluetooth: hci3: command tx timeout
[  134.632858][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.990814][ T7255] veth0_vlan: entered promiscuous mode
[  135.007047][ T7255] veth1_vlan: entered promiscuous mode
[  135.037331][ T7255] veth0_macvtap: entered promiscuous mode
[  135.043996][ T7255] veth1_macvtap: entered promiscuous mode
[  135.088297][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.121591][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.137358][ T5697] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.151397][ T5697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.154850][ T5697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.157875][ T5697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.285219][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.288270][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.336830][  T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.341251][  T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.457444][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.526'.
[  135.476874][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'.
[  135.686507][ T7428] netlink: 60 bytes leftover after parsing attributes in process `syz.3.573'.
[  135.693262][ T7428] unsupported nlmsg_type 40
[  135.777528][ T7437] netlink: 'syz.2.577': attribute type 21 has an invalid length.
[  136.033273][ T7449] netlink: 'syz.2.583': attribute type 11 has an invalid length.
[  136.036619][ T7449] netlink: 140 bytes leftover after parsing attributes in process `syz.2.583'.
[  136.163573][ T7454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.236300][ T7457] : port 1(veth0_to_bridge) entered blocking state
[  136.239171][ T7457] : port 1(veth0_to_bridge) entered disabled state
[  136.242589][ T7457] veth0_to_bridge: entered allmulticast mode
[  136.245766][ T7457] veth0_to_bridge: entered promiscuous mode
[  136.678335][ T5870] Bluetooth: hci1: unexpected event 0x3d length: 15 > 14
[  136.694271][ T5870] Bluetooth: hci3: command tx timeout
[  137.016832][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[  137.213658][ T7498] syzkaller0: refused to change device tx_queue_len
[  137.418535][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'.
[  137.426086][ T7514] netlink: 76 bytes leftover after parsing attributes in process `syz.2.611'.
[  137.432702][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  137.565126][ T7524] netlink: 'syz.2.616': attribute type 2 has an invalid length.
[  137.568391][ T7524] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  137.572335][ T7524] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.616'.
[  137.576156][ T7524] nbd: couldn't find a device at index 16
[  138.353732][ T7552] bond_slave_0: entered promiscuous mode
[  138.356130][ T7552] bond_slave_1: entered promiscuous mode
[  138.490128][ T7568] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  138.521021][ T7568] netlink: 'syz.3.636': attribute type 10 has an invalid length.
[  138.596498][ T7568] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  138.690458][ T7581] netlink: 'syz.2.643': attribute type 27 has an invalid length.
[  138.699720][ T7581] netlink: 'syz.2.643': attribute type 4 has an invalid length.
[  138.915627][ T7597] netlink: 'syz.2.650': attribute type 32 has an invalid length.
[  140.566382][ T7616] 0: renamed from bond_slave_1 (while UP)
[  140.894024][ T7642] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  140.929720][ T1093] wlan1: Trigger new scan to find an IBSS to join
[  141.076806][ T7649] netlink: 'syz.3.672': attribute type 1 has an invalid length.
[  141.085615][ T7649] netlink: 'syz.3.672': attribute type 4 has an invalid length.
[  141.094702][ T7649] __nla_validate_parse: 2 callbacks suppressed
[  141.094711][ T7649] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.672'.
[  141.298631][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'.
[  141.552724][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.679'.
[  141.680298][ T7674] netlink: 168 bytes leftover after parsing attributes in process `syz.2.684'.
[  141.880423][ T7691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.692'.
[  142.067045][ T7702] netlink: 17 bytes leftover after parsing attributes in process `syz.3.696'.
[  142.086150][ T7702] netlink: zone id is out of range
[  142.088403][ T7702] netlink: zone id is out of range
[  142.110837][ T7702] netlink: zone id is out of range
[  142.114767][ T7702] netlink: zone id is out of range
[  142.116943][ T7702] netlink: zone id is out of range
[  142.119211][ T7702] netlink: zone id is out of range
[  142.139761][ T7702] netlink: zone id is out of range
[  142.141894][ T7702] netlink: zone id is out of range
[  142.143977][ T7702] netlink: zone id is out of range
[  142.146140][ T7702] netlink: zone id is out of range
[  143.899606][  T141] wlan1: Trigger new scan to find an IBSS to join
[  144.135842][ T7769] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.727'.
[  146.588657][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'.
[  146.849721][   T36] wlan1: Creating new IBSS network, BSSID d2:06:d3:3d:cd:78
[  147.595925][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.773'.
[  147.599635][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.773'.
[  149.121064][ T7964] netlink: 'syz.2.794': attribute type 19 has an invalid length.
[  150.386633][ T5881] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.466465][ T5881] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.533864][ T5881] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.597490][ T5881] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.715349][ T5881] bridge_slave_1: left allmulticast mode
[  150.717662][ T5881] bridge_slave_1: left promiscuous mode
[  150.720412][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.725752][ T5881] bridge_slave_0: left allmulticast mode
[  150.728146][ T5881] bridge_slave_0: left promiscuous mode
[  150.731076][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.043527][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.048243][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.053627][ T5881] bond0 (unregistering): Released all slaves
[  151.344526][ T5881] hsr_slave_0: left promiscuous mode
[  151.359637][ T5881] hsr_slave_1: left promiscuous mode
[  151.373970][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.388258][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.427618][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.443627][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.468347][ T5881] veth1_macvtap: left promiscuous mode
[  151.481546][ T5881] veth0_macvtap: left promiscuous mode
[  151.483983][ T5881] veth1_vlan: left promiscuous mode
[  151.486202][ T5881] veth0_vlan: left promiscuous mode
[  151.624945][   T57] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.629824][   T57] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.635026][   T57] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.642958][   T57] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.656514][   T57] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.955783][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  151.984842][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  152.124590][   T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.127638][   T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.133119][   T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.138136][   T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.143854][   T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.584400][ T8047] veth0_vlan: entered allmulticast mode
[  152.747788][ T8029] chnl_net:caif_netlink_parms(): no params data found
[  152.954300][ T8034] chnl_net:caif_netlink_parms(): no params data found
[  152.987986][ T8047] veth0_vlan: left promiscuous mode
[  153.002759][ T8047] veth0_vlan: entered promiscuous mode
[  153.068318][ T8047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.818'.
[  153.111670][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.114157][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.116631][ T8029] bridge_slave_0: entered allmulticast mode
[  153.119958][ T8029] bridge_slave_0: entered promiscuous mode
[  153.133965][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.137684][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.141029][ T8029] bridge_slave_1: entered allmulticast mode
[  153.158134][ T8029] bridge_slave_1: entered promiscuous mode
[  153.221351][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.236318][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.262390][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.265432][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.268337][ T8034] bridge_slave_0: entered allmulticast mode
[  153.272672][ T8034] bridge_slave_0: entered promiscuous mode
[  153.334718][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.337693][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.341184][ T8034] bridge_slave_1: entered allmulticast mode
[  153.345224][ T8034] bridge_slave_1: entered promiscuous mode
[  153.394890][ T8029] team0: Port device team_slave_0 added
[  153.411825][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.435518][ T8029] team0: Port device team_slave_1 added
[  153.464728][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.475143][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'.
