last executing test programs:

8m38.563968116s ago: executing program 32 (id=456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20)

7m52.185283661s ago: executing program 33 (id=979):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0)

7m23.974013776s ago: executing program 34 (id=1296):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800)

7m2.24093228s ago: executing program 35 (id=1613):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

5m48.397405996s ago: executing program 36 (id=2585):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

5m36.932691325s ago: executing program 37 (id=2931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10004}, 0x0)

5m31.313314103s ago: executing program 38 (id=3008):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

5m17.965941634s ago: executing program 7 (id=3294):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000ff0009000069110a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000003700"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x1, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000440)="d5", 0x1}], 0x1}, 0x800)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc)

5m17.112545616s ago: executing program 7 (id=3308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), 0x0}, 0x20)

5m17.051974568s ago: executing program 7 (id=3310):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

5m16.992467116s ago: executing program 7 (id=3312):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

5m16.992165243s ago: executing program 7 (id=3313):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00038042e76623000000000000", 0x2e}], 0x1}, 0x0)

5m16.672516964s ago: executing program 7 (id=3321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000000201010200000000000000000d0000060c000f800800034000005de63400198008000100000200000800020004080000080002000000000008000100a50c000008000100ec010000080001000208000008000c400000000428001640000000080000000800000007ffff21a80000007f00000003fffffffc000000020000007f1c00068008000100000002080002000000000008000100ffffffff08001a400000000108000c40000000010800034000002400140018800800014000000008080002400000000900"], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x8, 0x0, 0x2a)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x18, 0x140e, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r2 = socket(0x1d, 0x2, 0x6)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x94, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x84, 0x4}, 0x14128, 0x8, 0x0, 0x6, 0x80103fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)

5m16.595841136s ago: executing program 39 (id=3321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000000201010200000000000000000d0000060c000f800800034000005de63400198008000100000200000800020004080000080002000000000008000100a50c000008000100ec010000080001000208000008000c400000000428001640000000080000000800000007ffff21a80000007f00000003fffffffc000000020000007f1c00068008000100000002080002000000000008000100ffffffff08001a400000000108000c40000000010800034000002400140018800800014000000008080002400000000900"], 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x8, 0x0, 0x2a)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x18, 0x140e, 0x200, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r2 = socket(0x1d, 0x2, 0x6)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x94, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x84, 0x4}, 0x14128, 0x8, 0x0, 0x6, 0x80103fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)

4m48.548832519s ago: executing program 0 (id=3712):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00', 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xf3, @mcast2, 0x100}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0)

4m48.478573689s ago: executing program 0 (id=3715):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000060000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

4m48.220338931s ago: executing program 0 (id=3720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xfffffffa}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}]}}]}, 0x50}}, 0x4000010)

4m48.167698414s ago: executing program 0 (id=3722):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x7, 0x5}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20)

4m48.088994707s ago: executing program 0 (id=3724):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x206000, 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x9)

4m48.088752757s ago: executing program 0 (id=3725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\v@+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

4m45.910269566s ago: executing program 8 (id=3771):
r0 = socket$kcm(0x2, 0x5, 0x84)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f375"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b4002b7d5ecc56ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94)
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c)

4m45.849476095s ago: executing program 8 (id=3772):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1ff}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7ffbffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x4000, 0x5, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x75}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94)

4m45.747894883s ago: executing program 8 (id=3775):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

4m45.677633713s ago: executing program 8 (id=3777):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

4m45.549798799s ago: executing program 8 (id=3780):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000840)=r3, 0x5c)

4m45.217684187s ago: executing program 8 (id=3786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000000240)={0x20, 0x38, 0x1, 0x70bd2b, 0x25dfdbff, {0xc}, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)

4m45.013516859s ago: executing program 40 (id=3786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000000240)={0x20, 0x38, 0x1, 0x70bd2b, 0x25dfdbff, {0xc}, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)

4m41.290434554s ago: executing program 9 (id=3826):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r0, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, &(0x7f0000000240)="c3e88200d317697e00", 0x0, 0x2, 0x0, 0x4}, 0x50)

4m41.217295721s ago: executing program 9 (id=3828):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e000600000000000000fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3b090000009dd33e438c", 0xd8}], 0x1}, 0x0)

4m41.089581063s ago: executing program 9 (id=3830):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

4m40.89816741s ago: executing program 9 (id=3832):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dba200fe40000000711015000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

4m40.896945353s ago: executing program 9 (id=3834):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xf696}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x40}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x8010)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x104000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x0, 0x94565, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x125045, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x898, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x1ff, 0x696, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x2, r4, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)

4m40.526054115s ago: executing program 9 (id=3839):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d63200000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

4m40.120511823s ago: executing program 3 (id=3842):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="aeaa000000000000711013000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

4m40.055036864s ago: executing program 3 (id=3843):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