[  153.547063][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.550028][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.561860][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.568199][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.574911][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.587132][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.618768][ T8034] team0: Port device team_slave_0 added
[  153.623771][ T8034] team0: Port device team_slave_1 added
[  153.711779][ T8029] hsr_slave_0: entered promiscuous mode
[  153.714262][ T8029] hsr_slave_1: entered promiscuous mode
[  153.716597][ T8029] debugfs: 'hsr0' already exists in 'hsr'
[  153.718412][ T8029] Cannot create hsr debugfs directory
[  153.721687][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.724228][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.733423][ T5870] Bluetooth: hci0: command tx timeout
[  153.733518][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.744049][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.746286][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.755697][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.855109][ T8034] hsr_slave_0: entered promiscuous mode
[  153.858458][ T8034] hsr_slave_1: entered promiscuous mode
[  153.861637][ T8034] debugfs: 'hsr0' already exists in 'hsr'
[  153.863634][ T8034] Cannot create hsr debugfs directory
[  154.061234][ T8029] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  154.074631][ T8029] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  154.080283][ T8029] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  154.089267][ T8029] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  154.168578][ T8034] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  154.181979][ T8034] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  154.191678][ T8034] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  154.199979][ T8034] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  154.220255][ T5870] Bluetooth: hci2: command tx timeout
[  154.291120][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.320148][ T8029] 8021q: adding VLAN 0 to HW filter on device team0
[  154.336511][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.339503][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.370839][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.373765][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.416252][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.435373][ T5870] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  154.463633][ T8034] 8021q: adding VLAN 0 to HW filter on device team0
[  154.494872][ T8029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.502224][  T134] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.504639][  T134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.508659][  T134] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.510826][  T134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.516053][ T8110] netlink: 'syz.3.828': attribute type 29 has an invalid length.
[  154.526081][ T8110] netlink: 'syz.3.828': attribute type 29 has an invalid length.
[  154.531085][ T8110] netlink: 500 bytes leftover after parsing attributes in process `syz.3.828'.
[  154.541767][ T8110] unsupported nla_type 58
[  154.562583][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.711803][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.760063][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.034678][ T8034] veth0_vlan: entered promiscuous mode
[  155.051915][ T8034] veth1_vlan: entered promiscuous mode
[  155.128637][ T8034] veth0_macvtap: entered promiscuous mode
[  155.151920][ T8029] veth0_vlan: entered promiscuous mode
[  155.157802][ T8034] veth1_macvtap: entered promiscuous mode
[  155.183448][ T8029] veth1_vlan: entered promiscuous mode
[  155.196327][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.212324][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.237120][ T5697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.240839][ T5697] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.257880][ T5697] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.810000][   T57] Bluetooth: hci0: command tx timeout
[  156.289719][   T57] Bluetooth: hci2: command tx timeout
[  156.450521][   T57] Bluetooth: hci1: command 0x0406 tx timeout
[  156.548907][ T8029] veth0_macvtap: entered promiscuous mode
[  156.568504][ T5697] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.608198][ T8029] veth1_macvtap: entered promiscuous mode
[  156.660339][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.672092][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.680976][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.692224][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.714693][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.717700][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.721177][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.832'.
[  156.726588][ T5881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.741855][ T5881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.747957][ T5881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.759069][ T5881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.815902][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.817'.
[  156.845286][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.847967][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.893650][ T8141] netlink: 'syz.3.833': attribute type 2 has an invalid length.
[  156.896281][ T8141] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.833'.
[  156.904726][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.908042][ T8141] netlink: 'syz.3.833': attribute type 1 has an invalid length.
[  156.911955][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.524472][ T8171] netlink: 'syz.3.843': attribute type 21 has an invalid length.
[  157.884557][ T8176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.845'.
[  157.887291][ T8176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.845'.
[  157.890761][ T5870] Bluetooth: hci0: command tx timeout
[  158.097053][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.847'.
[  158.329266][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'.
[  158.382194][ T5870] Bluetooth: hci2: command tx timeout
[  158.644385][ T8219] netlink: 'syz.7.864': attribute type 10 has an invalid length.
[  158.647336][ T8219] netlink: 168 bytes leftover after parsing attributes in process `syz.7.864'.
[  158.796455][ T8226] netlink: 3 bytes leftover after parsing attributes in process `syz.3.867'.
[  159.757394][ T8260] netlink: 'syz.3.882': attribute type 14 has an invalid length.
[  159.786883][ T8261] netlink: 60 bytes leftover after parsing attributes in process `syz.7.883'.
[  159.796019][ T8263] netlink: 208 bytes leftover after parsing attributes in process `syz.3.884'.
[  159.825231][ T8261] netlink: 'syz.7.883': attribute type 12 has an invalid length.
[  159.842928][ T8261] netlink: 9472 bytes leftover after parsing attributes in process `syz.7.883'.
[  159.969729][ T5870] Bluetooth: hci0: command tx timeout
[  160.458072][ T5870] Bluetooth: hci2: command tx timeout
[  160.519700][ T8280] netlink: 'syz.3.891': attribute type 3 has an invalid length.
[  162.034526][ T8308] netlink: 'syz.3.903': attribute type 2 has an invalid length.
[  162.037490][ T8308] netlink: 85376 bytes leftover after parsing attributes in process `syz.3.903'.
[  162.083753][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'.
[  162.164018][ T8316] raw_sendmsg: syz.7.907 forgot to set AF_INET. Fix it!
[  162.410937][ T8325] team0: Port device team_slave_0 removed
[  162.416735][ T8325] net_ratelimit: 75 callbacks suppressed
[  162.416749][ T8325] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  162.611771][  T975] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 61 sec
[  162.673578][ T8337] netlink: 104 bytes leftover after parsing attributes in process `syz.3.917'.
[  163.859113][ T8356] __nla_validate_parse: 2 callbacks suppressed
[  163.859124][ T8356] netlink: 628 bytes leftover after parsing attributes in process `syz.3.923'.
[  164.440195][ T8377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'.
[  165.172757][ T8417] net veth1_virt_wifi : renamed from virt_wifi0
[  166.439932][ T8457] netlink: 188 bytes leftover after parsing attributes in process `syz.6.956'.
[  166.713760][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.962'.
[  168.275300][ T8495] netlink: 10 bytes leftover after parsing attributes in process `syz.3.967'.
[  169.038820][ T8549] netlink: 'syz.3.994': attribute type 3 has an invalid length.
[  169.267240][ T8559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.998'.
[  169.270818][ T8559] netlink: 43 bytes leftover after parsing attributes in process `syz.3.998'.
[  169.274124][ T8559] netlink: 'syz.3.998': attribute type 6 has an invalid length.
[  169.276778][ T8559] netlink: 'syz.3.998': attribute type 5 has an invalid length.
[  169.279124][ T8559] netlink: 43 bytes leftover after parsing attributes in process `syz.3.998'.
[  169.323057][ T8561] bpf: Bad value for 'uid'
[  169.518477][ T8567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  169.531205][ T8567] netlink: 'syz.3.1001': attribute type 2 has an invalid length.
[  170.809975][ T8591] netlink: 'syz.3.1011': attribute type 3 has an invalid length.
[  170.812566][ T8591] netlink: 'syz.3.1011': attribute type 16 has an invalid length.
[  170.816439][ T8591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1011'.
[  170.834742][ T8585] netlink: 'syz.7.1008': attribute type 13 has an invalid length.
[  170.838139][ T8585] netlink: 'syz.7.1008': attribute type 17 has an invalid length.
[  171.141886][ T8585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.168071][ T8599] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.1015'.
[  171.376694][ T8607] -1: renamed from syzkaller0
[  171.576739][ T8611] netlink: 'syz.7.1021': attribute type 2 has an invalid length.
[  171.591418][ T8611] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.1021'.
[  171.783251][ T8613] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  171.788057][   T32] wlan1: Selected IBSS BSSID d2:06:d3:3d:cd:78 based on configured SSID
[  171.866086][ T8617] netlink: 'syz.7.1023': attribute type 22 has an invalid length.
[  171.868739][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1023'.
[  172.841908][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1032'.
[  174.021633][ T5870] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  174.295232][ T8674] sit0: entered allmulticast mode
[  176.800220][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'.
[  177.221292][ T8692] netlink: 'syz.3.1053': attribute type 160 has an invalid length.
[  177.353406][ T8696] C: renamed from team_slave_0 (while UP)
[  177.438640][ T8696] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1055'.
[  177.480062][ T8697] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  177.488042][ T8698] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  179.131558][ T8735] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1070'.
[  179.313967][ T8735] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1070'.
[  179.318468][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'.
[  182.721407][ T8743] xt_socket: unknown flags 0x20
[  183.183013][ T8756] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  184.448605][   T57] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.453437][   T57] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.456797][   T57] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.460727][   T57] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.470822][   T57] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.934574][ T8786] chnl_net:caif_netlink_parms(): no params data found
[  185.099794][ T5881] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.245025][ T5881] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.384677][ T5881] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.478003][ T8786] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.482225][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.485352][ T8786] bridge_slave_0: entered allmulticast mode
[  185.489342][ T8786] bridge_slave_0: entered promiscuous mode
[  185.517178][ T5881] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.528407][ T8786] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.532799][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.538999][ T8786] bridge_slave_1: entered allmulticast mode
[  185.551846][ T8786] bridge_slave_1: entered promiscuous mode
[  185.783183][ T8786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.819041][ T8786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.844034][ T8816] netlink: 'syz.7.1100': attribute type 21 has an invalid length.
[  185.886007][ T8816] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1100'.
[  185.937794][ T8786] team0: Port device team_slave_0 added
[  185.989346][ T8786] team0: Port device team_slave_1 added
[  186.106877][ T5881] bridge_slave_1: left allmulticast mode
[  186.108848][ T5881] bridge_slave_1: left promiscuous mode
[  186.113369][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.130251][ T5881] bridge_slave_0: left allmulticast mode
[  186.132268][ T5881] bridge_slave_0: left promiscuous mode
[  186.134312][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.536497][   T57] Bluetooth: hci3: command tx timeout
[  186.631258][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.637079][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.643601][ T5881] bond0 (unregistering): Released all slaves
[  186.656562][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.659310][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.671025][ T8786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.684242][ T8786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.690157][ T8786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.711503][ T8786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.868588][ T8786] hsr_slave_0: entered promiscuous mode
[  186.899978][ T8786] hsr_slave_1: entered promiscuous mode
[  186.903025][ T8786] debugfs: 'hsr0' already exists in 'hsr'
[  186.905255][ T8786] Cannot create hsr debugfs directory
[  187.395195][ T8889] netlink: 'syz.3.1125': attribute type 1 has an invalid length.
[  187.398550][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1125'.
[  187.416264][ T5881] hsr_slave_0: left promiscuous mode
[  187.419384][ T5881] hsr_slave_1: left promiscuous mode
[  187.423334][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.426370][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.430513][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.433949][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.453887][ T5881] veth1_macvtap: left promiscuous mode
[  187.456391][ T5881] veth0_macvtap: left promiscuous mode
[  187.458996][ T5881] veth1_vlan: left promiscuous mode
[  187.462834][ T5881] veth0_vlan: left promiscuous mode
[  188.016651][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  188.521485][ T8786] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  188.547905][ T8786] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  188.567853][ T8786] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  188.622872][   T57] Bluetooth: hci3: command tx timeout
[  188.633789][ T8786] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  188.796593][ T8786] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.826967][ T8786] 8021q: adding VLAN 0 to HW filter on device team0
[  188.845836][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.848764][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.862107][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.864981][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.043285][ T8936] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1138'.
[  189.165406][ T8786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.273498][ T5697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.476051][ T5697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.577895][ T8968] netlink: 'syz.7.1146': attribute type 6 has an invalid length.
[  189.597545][ T8968] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1146'.
[  189.607917][ T5697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.684463][ T8971] netlink: 'syz.3.1147': attribute type 40 has an invalid length.
[  189.709749][ T5697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.765755][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.799711][ T8786] veth0_vlan: entered promiscuous mode
[  189.850922][ T8786] veth1_vlan: entered promiscuous mode
[  189.973272][ T8979] @: renamed from bond_slave_0 (while UP)
[  189.977961][ T5697] bridge_slave_1: left allmulticast mode
[  189.982274][ T5697] bridge_slave_1: left promiscuous mode
[  189.984690][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.993257][ T5697] bridge_slave_0: left allmulticast mode
[  189.995520][ T5697] bridge_slave_0: left promiscuous mode
[  189.997794][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.051874][ T8979] netlink: 'syz.7.1149': attribute type 21 has an invalid length.
[  190.055490][ T8979] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1149'.
[  190.315174][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.322715][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.328458][ T5697] bond0 (unregistering): Released all slaves
[  190.347399][ T8786] veth0_macvtap: entered promiscuous mode
[  190.353727][ T8979] netlink: 'syz.7.1149': attribute type 4 has an invalid length.
[  190.402287][ T8786] veth1_macvtap: entered promiscuous mode
[  190.441182][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.467441][ T8786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.518572][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.523990][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.545190][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.552514][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.700044][   T57] Bluetooth: hci3: command tx timeout
[  190.859014][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.872985][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.930173][ T5697] hsr_slave_1: left promiscuous mode
[  190.933681][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.936657][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.953666][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.957848][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.978751][ T5697] veth1_macvtap: left promiscuous mode
[  190.981756][ T5697] veth0_macvtap: left promiscuous mode
[  190.984258][ T5697] veth1_vlan: left promiscuous mode
[  190.986404][ T5697] veth0_vlan: left promiscuous mode
[  191.203183][ T9017] netlink: 'syz.3.1160': attribute type 28 has an invalid length.
[  191.206495][ T9017] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1160'.
[  191.313872][ T9021] netlink: 'syz.7.1162': attribute type 2 has an invalid length.
[  191.656560][ T5697] team0 (unregistering): Port device team_slave_1 removed
[  191.687717][ T5697] team0 (unregistering): Port device team_slave_0 removed
[  192.038051][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.044211][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.222931][ T9038] sock: sock_timestamping_bind_phc: sock not bind to device
[  192.545967][   T57] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  192.567157][ T5697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.688307][ T5697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.718383][ T9067] netlink: 'syz.3.1178': attribute type 2 has an invalid length.
[  192.728089][ T9067] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1178'.
[  192.771479][ T9070] netlink: 'syz.3.1178': attribute type 2 has an invalid length.
[  192.779552][ T9070] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1178'.
[  192.784307][   T57] Bluetooth: hci3: command tx timeout
[  192.798928][ T5697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.870463][ T5697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.046340][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1183'.
[  193.161624][ T9087] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1184'.
[  193.197988][ T5697] bridge_slave_1: left allmulticast mode
[  193.200051][ T5697] bridge_slave_1: left promiscuous mode
[  193.202396][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.210690][ T5697] bridge_slave_0: left allmulticast mode
[  193.217372][ T5697] bridge_slave_0: left promiscuous mode
[  193.229732][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.263298][ T5697] bond_slave_0: left promiscuous mode
[  193.265531][ T5697] 0: left promiscuous mode
[  193.779176][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.786676][ T5697] bond0 (unregistering): (slave 0): Releasing backup interface
[  193.792642][ T5697] bond0 (unregistering): Released all slaves
[  193.805771][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1188'.
[  194.138145][ T9129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  194.204816][ T9132] netlink: 'syz.7.1198': attribute type 10 has an invalid length.
[  194.210978][ T9132] netlink: 3531 bytes leftover after parsing attributes in process `syz.7.1198'.