4m39.89920937s ago: executing program 3 (id=3844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

4m39.799918341s ago: executing program 3 (id=3845):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)

4m39.709240862s ago: executing program 3 (id=3846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\tA+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

4m39.399812305s ago: executing program 3 (id=3847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400208b00000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}}, 0x0)

4m39.276496604s ago: executing program 41 (id=3847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400208b00000c0001800800014080ffffff050003000000000005000500020000000500010006"], 0x68}}, 0x0)

4m33.059421812s ago: executing program 42 (id=3725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa1, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\v@+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

4m25.365718916s ago: executing program 43 (id=3839):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d63200000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

2m41.398930774s ago: executing program 6 (id=5386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2e, 0x9, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

2m41.34640088s ago: executing program 6 (id=5389):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="8ce9276f5ec679895ea66a2eceb86e649e4f4d945203072f5f6a04a3fecaa590eef575ab88c3096f981973a9748729230ec1a11dcf15f60957818fc9026fb1941df030cb426db1be2594e8bac9e97589210104647dd31afbe66e9baabe86689b603599adde5caae5033489ceb22a3cb4a50caf593a66d4e61ee7e7b28bb0c5544c043bbded9d138fa7277e03b486b61f47f2b244f24250", @generic="cd471c8a43a8a15037387183286e2ea76b4b0a665eb4bd64d0cabc81e4f669f77601a298b199ca393c"]}, 0xe0}], 0x1}, 0x40040)

2m41.259630565s ago: executing program 6 (id=5392):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}}, 0x0)

2m41.2586311s ago: executing program 6 (id=5395):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0)

2m41.181263293s ago: executing program 6 (id=5397):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000e40)={[{@mode={'mode', 0x3d, 0x80000000}}, {@uid={'uid', 0x3d, r1}}]})
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

2m40.911378287s ago: executing program 6 (id=5408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0)

2m40.734852784s ago: executing program 44 (id=5408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0)

27.545734948s ago: executing program 1 (id=7410):
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4)
close(r4)
socket$pppoe(0x18, 0x1, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090000000000000000000300000008000200", @ANYRES8=r9], 0x1c}}, 0x0)

27.317029817s ago: executing program 1 (id=7412):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f91547f19e", 0x14}], 0x1}, 0x0)

27.127851224s ago: executing program 1 (id=7413):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

27.127318659s ago: executing program 1 (id=7415):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x5f3380000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x60, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x14c11a45bf969429}, {0xffffffffffffffcf}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)

27.0606695s ago: executing program 1 (id=7419):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
syz_clone(0x20a22000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

26.902050931s ago: executing program 1 (id=7421):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)

16.201575434s ago: executing program 5 (id=7552):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94)

16.201451404s ago: executing program 5 (id=7553):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x94, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x84, 0x4}, 0x14128, 0x8, 0x0, 0x6, 0x80103fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
socket$inet(0x2, 0x2, 0x1)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)

16.101683493s ago: executing program 5 (id=7554):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000814}, 0x0)

16.100655903s ago: executing program 5 (id=7555):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.013757311s ago: executing program 5 (id=7556):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

16.01348551s ago: executing program 5 (id=7557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(0x3)

11.88043896s ago: executing program 45 (id=7421):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)

1.358976126s ago: executing program 2 (id=7791):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xb}, 0x2, 0x0, 0x0, 0x8, 0x43fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x24, 0x0, 0x0)

1.170362902s ago: executing program 2 (id=7792):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7b}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

1.108414647s ago: executing program 2 (id=7796):
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x80, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfd}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

1.043368029s ago: executing program 2 (id=7798):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40010000)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3)

934.510839ms ago: executing program 46 (id=7557):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(0x3)

400.333489ms ago: executing program 4 (id=7802):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8920, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:P\x00\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xc4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')

257.956179ms ago: executing program 4 (id=7803):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

150.198595ms ago: executing program 4 (id=7804):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

83.44967ms ago: executing program 2 (id=7805):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8991, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d\xb1\xb7\xf5\f\xe1\xc5\xc1O\xc2Pl\x94o\xc2\xed\x0f\x83\xac\x00\x8d\x1b\xe6\xf7\x0e\xecf3\xea\xe9\xd0\xe9\xf2@nc\xf8\x11\xd8\xee\x98\ff\xe04<j\x11\xe4\x06O3\"l\x1c\xfc+\xbf-\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x9b\xd0\xf3]\xa9\x81\x12\x80\x9e \x1a5\xc2+\xb3\xcc\xe0\xbfF\xf7H\x1e\x04\x10\x02*\xef#\xc0\xb5\xa4\xca\x9b$u\x93\x80\xfb.\xbdA\xb4\x92\xa7\xa6s\xeb\xb7C\x17^\x80Y\r\\\xd6s\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00')