[  194.310334][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.313948][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.381140][ T5697] hsr_slave_0: left promiscuous mode
[  194.384273][ T5697] hsr_slave_1: left promiscuous mode
[  194.387200][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.394012][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.398177][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.401821][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.422677][ T5697] veth1_macvtap: left promiscuous mode
[  194.425159][ T5697] veth0_macvtap: left promiscuous mode
[  194.428721][ T5697] veth1_vlan: left promiscuous mode
[  194.431755][ T5697] veth0_vlan: left promiscuous mode
[  194.850424][   T57] Bluetooth: hci3: command tx timeout
[  194.885396][ T5697] team0 (unregistering): Port device team_slave_1 removed
[  194.916729][ T5697] team0 (unregistering): Port device C removed
[  195.936804][ T9139] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.1201'.
[  196.137805][ T9168] netlink: 'syz.3.1210': attribute type 9 has an invalid length.
[  196.238442][ T9176] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1212'.
[  196.279317][ T9180] netlink: 'syz.8.1214': attribute type 1 has an invalid length.
[  196.310484][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1213'.
[  196.454287][ T9193] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1217'.
[  196.472611][ T9191] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1217'.
[  196.482059][ T9191] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1217'.
[  197.329346][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1227'.
[  197.333374][ T9239] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1227'.
[  197.428493][ T9245] netlink: 'syz.8.1229': attribute type 21 has an invalid length.
[  197.438028][ T9245] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1229'.
[  197.442146][ T9245] netlink: 'syz.8.1229': attribute type 5 has an invalid length.
[  197.445540][ T9245] netlink: 'syz.8.1229': attribute type 6 has an invalid length.
[  197.448965][ T9245] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1229'.
[  197.518349][ T9250] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1230'.
[  197.664369][ T9259] netlink: 'syz.8.1234': attribute type 21 has an invalid length.
[  201.205673][ T9316] netlink: 'syz.8.1253': attribute type 9 has an invalid length.
[  201.323503][ T9323] netlink: 'syz.8.1255': attribute type 3 has an invalid length.
[  201.486947][ T9336] netlink: 'syz.7.1259': attribute type 21 has an invalid length.
[  201.831995][ T9359] netlink: 'syz.3.1266': attribute type 19 has an invalid length.
[  201.835350][ T9359] __nla_validate_parse: 4 callbacks suppressed
[  201.835363][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1266'.
[  202.025466][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1269'.
[  202.146143][ T9382] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.1274'.
[  202.248683][ T9395] netlink: 'syz.8.1279': attribute type 1 has an invalid length.
[  202.491451][ T9405] vcan0 speed is unknown, defaulting to 1000
[  202.496661][ T9405] vcan0 speed is unknown, defaulting to 1000
[  202.501930][ T9405] vcan0 speed is unknown, defaulting to 1000
[  202.706386][ T9405] infiniband syz1: set active
[  202.709390][  T794] vcan0 speed is unknown, defaulting to 1000
[  202.712846][ T9405] infiniband syz1: added vcan0
[  202.782005][ T9405] RDS/IB: syz1: added
[  202.787326][ T9405] vcan0 speed is unknown, defaulting to 1000
[  202.947213][ T9405] vcan0 speed is unknown, defaulting to 1000
[  203.199121][ T9405] vcan0 speed is unknown, defaulting to 1000
[  203.318099][ T9415] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.1286'.
[  204.002252][ T9456] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1302'.
[  204.347154][ T9466] netlink: 'syz.8.1307': attribute type 10 has an invalid length.
[  204.437231][ T9470] netlink: 'syz.8.1307': attribute type 29 has an invalid length.
[  204.441477][ T9470] netlink: 'syz.8.1307': attribute type 3 has an invalid length.
[  204.444560][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1307'.
[  205.471438][ T9466] team0: Device ipvlan1 failed to register rx_handler
[  206.369888][ T9517] netlink: 'syz.8.1327': attribute type 4 has an invalid length.
[  206.530870][ T9530] ksmbd: Unknown IPC event: 1, ignore.
[  206.757670][ T9544] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1340'.
[  207.008212][ T9552] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1343'.
[  207.336037][ T9561] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1348'.
[  207.338919][ T9561] bond_slave_0: entered promiscuous mode
[  207.340835][ T9561] bond_slave_1: entered promiscuous mode
[  207.442704][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1352'.
[  207.579231][ T9583] erspan0 speed is unknown, defaulting to 1000
[  207.606800][ T9583] erspan0 speed is unknown, defaulting to 1000
[  207.617723][ T9583] erspan0 speed is unknown, defaulting to 1000
[  207.708872][ T9592] bridge0: port 3(veth0_to_team) entered blocking state
[  207.726352][ T9592] bridge0: port 3(veth0_to_team) entered disabled state
[  207.730333][ T9592] veth0_to_team: entered allmulticast mode
[  207.735418][ T9592] veth0_to_team: entered promiscuous mode
[  207.738738][ T9592] bridge0: port 3(veth0_to_team) entered blocking state
[  207.742099][ T9592] bridge0: port 3(veth0_to_team) entered forwarding state
[  207.906182][ T9597] netlink: 'syz.3.1364': attribute type 13 has an invalid length.
[  208.106697][ T9597] bridge0: port 3(veth0_to_team) entered disabled state
[  208.109167][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.262813][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.276616][ T9597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.405260][ T9581] delete_channel: no stack
[  208.478461][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.487798][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.509956][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.514195][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  208.533272][ T9583] infiniband syz2: set active
[  208.535389][  T794] erspan0 speed is unknown, defaulting to 1000
[  208.537567][ T9583] infiniband syz2: added erspan0
[  208.573816][ T9583] RDS/IB: syz2: added
[  208.576867][ T9583] erspan0 speed is unknown, defaulting to 1000
[  208.855546][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1373'.
[  208.916597][ T9583] erspan0 speed is unknown, defaulting to 1000
[  209.172288][ T9656] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1380'.
[  209.217353][ T9583] erspan0 speed is unknown, defaulting to 1000
[  209.587906][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1384'.
[  210.270080][ T9701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1389'.
[  210.273357][ T9701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1389'.
[  210.612077][ T9716] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  210.632654][ T9721] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  210.962549][ T9741] : renamed from vlan0 (while UP)
[  211.283953][ T9753] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.1413'.
[  212.310445][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1431'.
[  212.329950][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1431'.
[  212.333863][ T9793] netlink: 33 bytes leftover after parsing attributes in process `syz.7.1431'.
[  212.351063][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1431'.
[  212.354713][ T9793] netlink: 33 bytes leftover after parsing attributes in process `syz.7.1431'.
[  212.448401][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1437'.
[  213.783473][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'.
[  214.348404][ T9858] netlink: 'syz.8.1460': attribute type 13 has an invalid length.
[  214.355699][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1459'.
[  214.359375][ T9859] netlink: 2408 bytes leftover after parsing attributes in process `syz.7.1459'.
[  214.371310][ T9859] netlink: 6052 bytes leftover after parsing attributes in process `syz.7.1459'.
[  214.792229][ T9874] vcan0 speed is unknown, defaulting to 1000
[  215.132310][ T9874] erspan0 speed is unknown, defaulting to 1000
[  215.909911][ T9896] syz.7.1468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  215.915116][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.7.1468 Not tainted syzkaller #0 PREEMPT(full) 
[  215.915129][ T9896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.915135][ T9896] Call Trace:
[  215.915141][ T9896]  <TASK>
[  215.915153][ T9896]  dump_stack_lvl+0x189/0x250
[  215.915172][ T9896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.915183][ T9896]  ? __pfx__printk+0x10/0x10
[  215.915197][ T9896]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  215.915209][ T9896]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  215.915221][ T9896]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  215.915234][ T9896]  warn_alloc+0x214/0x310
[  215.915245][ T9896]  ? stack_depot_save_flags+0x41b/0x860
[  215.915260][ T9896]  ? __pfx_warn_alloc+0x10/0x10
[  215.915273][ T9896]  ? kasan_save_track+0x3e/0x80
[  215.915281][ T9896]  ? __kasan_kmalloc+0x93/0xb0
[  215.915292][ T9896]  ? xsk_setsockopt+0x57b/0x8d0
[  215.915303][ T9896]  ? do_sock_setsockopt+0x17c/0x1b0
[  215.915312][ T9896]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  215.915319][ T9896]  ? do_syscall_64+0xfa/0xfa0
[  215.915328][ T9896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.915347][ T9896]  __vmalloc_node_range_noprof+0x125/0x12d0
[  215.915391][ T9896]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  215.915405][ T9896]  ? __kasan_kmalloc+0x93/0xb0
[  215.915421][ T9896]  vmalloc_user_noprof+0xad/0xf0
[  215.915431][ T9896]  ? xskq_create+0xbf/0x170
[  215.915441][ T9896]  xskq_create+0xbf/0x170
[  215.915453][ T9896]  xsk_init_queue+0xb0/0x110
[  215.915470][ T9896]  xsk_setsockopt+0x57b/0x8d0
[  215.915486][ T9896]  ? __pfx_xsk_setsockopt+0x10/0x10
[  215.915502][ T9896]  ? __pfx_aa_sk_perm+0x10/0x10
[  215.915515][ T9896]  ? aa_sock_opt_perm+0xff/0x1b0
[  215.915566][ T9896]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  215.915584][ T9896]  ? __pfx_xsk_setsockopt+0x10/0x10
[  215.915605][ T9896]  do_sock_setsockopt+0x17c/0x1b0
[  215.915634][ T9896]  __x64_sys_setsockopt+0x13f/0x1b0
[  215.915661][ T9896]  do_syscall_64+0xfa/0xfa0
[  215.915674][ T9896]  ? lockdep_hardirqs_on+0x9c/0x150
[  215.915689][ T9896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.915709][ T9896]  ? exc_page_fault+0xab/0x100
[  215.915730][ T9896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.915746][ T9896] RIP: 0033:0x7fae14d8ec29
[  215.915761][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.915778][ T9896] RSP: 002b:00007fae15b6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  215.915788][ T9896] RAX: ffffffffffffffda RBX: 00007fae14fd6090 RCX: 00007fae14d8ec29
[  215.915812][ T9896] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  215.915816][ T9896] RBP: 00007fae14e11e41 R08: 0000000000000004 R09: 0000000000000000
[  215.915821][ T9896] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  215.915826][ T9896] R13: 00007fae14fd6128 R14: 00007fae14fd6090 R15: 00007ffc7e7d12f8
[  215.915856][ T9896]  </TASK>
[  215.915882][ T9896] Mem-Info:
[  216.102481][ T9896] active_anon:8747 inactive_anon:0 isolated_anon:0
[  216.102481][ T9896]  active_file:11427 inactive_file:38318 isolated_file:0
[  216.102481][ T9896]  unevictable:1768 dirty:273 writeback:0
[  216.102481][ T9896]  slab_reclaimable:10545 slab_unreclaimable:101577
[  216.102481][ T9896]  mapped:18096 shmem:2438 pagetables:1844
[  216.102481][ T9896]  sec_pagetables:0 bounce:0
[  216.102481][ T9896]  kernel_misc_reclaimable:0
[  216.102481][ T9896]  free:228266 free_pcp:22427 free_cma:0
[  216.143863][ T9896] Node 0 active_anon:19884kB inactive_anon:0kB active_file:22272kB inactive_file:26724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29128kB dirty:116kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8852kB pagetables:3576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  216.145233][ T9901] netlink: 'syz.3.1474': attribute type 21 has an invalid length.
[  216.156822][ T9896] Node 1 active_anon:15172kB inactive_anon:0kB active_file:23436kB inactive_file:126548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43256kB dirty:976kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4304kB pagetables:3800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  216.156897][ T9896] Node 0 DMA free:15360kB boost:0kB min:644kB low:804kB high:964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  216.156948][ T9896] lowmem_reserve[]: 0 804 804 804 804
[  216.156985][ T9896] Node 0 DMA32 free:226172kB boost:0kB min:33416kB low:41768kB high:50120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19884kB inactive_anon:0kB active_file:22272kB inactive_file:26724kB unevictable:3536kB writepending:116kB zspages:0kB present:1556484kB managed:823652kB mlocked:0kB bounce:0kB free_pcp:38300kB local_pcp:20820kB free_cma:0kB
[  216.157038][ T9896] lowmem_reserve[]: 0 0 0 0 0
[  216.157072][ T9896] Node 1 DMA32 free:378012kB boost:0kB min:19272kB low:24088kB high:28904kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8988kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18028kB local_pcp:9948kB free_cma:0kB
[  216.157116][ T9896] lowmem_reserve[]: 0 0 854 854 854
[  216.157150][ T9896] Node 1 Normal free:293316kB boost:0kB min:36772kB low:45964kB high:55156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15172kB inactive_anon:0kB active_file:14448kB inactive_file:126548kB unevictable:3536kB writepending:976kB zspages:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33764kB local_pcp:15596kB free_cma:0kB
[  216.157196][ T9896] lowmem_reserve[]: 0 0 0 0 0
[  216.157228][ T9896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  216.157362][ T9896] Node 0 DMA32: 399*4kB (UM) 108*8kB (UM) 220*16kB (U) 359*32kB (UME) 309*64kB (UME) 162*128kB (UM) 91*256kB (UM) 73*512kB (UM) 57*1024kB (UME) 4*2048kB (UME) 10*4096kB (M) = 226172kB
[  216.157540][ T9896] Node 1 DMA32: 113*4kB (UM) 105*8kB (UM) 117*16kB (UM) 190*32kB (UM) 158*64kB (UM) 126*128kB (UM) 80*256kB (UM) 61*512kB (UM) 44*1024kB (UM) 4*2048kB (UM) 58*4096kB (UM) = 378012kB
[  216.157694][ T9896] Node 1 Normal: 953*4kB (ME) 320*8kB (UM) 309*16kB (ME) 367*32kB (UME) 78*64kB (UME) 34*128kB (UM) 223*256kB (UM) 160*512kB (U) 119*1024kB (U) 0*2048kB 0*4096kB = 293268kB
[  216.157964][ T9896] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.157979][ T9896] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  216.157991][ T9896] 52183 total pagecache pages
[  216.157998][ T9896] 0 pages in swap cache
[  216.158005][ T9896] Free swap  = 124996kB
[  216.158011][ T9896] Total swap = 124996kB
[  216.158018][ T9896] 786301 pages RAM
[  216.158025][ T9896] 0 pages HighMem/MovableOnly
[  216.158031][ T9896] 243156 pages reserved
[  216.158038][ T9896] 0 pages cma reserved
[  216.849839][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  217.470050][ T9936] : port 1() entered blocking state
[  217.473154][ T9936] : port 1() entered disabled state
[  217.475632][ T9936] : entered allmulticast mode
[  217.477665][ T9936] veth0_vlan: entered allmulticast mode
[  217.482871][ T9936] : entered promiscuous mode
[  217.487084][ T9936] : port 1() entered blocking state
[  217.489648][ T9936] : port 1() entered forwarding state
[  217.576001][ T9952] netlink: 'syz.7.1494': attribute type 10 has an invalid length.
[  217.579115][ T9952] __nla_validate_parse: 2 callbacks suppressed
[  217.579126][ T9952] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1494'.