83.233336ms ago: executing program 4 (id=7806):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a1bc0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

536.875µs ago: executing program 4 (id=7807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)

160.358µs ago: executing program 2 (id=7808):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="dc000000250009012cbd7000f9ffffff02000000b7005980978589b04744f28f1cd4f1e8f9e23f34ba16d25ca55dea937d36a0046c6503dd840176ea0fee35df69e2d2aa024c5dfff9abedd98d8b6f9b7dda9cf2bc36a494583a421ed3b9566202e581b25ae29e8930da2b8bf874d2f5b527f369fef1b779a56b289e51a8ce11849375dceb29f7a7aa131f0f73f18b2d9fb1f415cfa1b94f8145dcc5500274e3eb333981797bfaf4d74e6b6a361067fa383f8a140623fc3cb3ec4399950888df4e5fd6499b0a73bf421a9a00080003004700000008003f000322"], 0xdc}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)

0s ago: executing program 4 (id=7809):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001480)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075c, 0x3}}]}, 0xcc}}, 0x10)

kernel console output (not intermixed with test programs):

t_HMARK: spi-set and port-set can't be combined
[  369.651301][T16303] syzkaller0: entered promiscuous mode
[  369.654396][T16303] syzkaller0: entered allmulticast mode
[  371.298446][T16315] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4149'.
[  371.381042][T16320] netlink: 'syz.6.4150': attribute type 25 has an invalid length.
[  371.393349][T16320] netlink: 'syz.6.4150': attribute type 1 has an invalid length.
[  371.395890][T16320] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.412906][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'.
[  371.422917][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'.
[  371.569262][T16340] netlink: 'syz.1.4158': attribute type 29 has an invalid length.
[  371.576570][T16340] netlink: 'syz.1.4158': attribute type 29 has an invalid length.
[  371.705788][T16355] netlink: 'syz.6.4165': attribute type 2 has an invalid length.
[  371.718145][T16355] netlink: 'syz.6.4165': attribute type 2 has an invalid length.
[  375.466128][T16427] netlink: 'syz.2.4190': attribute type 6 has an invalid length.
[  375.469597][T16420] netlink: 'syz.1.4187': attribute type 39 has an invalid length.
[  375.522535][T16418] netlink: zone id is out of range
[  375.559664][ T5822] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  375.779132][T16433] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4191'.
[  375.785623][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'.
[  376.023082][T16418] netlink: set zone limit has 4 unknown bytes
[  376.162161][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4200'.
[  376.269045][T16461] netlink: 'syz.6.4205': attribute type 1 has an invalid length.
[  376.274252][T16461] netlink: 64399 bytes leftover after parsing attributes in process `syz.6.4205'.
[  376.493977][T16475] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4212'.
[  376.496942][T16475] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4212'.
[  376.512764][T16477] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.4213'.
[  376.655901][T16489] netlink: 'syz.2.4219': attribute type 6 has an invalid length.
[  376.658458][T16489] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4219'.
[  376.766356][T16495] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4222'.
[  376.942076][T16508] netlink: 'syz.2.4228': attribute type 21 has an invalid length.
[  377.049677][T16517] netlink: 'syz.2.4232': attribute type 3 has an invalid length.
[  377.227262][T16524] netlink: 'syz.2.4235': attribute type 1 has an invalid length.
[  377.541067][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'.
[  378.372436][T16546] netlink: 'syz.6.4244': attribute type 1 has an invalid length.
[  378.961025][T16569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.163320][T16583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.396628][T16597] syzkaller0: entered promiscuous mode
[  379.398266][T16597] syzkaller0: entered allmulticast mode
[  379.441478][T16597] : renamed from syz_tun (while UP)
[  381.096344][T16634] netlink: 'syz.1.4286': attribute type 39 has an invalid length.
[  381.255713][T16645] netlink: 'syz.2.4292': attribute type 10 has an invalid length.
[  381.258608][T16645] __nla_validate_parse: 8 callbacks suppressed
[  381.258622][T16645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4292'.
[  381.266357][T16645] bridge0: port 3(ipvlan1) entered blocking state
[  381.273540][T16645] bridge0: port 3(ipvlan1) entered disabled state
[  381.287977][T16645] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  381.697093][T16657] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4296'.
[  381.770802][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4297'.
[  382.007395][T16681] netlink: 'syz.1.4308': attribute type 2 has an invalid length.
[  382.099882][T16691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4313'.
[  382.523871][T16728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4329'.
[  382.577754][T16732] netlink: 'syz.2.4332': attribute type 10 has an invalid length.
[  382.580662][T16732] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4332'.
[  382.598150][T16732] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  382.621852][T16734] netlink: 'syz.1.4331': attribute type 7 has an invalid length.
[  382.626539][T16734] netlink: 'syz.1.4331': attribute type 8 has an invalid length.
[  383.362828][T16785] netlink: 'syz.6.4355': attribute type 21 has an invalid length.
[  383.425457][T16790] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4356'.
[  383.435137][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4356'.
[  383.451149][T16790] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4356'.
[  383.456424][T16790] netlink: 'syz.6.4356': attribute type 2 has an invalid length.
[  383.458815][T16790] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4356'.
[  384.040049][T16832] netlink: 'syz.2.4377': attribute type 1 has an invalid length.
[  384.194466][T16847] netlink: 'syz.2.4384': attribute type 7 has an invalid length.
[  384.197549][T16847] netlink: 'syz.2.4384': attribute type 6 has an invalid length.
[  384.200431][T16847] netlink: 'syz.2.4384': attribute type 7 has an invalid length.
[  384.218247][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  384.221379][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  384.269778][T16851] tmpfs: Bad value for 'gid'
[  384.271186][T16851] tmpfs: Bad value for 'gid'
[  384.986667][T16897] openvswitch: netlink: Tunnel attr 124 out of range max 16
[  385.539235][T16913] C: renamed from team_slave_0 (while UP)
[  386.630645][T16928] __nla_validate_parse: 8 callbacks suppressed
[  386.630704][T16928] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4420'.
[  386.648050][T16928] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  387.359436][T16938] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4425'.
[  387.366347][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4426'.
[  387.369421][T16942] validate_nla: 6 callbacks suppressed
[  387.369430][T16942] netlink: 'syz.6.4426': attribute type 2 has an invalid length.
[  387.383498][T16942] netlink: 'syz.6.4426': attribute type 1 has an invalid length.
[  387.387574][T16942] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4426'.
[  387.642482][T16958] netlink: 'syz.2.4434': attribute type 28 has an invalid length.
[  387.645677][T16958] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4434'.
[  388.094510][T16982] netlink: 'syz.2.4440': attribute type 61 has an invalid length.
[  388.253387][T16990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4448'.
[  388.439485][T17006] netlink: 'syz.6.4455': attribute type 1 has an invalid length.
[  388.533559][T17010] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4458'.
[  388.654268][T17020] netlink: 'syz.1.4462': attribute type 13 has an invalid length.
[  388.743622][T11512] lo speed is unknown, defaulting to 1000
[  388.754916][T17025] syz.2.4465 (17025) used obsolete PPPIOCDETACH ioctl
[  388.757697][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'.
[  388.946944][T17034] netlink: 'syz.2.4469': attribute type 13 has an invalid length.
[  389.046643][T17034] netlink: 'syz.2.4469': attribute type 2 has an invalid length.
[  389.049478][T17034] netlink: 'syz.2.4469': attribute type 4 has an invalid length.
[  389.052256][T17034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4469'.
[  390.012476][T17065] netlink: 'syz.1.4483': attribute type 21 has an invalid length.
[  390.016598][T17065] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.022807][T17065] IPv6: Can't replace route, no match found
[  391.489269][T17124] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.493465][T17124] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.607525][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4511'.
[  391.619223][T17124] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.624020][T17124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.631612][T17124] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.635938][T17124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.789598][T17124] team0: Port device bridge0 added
[  391.835097][T17137] __nla_validate_parse: 3 callbacks suppressed
[  391.835108][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'.
[  392.358673][T17172] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4532'.
[  392.516839][T17177] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode
[  392.519840][T17177] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  392.851347][ T5822] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  397.740038][T17315] validate_nla: 5 callbacks suppressed
[  397.740054][T17315] netlink: 'syz.2.4588': attribute type 3 has an invalid length.
[  397.883861][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4586'.
[  398.030810][T17324] netlink: 'syz.2.4592': attribute type 10 has an invalid length.
[  398.071074][T17324] macvlan0: entered promiscuous mode
[  398.074551][T17324] macvlan0: entered allmulticast mode
[  398.120972][T17324] veth1_vlan: entered allmulticast mode
[  398.180803][T17324] team0: Port device macvlan0 added
[  398.229559][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4595'.
[  398.235693][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4595'.
[  398.900882][T17372] netlink: 'syz.1.4614': attribute type 1 has an invalid length.
[  398.991242][T17380] netlink: 'syz.1.4619': attribute type 7 has an invalid length.
[  399.276404][T17390] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4618'.
[  402.086660][T17390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.103712][T17390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.108654][T17390] bond0 (unregistering): Released all slaves
[  402.270924][ T5833] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.357773][ T5833] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.425144][T17411] netlink: 'syz.2.4632': attribute type 9 has an invalid length.
[  402.425928][ T5833] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.434090][T17411] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4632'.