[  217.590615][ T9952] batman_adv: batadv0: Adding interface: 
[  217.592946][ T9952] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.603697][ T9952] batman_adv: batadv0: Interface activated: 
[  217.850689][ T9961] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.1498'.
[  218.583012][ T9973] netlink: 'syz.3.1504': attribute type 1 has an invalid length.
[  218.702772][ T9984] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1507'.
[  218.716592][ T9979] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1507'.
[  218.729988][ T9984] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1507'.
[  218.937055][ T9994] syzkaller0: entered promiscuous mode
[  218.939396][ T9994] syzkaller0: entered allmulticast mode
[  219.215627][T10003] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1518'.
[  220.606914][T10019] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1523'.
[  220.615563][T10019] netlink: zone id is out of range
[  220.617763][T10019] netlink: zone id is out of range
[  220.622506][T10019] netlink: zone id is out of range
[  220.624526][T10019] netlink: zone id is out of range
[  220.626494][T10019] netlink: zone id is out of range
[  220.628636][T10019] netlink: zone id is out of range
[  220.638947][T10019] netlink: zone id is out of range
[  220.641214][T10019] netlink: zone id is out of range
[  220.643206][T10019] netlink: zone id is out of range
[  220.645183][T10019] netlink: zone id is out of range
[  220.909070][T10031] netlink: 'syz.3.1528': attribute type 27 has an invalid length.
[  221.361258][T10057] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1541'.
[  221.363917][T10057] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1541'.
[  221.620571][T10079] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1551'.
[  221.722366][T10086] xt_time: unknown flags 0xf4
[  221.820866][T10090] netlink: 'syz.3.1556': attribute type 3 has an invalid length.
[  224.525049][T10114] netlink: 'syz.3.1566': attribute type 21 has an invalid length.
[  224.527538][T10114] netlink: 'syz.3.1566': attribute type 6 has an invalid length.
[  224.531957][T10114] __nla_validate_parse: 1 callbacks suppressed
[  224.531965][T10114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1566'.
[  224.629189][T10125] netlink: 'syz.8.1571': attribute type 1 has an invalid length.
[  224.632134][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1571'.
[  224.673420][T10125] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  224.730662][T10125] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  224.741638][T10130] netlink: 'syz.3.1573': attribute type 8 has an invalid length.
[  224.744910][T10130] netlink: 'syz.3.1573': attribute type 6 has an invalid length.
[  224.747942][T10130] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1573'.
[  225.233070][T10143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1577'.
[  225.912365][T10169] xt_HMARK: proto mask must be zero with L3 mode
[  225.922951][T10169] netlink: 'syz.7.1585': attribute type 9 has an invalid length.
[  225.935169][T10169] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1585'.
[  226.105881][T10181] netlink: 'syz.7.1590': attribute type 2 has an invalid length.
[  226.108585][T10181] netlink: 'syz.7.1590': attribute type 1 has an invalid length.
[  226.153743][T10180] netlink: 'syz.8.1589': attribute type 1 has an invalid length.
[  226.365972][T10200] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  226.379929][T10195] netlink: 'syz.7.1597': attribute type 13 has an invalid length.
[  226.382805][T10195] netlink: 'syz.7.1597': attribute type 17 has an invalid length.
[  226.390821][T10195] sit0: left allmulticast mode
[  226.611530][T10195] net_ratelimit: 76 callbacks suppressed
[  226.611745][T10195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.771297][T10212] netlink: 'syz.7.1604': attribute type 13 has an invalid length.
[  226.774590][T10212] netlink: 'syz.7.1604': attribute type 17 has an invalid length.
[  226.859785][T10212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.184289][T10223] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1608'.
[  227.242662][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1610'.
[  227.247024][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1610'.
[  227.255425][T10225] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1610'.
[  227.272404][T10229] netlink: 'syz.7.1611': attribute type 1 has an invalid length.
[  227.275430][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1611'.
[  227.690571][T10252] netlink: 'syz.3.1622': attribute type 21 has an invalid length.
[  227.772850][T10260] bond0: entered promiscuous mode
[  227.775050][T10260] bond_slave_0: entered promiscuous mode
[  227.783532][T10260] bond_slave_1: entered promiscuous mode
[  227.802521][T10260] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  227.826534][T10260] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.850174][T10260] bridge0: port 4(bond0) entered blocking state
[  227.861112][T10260] bridge0: port 4(bond0) entered disabled state
[  227.874828][T10260] bond0: entered allmulticast mode
[  227.881058][T10260] bond_slave_0: entered allmulticast mode
[  227.893183][T10260] bond_slave_1: entered allmulticast mode
[  227.900232][T10260] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  228.844579][T10292] vcan0 speed is unknown, defaulting to 1000
[  229.181153][T10292] erspan0 speed is unknown, defaulting to 1000
[  229.634893][   T57] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7
[  229.854194][T10318] __nla_validate_parse: 5 callbacks suppressed
[  229.854212][T10318] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1651'.
[  229.868029][T10318] mac80211_hwsim hwsim18 : renamed from wlan1 (while UP)
[  229.952555][T10318] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  230.215966][T10339] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1659'.
[  230.724442][T10353] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1664'.
[  231.306972][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1672'.
[  231.523352][T10380] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1676'.
[  231.560500][T10380] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1676'.
[  231.682949][T10384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.686988][T10384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.722207][T10391] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1680'.
[  231.726324][T10391] nbd: must specify a size in bytes for the device
[  232.030492][T10407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1687'.
[  232.034174][T10407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1687'.
[  232.038437][T10407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1687'.
[  233.276308][T10432] validate_nla: 5 callbacks suppressed
[  233.276321][T10432] netlink: 'syz.8.1697': attribute type 2 has an invalid length.
[  233.281850][T10432] netlink: 'syz.8.1697': attribute type 1 has an invalid length.
[  233.343654][T10436] netlink: 'syz.8.1699': attribute type 10 has an invalid length.
[  233.378878][T10436] hsr_slave_0: left promiscuous mode
[  233.384246][T10436] hsr_slave_1: left promiscuous mode
[  234.315487][T10459] netlink: 'syz.7.1707': attribute type 10 has an invalid length.
[  235.958317][T10518] netlink: 'syz.8.1733': attribute type 10 has an invalid length.
[  235.968363][T10518] bridge0: port 3(macsec0) entered blocking state
[  235.986808][T10518] bridge0: port 3(macsec0) entered disabled state
[  235.993332][T10518] macsec0: entered allmulticast mode
[  235.995902][T10518] veth1_macvtap: entered allmulticast mode
[  236.027243][T10518] macsec0: entered promiscuous mode
[  236.035720][T10518] bridge0: port 3(macsec0) entered blocking state
[  236.040103][T10518] bridge0: port 3(macsec0) entered forwarding state
[  237.845487][T10537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.000827][T10555] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  239.815240][T10576] __nla_validate_parse: 3 callbacks suppressed
[  239.815251][T10576] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1759'.
[  240.351790][T10583] vcan0 speed is unknown, defaulting to 1000
[  240.694307][T10583] erspan0 speed is unknown, defaulting to 1000
[  240.736784][T10596] netlink: 'syz.7.1765': attribute type 10 has an invalid length.
[  240.739412][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1765'.
[  240.805762][T10600] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1767'.
[  240.826937][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1767'.
[  240.875178][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.878817][T10600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.893829][T10600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.896502][T10600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.917018][T10600] batman_adv: batadv0: Interface deactivated: 
[  240.919525][T10600] batman_adv: batadv0: Removing interface: 
[  241.527441][T10615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1772'.
[  241.530747][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'.