[  402.671093][ T5833] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.755098][T17429] netlink: 'syz.1.4640': attribute type 10 has an invalid length.
[  402.767695][T17429] team0: Port device geneve1 added
[  402.896125][ T5833] bridge_slave_1: left allmulticast mode
[  402.897822][ T5833] bridge_slave_1: left promiscuous mode
[  402.912521][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.921732][ T5833] bridge_slave_0: left allmulticast mode
[  402.926944][T17442] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  402.931319][ T5833] bridge_slave_0: left promiscuous mode
[  402.937088][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.094300][ T5833] team0: Port device geneve1 removed
[  403.112665][T17454] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  403.147386][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.157272][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.162171][ T5833] bond0 (unregistering): Released all slaves
[  403.192896][T17460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4653'.
[  403.382859][T17472] netlink: 'syz.2.4657': attribute type 10 has an invalid length.
[  403.532077][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.538019][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.564732][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.566970][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.576811][ T5833] veth1_vlan: left promiscuous mode
[  403.578890][ T5833] veth0_vlan: left promiscuous mode
[  403.597551][T17481] IPv6: NLM_F_CREATE should be specified when creating new route
[  403.652088][T17485] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4662'.
[  403.764169][ T5833] team0 (unregistering): Port device team_slave_1 removed
[  403.788001][ T5833] team0 (unregistering): Port device team_slave_0 removed
[  404.065607][T17504] netlink: 'syz.6.4671': attribute type 29 has an invalid length.
[  404.073193][T17504] netlink: 'syz.6.4671': attribute type 29 has an invalid length.
[  404.143721][T17507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4672'.
[  404.177141][T17507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4672'.
[  404.187149][T17507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4672'.
[  404.199016][T17507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4672'.
[  404.340101][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4676'.
[  404.343225][T17521] netlink: 'syz.6.4677': attribute type 21 has an invalid length.
[  404.346064][T17521] IPv6: NLM_F_CREATE should be specified when creating new route
[  404.348391][T17521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.350735][T17521] IPv6: NLM_F_CREATE should be set when creating new route
[  404.352954][T17521] IPv6: NLM_F_CREATE should be set when creating new route
[  404.355388][T17521] IPv6: NLM_F_CREATE should be set when creating new route
[  404.808056][ T5833] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.946336][ T5833] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.109870][ T5833] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.154634][T17555] netlink: 'syz.1.4690': attribute type 39 has an invalid length.
[  405.946747][ T5833] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.066105][T17567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4693'.
[  406.069525][T17567] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4693'.
[  406.104172][T17570] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4694'.
[  406.236991][ T5833] bridge_slave_1: left allmulticast mode
[  406.239140][ T5833] bridge_slave_1: left promiscuous mode
[  406.241364][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.297303][ T5833] bridge_slave_0: left allmulticast mode
[  406.299493][ T5833] bridge_slave_0: left promiscuous mode
[  406.301737][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.687829][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.699145][ T5833] bond0 (unregistering): Released all slaves
[  406.919402][T17614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.104373][ T5833] hsr_slave_0: left promiscuous mode
[  408.110155][ T5833] hsr_slave_1: left promiscuous mode
[  408.112872][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.124216][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.142134][T17647] netlink: 'syz.1.4721': attribute type 10 has an invalid length.
[  408.148993][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.151372][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.252676][ T5833] veth1_macvtap: left promiscuous mode
[  408.258200][ T5833] veth0_macvtap: left promiscuous mode
[  408.259989][ T5833] veth1_vlan: left promiscuous mode
[  408.266809][ T5833] veth0_vlan: left promiscuous mode
[  409.406205][ T5833] team0 (unregistering): Port device team_slave_1 removed
[  409.445263][ T5833] team0 (unregistering): Port device team_slave_0 removed
[  409.847873][T17647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  410.543428][T17669] syzkaller0: tun_chr_ioctl cmd 2147767506
[  410.875854][ T5822] Bluetooth: hci1: unknown advertising packet type: 0xff
[  410.875872][ T5822] Bluetooth: hci1: Malformed LE Event: 0x02
[  411.225831][T17699] delete_channel: no stack
[  411.412687][T17724] __nla_validate_parse: 2 callbacks suppressed
[  411.412708][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4743'.
[  411.450078][T17717] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4740'.
[  411.764761][T17733] lo speed is unknown, defaulting to 1000
[  411.881639][T17741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4749'.
[  412.799952][T17758] blkio.reset_stats is deprecated
[  412.853618][T17761] netlink: 'syz.2.4754': attribute type 29 has an invalid length.
[  412.862530][T17761] netlink: 'syz.2.4754': attribute type 29 has an invalid length.
[  413.579971][T17804] netlink: 'syz.6.4774': attribute type 10 has an invalid length.
[  413.582330][T17804] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4774'.
[  413.585260][T17804] dummy0: entered promiscuous mode
[  413.587102][T17804] dummy0: entered allmulticast mode
[  413.590375][T17804] bridge0: port 3(dummy0) entered blocking state
[  413.592503][T17804] bridge0: port 3(dummy0) entered disabled state
[  413.603606][T17804] bridge0: port 3(dummy0) entered blocking state
[  413.605900][T17804] bridge0: port 3(dummy0) entered forwarding state
[  414.525852][T17862] netlink: 'syz.1.4802': attribute type 21 has an invalid length.
[  414.541727][T17869] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4803'.
[  414.547525][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4803'.
[  414.550346][T17869] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4803'.
[  414.553475][T17869] netlink: 'syz.6.4803': attribute type 3 has an invalid length.
[  414.555820][T17869] netlink: 'syz.6.4803': attribute type 2 has an invalid length.
[  414.559951][T17869] netlink: 31 bytes leftover after parsing attributes in process `syz.6.4803'.
[  414.787951][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'.
[  414.914546][T17893] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4815'.
[  415.363615][ T5822] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  415.937993][T17966] openvswitch: netlink: Multiple metadata blocks provided
[  417.097539][ T5822] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  417.929672][T18040] netlink: 'syz.6.4867': attribute type 10 has an invalid length.
[  417.975303][T18040] team0: Port device netdevsim0 added
[  418.288153][T18063] __nla_validate_parse: 2 callbacks suppressed
[  418.288169][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4878'.
[  418.308245][T18063] netdevsim netdevsim6 5@: renamed from netdevsim0 (while UP)
[  418.435847][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'.
[  418.807266][T18101] openvswitch: netlink: IP tunnel dst address not specified
[  418.810179][T18100] xt_l2tp: unknown flags: df
[  418.816853][T18102] xt_l2tp: invalid flags combination: 0
[  418.983753][T18114] netlink: 'syz.1.4897': attribute type 2 has an invalid length.
[  418.986077][T18114] tipc: Started in network mode
[  418.987484][T18114] tipc: Node identity 7000f, cluster identity 4711
[  418.989818][T18114] tipc: Node number set to 458767
[  419.563698][T18132] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0
[  419.631700][T18138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.678657][T18142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4912'.
[  419.864976][T18148] netlink: 'syz.2.4914': attribute type 25 has an invalid length.
[  419.865380][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4916'.
[  419.868393][T18150] netlink: 'syz.1.4915': attribute type 2 has an invalid length.
[  419.879189][T18150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4915'.
[  419.913519][T18153] netlink: 'syz.1.4915': attribute type 2 has an invalid length.
[  419.913536][T18153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4915'.
[  420.128418][T18171] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.4922'.
[  420.264939][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4928'.
[  420.277519][T18187] syz.6.4929: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  420.288552][T18187] CPU: 1 UID: 0 PID: 18187 Comm: syz.6.4929 Not tainted syzkaller #0 PREEMPT(full) 
[  420.288565][T18187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  420.288572][T18187] Call Trace:
[  420.288577][T18187]  <TASK>
[  420.288582][T18187]  dump_stack_lvl+0xe8/0x150
[  420.288607][T18187]  warn_alloc+0x249/0x340
[  420.288624][T18187]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  420.288643][T18187]  ? __pfx_warn_alloc+0x10/0x10
[  420.288664][T18187]  ? kasan_save_track+0x4f/0x80
[  420.288675][T18187]  ? kasan_save_track+0x3e/0x80
[  420.288683][T18187]  ? __kasan_kmalloc+0x93/0xb0
[  420.288693][T18187]  ? __kmalloc_cache_noprof+0x31c/0x660
[  420.288705][T18187]  ? xskq_create+0x56/0x170
[  420.288715][T18187]  ? xsk_setsockopt+0x603/0x990
[  420.288728][T18187]  ? do_sock_setsockopt+0x17c/0x1b0
[  420.288739][T18187]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  420.288748][T18187]  ? do_syscall_64+0x14d/0xf80
[  420.288800][T18187]  __vmalloc_node_range_noprof+0x132/0x1730
[  420.288854][T18187]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  420.288875][T18187]  ? __kasan_kmalloc+0x93/0xb0
[  420.288895][T18187]  vmalloc_user_noprof+0xad/0xe0
[  420.288908][T18187]  ? xskq_create+0xbf/0x170
[  420.288919][T18187]  xskq_create+0xbf/0x170
[  420.288933][T18187]  xsk_init_queue+0x8a/0xe0
[  420.288947][T18187]  xsk_setsockopt+0x603/0x990
[  420.288965][T18187]  ? __pfx_xsk_setsockopt+0x10/0x10
[  420.288980][T18187]  ? __pfx_aa_sk_perm+0x10/0x10
[  420.288999][T18187]  ? __fget_files+0x2a/0x420
[  420.289012][T18187]  ? aa_sock_opt_perm+0xff/0x1a0
[  420.289030][T18187]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  420.289043][T18187]  ? __pfx_xsk_setsockopt+0x10/0x10
[  420.289061][T18187]  do_sock_setsockopt+0x17c/0x1b0
[  420.289078][T18187]  __x64_sys_setsockopt+0x13d/0x1b0
[  420.289096][T18187]  do_syscall_64+0x14d/0xf80
[  420.289106][T18187]  ? trace_irq_disable+0x3b/0x150