[  242.168683][T10628] netlink: 40227 bytes leftover after parsing attributes in process `syz.8.1776'.
[  242.453370][T10640] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.1781'.
[  242.456901][T10640] netlink: 104088 bytes leftover after parsing attributes in process `syz.7.1781'.
[  242.461636][T10640] netlink: 24032 bytes leftover after parsing attributes in process `syz.7.1781'.
[  243.092236][T10678] netlink: 'syz.7.1799': attribute type 46 has an invalid length.
[  243.249929][   T57] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  244.987648][ T5697] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.048349][ T5697] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.114501][ T5697] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.174579][ T5697] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.247856][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.251397][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.254397][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.257187][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.259823][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.324278][ T5697] macsec0: left allmulticast mode
[  245.326321][ T5697] veth1_macvtap: left allmulticast mode
[  245.328473][ T5697] macsec0: left promiscuous mode
[  245.331465][ T5697] bridge0: port 3(macsec0) entered disabled state
[  245.336414][ T5697] bridge_slave_1: left allmulticast mode
[  245.338730][ T5697] bridge_slave_1: left promiscuous mode
[  245.342050][ T5697] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.347525][ T5697] bridge_slave_0: left allmulticast mode
[  245.349758][ T5697] bridge_slave_0: left promiscuous mode
[  245.351884][ T5697] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.360280][ T5697] : left allmulticast mode
[  245.362208][ T5697] veth0_vlan: left allmulticast mode
[  245.364255][ T5697] : left promiscuous mode
[  245.366414][ T5697] : port 1() entered disabled state
[  245.379482][ T5697] bond_slave_0: left promiscuous mode
[  245.385197][ T5697] bond_slave_1: left promiscuous mode
[  246.575917][ T5697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.587457][ T5697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.597193][ T5697] bond0 (unregistering): Released all slaves
[  246.631529][T10726] vcan0 speed is unknown, defaulting to 1000
[  246.631724][ T5933] erspan0 speed is unknown, defaulting to 1000
[  246.635867][ T5933] syz2: Port: 1 Link DOWN
[  246.879270][T10750] __nla_validate_parse: 3 callbacks suppressed
[  246.879288][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1824'.
[  247.048457][T10726] erspan0 speed is unknown, defaulting to 1000
[  247.330364][ T5870] Bluetooth: hci0: command tx timeout
[  248.171059][T10726] chnl_net:caif_netlink_parms(): no params data found
[  248.500167][T10726] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.509633][T10726] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.513839][T10726] bridge_slave_0: entered allmulticast mode
[  248.520268][T10726] bridge_slave_0: entered promiscuous mode
[  248.527577][T10726] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.535116][T10726] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.539937][T10726] bridge_slave_1: entered allmulticast mode
[  248.561789][T10726] bridge_slave_1: entered promiscuous mode
[  248.585882][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1831'.
[  248.588823][T10788] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  248.700431][T10726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.758778][T10726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.916475][T10726] team0: Port device team_slave_0 added
[  248.947171][T10726] team0: Port device team_slave_1 added
[  249.045544][T10726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.059082][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.088496][T10726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.108796][T10726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.123931][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.141865][T10793] netlink: 'syz.3.1832': attribute type 10 has an invalid length.
[  249.147259][T10726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.165076][T10793] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  249.270876][T10726] hsr_slave_0: entered promiscuous mode
[  249.274016][T10726] hsr_slave_1: entered promiscuous mode
[  249.413027][   T57] Bluetooth: hci2: command 0x0406 tx timeout
[  249.415356][   T57] Bluetooth: hci0: command tx timeout
[  249.623202][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'.
[  250.407401][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.408294][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1842'.
[  250.411097][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.432050][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1842'.
[  250.432532][ T5697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.440239][ T5697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.488816][ T5697] veth1_macvtap: left promiscuous mode
[  250.491648][ T5697] veth0_macvtap: left promiscuous mode
[  250.495128][ T5697] veth1_vlan: left promiscuous mode
[  250.496971][ T5697] veth0_vlan: left promiscuous mode
[  250.953288][ T5697] team0 (unregistering): Port device team_slave_1 removed
[  250.988824][ T5697] team0 (unregistering): Port device team_slave_0 removed
[  251.130831][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'.
[  251.354233][ T5904] infiniband syz0: ib_query_port failed (-19)
[  251.357789][ T5933] vcan0 speed is unknown, defaulting to 1000
[  251.360586][T10841] netlink: 'syz.7.1845': attribute type 29 has an invalid length.
[  251.371216][ T5933] syz1: Port: 1 Link DOWN
[  251.465207][T10842] netlink: 'syz.7.1845': attribute type 29 has an invalid length.
[  251.472140][T10843] netlink: 'syz.7.1845': attribute type 29 has an invalid length.
[  251.489924][ T5870] Bluetooth: hci0: command tx timeout
[  251.527944][T10844] netlink: 'syz.7.1845': attribute type 29 has an invalid length.
[  251.863011][T10726] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  251.882908][T10726] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  251.925783][T10726] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  251.985627][T10726] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  252.014767][T10872] can: request_module (can-proto-5) failed.
[  252.069828][T10872] can: request_module (can-proto-3) failed.
[  252.202652][T10726] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.248417][T10726] 8021q: adding VLAN 0 to HW filter on device team0
[  252.275828][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.278811][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.322904][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.325654][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.334789][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1859'.
[  252.372210][T10898] netlink: 'syz.7.1860': attribute type 10 has an invalid length.
[  252.542987][T10726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.555490][ T5697] ------------[ cut here ]------------
[  252.557850][ T5697] WARNING: net/xfrm/xfrm_state.c:3306 at xfrm_state_fini+0x26d/0x2f0, CPU#1: kworker/u8:2/5697
[  252.562563][ T5697] Modules linked in:
[  252.564339][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  252.568910][ T5697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.573855][ T5697] Workqueue: netns cleanup_net
[  252.575828][ T5697] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  252.578091][ T5697] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b a7 f7 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 9a d7 f7 e8 b4 65 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 65 92 f7 90 0f 0b 90 e9 60 fe ff ff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  252.587718][ T5697] RSP: 0018:ffffc90002e57878 EFLAGS: 00010293
[  252.590493][ T5697] RAX: ffffffff8a2df07c RBX: ffff888108228000 RCX: ffff8881073b5700
[  252.593518][ T5697] RDX: 0000000000000000 RSI: ffffffff8dd8c926 RDI: ffff8881073b5700
[  252.596670][ T5697] RBP: ffffc90002e57990 R08: ffffffff8fc34377 R09: 1ffffffff1f8686e
[  252.599975][ T5697] R10: dffffc0000000000 R11: fffffbfff1f8686f R12: ffffffff8f837380
[  252.603557][ T5697] R13: 1ffff920005caf3c R14: ffff8881082294c0 R15: dffffc0000000000
[  252.606999][ T5697] FS:  0000000000000000(0000) GS:ffff8881a3a03000(0000) knlGS:0000000000000000
[  252.610681][ T5697] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  252.613305][ T5697] CR2: 0000560193377950 CR3: 000000011035e000 CR4: 00000000000006f0
[  252.616410][ T5697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  252.619782][ T5697] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  252.622957][ T5697] Call Trace:
[  252.624344][ T5697]  <TASK>
[  252.625596][ T5697]  xfrm_net_exit+0x2d/0x70
[  252.627440][ T5697]  ops_undo_list+0x49a/0x990
[  252.629321][ T5697]  ? __pfx_ops_undo_list+0x10/0x10
[  252.631923][ T5697]  ? do_raw_spin_unlock+0x4d/0x240
[  252.632620][T10912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1864'.