[  420.289119][T18187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.289136][T18187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.289145][T18187] RIP: 0033:0x7f70c099c799
[  420.289157][T18187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.289170][T18187] RSP: 002b:00007f70c1853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  420.289180][T18187] RAX: ffffffffffffffda RBX: 00007f70c0c15fa0 RCX: 00007f70c099c799
[  420.289186][T18187] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  420.289208][T18187] RBP: 00007f70c0a32c99 R08: 0000000000000004 R09: 0000000000000000
[  420.289213][T18187] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  420.289219][T18187] R13: 00007f70c0c16038 R14: 00007f70c0c15fa0 R15: 00007ffd15d443c8
[  420.289249][T18187]  </TASK>
[  420.289923][T18187] Mem-Info:
[  420.298524][T18189] netlink: 'syz.2.4930': attribute type 13 has an invalid length.
[  420.302728][T18187] active_anon:9418 inactive_anon:0 isolated_anon:0
[  420.302728][T18187]  active_file:20483 inactive_file:38476 isolated_file:0
[  420.302728][T18187]  unevictable:1768 dirty:232 writeback:0
[  420.302728][T18187]  slab_reclaimable:11525 slab_unreclaimable:88888
[  420.302728][T18187]  mapped:18198 shmem:2447 pagetables:1915
[  420.302728][T18187]  sec_pagetables:0 bounce:0
[  420.302728][T18187]  kernel_misc_reclaimable:0
[  420.302728][T18187]  free:1095763 free_pcp:28528 free_cma:0
[  420.314096][T18189] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4930'.
[  420.319589][T18187] Node 0 active_anon:19436kB inactive_anon:0kB active_file:36444kB inactive_file:135952kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45700kB dirty:236kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6808kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  420.421267][T18187] Node 1 active_anon:18128kB inactive_anon:0kB active_file:45488kB inactive_file:17952kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27060kB dirty:704kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6560kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  420.432021][T18187] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  420.443177][T18187] lowmem_reserve[]: 0 1587 2117 2117 2117
[  420.445409][T18187] Node 0 DMA32 free:1414040kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4072kB inactive_anon:0kB active_file:11488kB inactive_file:12kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625384kB mlocked:0kB bounce:0kB free_pcp:22036kB local_pcp:13256kB free_cma:0kB
[  420.465238][T18187] lowmem_reserve[]: 0 0 530 530 530
[  420.469496][T18187] Node 0 Normal free:10748kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15312kB inactive_anon:0kB active_file:24956kB inactive_file:135940kB unevictable:3536kB writepending:236kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:5208kB local_pcp:136kB free_cma:0kB
[  420.484870][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4935'.
[  420.488855][T18187] lowmem_reserve[]: 0 0 0 0 0
[  420.491594][T18187] Node 1 Normal free:2942032kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18128kB inactive_anon:0kB active_file:45488kB inactive_file:17952kB unevictable:3536kB writepending:704kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:87500kB local_pcp:54672kB free_cma:0kB
[  420.508596][T18187] lowmem_reserve[]: 0 0 0 0 0
[  420.510411][T18187] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  420.516079][T18187] Node 0 DMA32: 64*4kB (UM) 81*8kB (UME) 339*16kB (UM) 17*32kB (UM) 12*64kB (UME) 184*128kB (UM) 224*256kB (UME) 143*512kB (UME) 115*1024kB (UM) 48*2048kB (UME) 253*4096kB (UM) = 1414104kB
[  420.523504][T18187] Node 0 Normal: 490*4kB (UM) 269*8kB (UME) 226*16kB (UME) 18*32kB (UME) 30*64kB (UME) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10608kB
[  420.528217][T18187] Node 1 Normal: 1806*4kB (UME) 1607*8kB (UME) 1728*16kB (UME) 781*32kB (UME) 459*64kB (UM) 185*128kB (UM) 89*256kB (UM) 66*512kB (UME) 37*1024kB (UME) 27*2048kB (UM) 651*4096kB (UM) = 2942032kB
[  420.535342][T18187] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  420.539564][T18187] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  420.546436][T18187] 61408 total pagecache pages
[  420.548340][T18187] 0 pages in swap cache
[  420.549996][T18187] Free swap  = 124996kB
[  420.552781][T18187] Total swap = 124996kB
[  420.554460][T18187] 1834877 pages RAM
[  420.556681][T18187] 0 pages HighMem/MovableOnly
[  420.558542][T18187] 390178 pages reserved
[  420.559922][T18187] 0 pages cma reserved
[  420.610316][T18209] tc_dump_action: action bad kind
[  420.678853][T18217] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  421.245865][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.360944][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.589603][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  421.593106][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  421.601780][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  421.619007][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  421.629898][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  421.876799][T18265] netlink: 'syz.6.4966': attribute type 16 has an invalid length.
[  422.711079][T18262] lo speed is unknown, defaulting to 1000
[  422.766001][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.908459][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.984539][T18262] chnl_net:caif_netlink_parms(): no params data found
[  423.062841][T18262] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.066863][T18262] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.069373][T18262] bridge_slave_0: entered allmulticast mode