[  252.634039][ T5697]  cleanup_net+0x4d8/0x820
[  252.638719][ T5697]  ? __pfx_cleanup_net+0x10/0x10
[  252.641035][ T5697]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.643162][ T5697]  ? process_scheduled_works+0x9ef/0x17b0
[  252.645496][ T5697]  ? process_scheduled_works+0x9ef/0x17b0
[  252.648173][ T5697]  process_scheduled_works+0xae1/0x17b0
[  252.650954][ T5697]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.653357][ T5697]  worker_thread+0x8a0/0xda0
[  252.656583][ T5697]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.659373][ T5697]  ? __kthread_parkme+0x7b/0x200
[  252.661444][ T5697]  kthread+0x711/0x8a0
[  252.663080][ T5697]  ? __pfx_worker_thread+0x10/0x10
[  252.665144][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.667049][ T5697]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.669166][ T5697]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.671425][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.673334][ T5697]  ret_from_fork+0x4bc/0x870
[  252.675172][ T5697]  ? __pfx_ret_from_fork+0x10/0x10
[  252.677270][ T5697]  ? __switch_to_asm+0x39/0x70
[  252.679279][ T5697]  ? __switch_to_asm+0x33/0x70
[  252.681308][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.683270][ T5697]  ret_from_fork_asm+0x1a/0x30
[  252.685110][ T5697]  </TASK>
[  252.686341][ T5697] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  252.689239][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  252.693012][ T5697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.696946][ T5697] Workqueue: netns cleanup_net
[  252.698864][ T5697] Call Trace:
[  252.700195][ T5697]  <TASK>
[  252.701391][ T5697]  dump_stack_lvl+0x99/0x250
[  252.703197][ T5697]  ? __asan_memcpy+0x40/0x70
[  252.705011][ T5697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.706806][ T5697]  ? __pfx__printk+0x10/0x10
[  252.708199][ T5697]  vpanic+0x237/0x6d0
[  252.709502][ T5697]  ? __pfx_vpanic+0x10/0x10
[  252.711037][ T5697]  ? is_bpf_text_address+0x26/0x2b0
[  252.712836][ T5697]  panic+0xb9/0xc0
[  252.714225][ T5697]  ? __pfx_panic+0x10/0x10
[  252.715816][ T5697]  __warn+0x334/0x4c0
[  252.717116][ T5697]  ? xfrm_state_fini+0x26d/0x2f0
[  252.718675][ T5697]  ? xfrm_state_fini+0x26d/0x2f0
[  252.720289][ T5697]  report_bug+0x2be/0x4f0
[  252.721805][ T5697]  ? xfrm_state_fini+0x26d/0x2f0
[  252.723441][ T5697]  ? xfrm_state_fini+0x26d/0x2f0
[  252.725482][ T5697]  ? xfrm_state_fini+0x26f/0x2f0
[  252.727484][ T5697]  handle_bug+0x84/0x160
[  252.729025][ T5697]  exc_invalid_op+0x1a/0x50
[  252.730660][ T5697]  asm_exc_invalid_op+0x1a/0x20
[  252.732270][ T5697] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  252.734094][ T5697] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b a7 f7 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 9a d7 f7 e8 b4 65 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 65 92 f7 90 0f 0b 90 e9 60 fe ff ff
[  252.741575][ T5697] RSP: 0018:ffffc90002e57878 EFLAGS: 00010293
[  252.744037][ T5697] RAX: ffffffff8a2df07c RBX: ffff888108228000 RCX: ffff8881073b5700
[  252.746902][ T5697] RDX: 0000000000000000 RSI: ffffffff8dd8c926 RDI: ffff8881073b5700
[  252.749269][ T5697] RBP: ffffc90002e57990 R08: ffffffff8fc34377 R09: 1ffffffff1f8686e
[  252.751897][ T5697] R10: dffffc0000000000 R11: fffffbfff1f8686f R12: ffffffff8f837380
[  252.754429][ T5697] R13: 1ffff920005caf3c R14: ffff8881082294c0 R15: dffffc0000000000
[  252.756942][ T5697]  ? xfrm_state_fini+0x26c/0x2f0
[  252.758446][ T5697]  ? xfrm_state_fini+0x26c/0x2f0
[  252.760063][ T5697]  xfrm_net_exit+0x2d/0x70
[  252.761619][ T5697]  ops_undo_list+0x49a/0x990
[  252.763343][ T5697]  ? __pfx_ops_undo_list+0x10/0x10
[  252.764915][ T5697]  ? do_raw_spin_unlock+0x4d/0x240
[  252.766772][ T5697]  cleanup_net+0x4d8/0x820
[  252.768314][ T5697]  ? __pfx_cleanup_net+0x10/0x10
[  252.769891][ T5697]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.771640][ T5697]  ? process_scheduled_works+0x9ef/0x17b0
[  252.773609][ T5697]  ? process_scheduled_works+0x9ef/0x17b0
[  252.775658][ T5697]  process_scheduled_works+0xae1/0x17b0
[  252.777695][ T5697]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.780060][ T5697]  worker_thread+0x8a0/0xda0
[  252.781912][ T5697]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.784430][ T5697]  ? __kthread_parkme+0x7b/0x200
[  252.786422][ T5697]  kthread+0x711/0x8a0
[  252.787994][ T5697]  ? __pfx_worker_thread+0x10/0x10
[  252.789931][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.791754][ T5697]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.793821][ T5697]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.795906][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.797795][ T5697]  ret_from_fork+0x4bc/0x870
[  252.799672][ T5697]  ? __pfx_ret_from_fork+0x10/0x10
[  252.801657][ T5697]  ? __switch_to_asm+0x39/0x70
[  252.803508][ T5697]  ? __switch_to_asm+0x33/0x70
[  252.805631][ T5697]  ? __pfx_kthread+0x10/0x10
[  252.807504][ T5697]  ret_from_fork_asm+0x1a/0x30
[  252.809429][ T5697]  </TASK>
[  252.811377][ T5697] Kernel Offset: disabled
[  252.813077][ T5697] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:22:53  Registers:
info registers vcpu 0

CPU#0
RAX=dffffc0000000000 RBX=1ffff1100794d768 RCX=0000000000000000 RDX=ffff888106b79d00
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004c57890 RSP=ffffc90004c575d8
R8 =ffffea000095e087 R9 =1ffffd400012bc10 R10=dffffc0000000000 R11=fffff9400012bc11
R12=ffffea000095e098 R13=1ffffd400012bc13 R14=ffff88803ca6bb40 R15=0000000000000000
RIP=ffffffff81c05630 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555782c4500 ffffffff 00c00000
GS =0000 ffff8880b8403000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33621ff8 CR3=0000000033f22000 CR4=000006f0
DR0=0000000000000000 DR1=0100000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000206145e 0000003d48f8a10b
XMM02=9412000080020000 0010000a000e0000 XMM03=00000206145e0000 003d48f8a10b9fcc
XMM04=9500000050000000 8500000072000000 XMM05=8500000000000003 b700000000000002
XMM06=b7fffffff8000001 07000000000000a1 XMM07=bf00000000fff81a 7b20202000000000
XMM08=0000000000000000 00007fae14e12f0f XMM09=0000000000000000 00007fae14e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002e57010
R8 =ffff888106830237 R9 =1ffff11020d06046 R10=dffffc0000000000 R11=ffffffff8555d320
R12=dffffc0000000000 R13=ffffffff99d12905 R14=ffffffff9a008500 R15=0000000000000000
RIP=ffffffff8555d39c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a03000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560193377950 CR3=000000011035e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffffffffffff ffffffffffff0000 XMM01=0000010101010101 010101010100ffff
XMM02=0000560193388dc8 665f65676e006d72 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