[  423.071959][T18262] bridge_slave_0: entered promiscuous mode
[  423.078003][T18262] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.080139][T18262] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.082246][T18262] bridge_slave_1: entered allmulticast mode
[  423.086219][T18262] bridge_slave_1: entered promiscuous mode
[  423.110914][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.116043][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.147676][T18262] team0: Port device team_slave_0 added
[  423.151329][T18262] team0: Port device team_slave_1 added
[  423.199278][T18300] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  423.215140][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.217184][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.242249][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.275744][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.279684][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.290444][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.397314][   T12] bridge_slave_1: left allmulticast mode
[  423.399056][   T12] bridge_slave_1: left promiscuous mode
[  423.400753][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.423781][   T12] bridge_slave_0: left allmulticast mode
[  423.426133][   T12] bridge_slave_0: left promiscuous mode
[  423.428160][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.569165][   T12] team0: Port device geneve1 removed
[  423.653193][ T5822] Bluetooth: hci2: command tx timeout
[  423.720702][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.729188][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.735120][   T12] bond0 (unregistering): Released all slaves
[  423.794716][T18262] hsr_slave_0: entered promiscuous mode
[  423.802489][T18262] hsr_slave_1: entered promiscuous mode
[  423.807071][   T12] tipc: Left network mode
[  423.960231][T18331] syzkaller0: entered promiscuous mode
[  423.962464][T18331] syzkaller0: entered allmulticast mode
[  425.394621][   T12] hsr_slave_0: left promiscuous mode
[  425.405705][   T12] hsr_slave_1: left promiscuous mode
[  425.408433][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.410977][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.427183][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.429546][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.450962][   T12] veth1_macvtap: left promiscuous mode
[  425.464358][   T12] veth0_macvtap: left promiscuous mode
[  425.466808][   T12] veth1_vlan: left promiscuous mode
[  425.468571][   T12] veth0_vlan: left promiscuous mode
[  425.705985][   T12] team0 (unregistering): Port device team_slave_1 removed
[  425.715514][   T12] team0 (unregistering): Port device team_slave_0 removed
[  425.733222][ T5822] Bluetooth: hci2: command tx timeout
[  425.917710][T18354] hsr0: mtu less than device minimum
[  425.925040][   T61] lo speed is unknown, defaulting to 1000
[  425.933685][   T61] infiniband syz1: ib_query_port failed (-19)
[  425.984549][T18360] __nla_validate_parse: 8 callbacks suppressed
[  425.984564][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4991'.
[  426.034577][T18363] netlink: 'syz.6.4992': attribute type 21 has an invalid length.
[  426.046051][T18363] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4992'.
[  426.069123][T18363] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4992'.
[  426.315111][T18262] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  426.331261][T18262] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  426.341138][T18262] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  426.351373][T18262] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  426.384142][ T3509] wlan1: Trigger new scan to find an IBSS to join
[  426.481984][T18262] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.510630][T18262] 8021q: adding VLAN 0 to HW filter on device team0
[  426.525258][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.527616][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.548193][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.550761][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.559639][T18408] netlink: 'syz.2.5007': attribute type 12 has an invalid length.
[  426.561970][T18408] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.5007'.
[  426.692560][T18424] tmpfs: Bad value for 'mode'
[  426.729082][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.764953][T18262] veth0_vlan: entered promiscuous mode
[  426.770232][T18262] veth1_vlan: entered promiscuous mode
[  426.802340][T18262] veth0_macvtap: entered promiscuous mode
[  426.812775][T18262] veth1_macvtap: entered promiscuous mode
[  426.828041][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.835113][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.842010][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.849032][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.863752][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.875944][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.949061][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.952016][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.992151][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.996572][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.296245][T18461] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5021'.
[  427.546243][T18478] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.5029'.
[  427.842330][ T5822] Bluetooth: hci2: command tx timeout
[  427.991351][T18493] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  428.040537][T18493] netlink: 'syz.1.5036': attribute type 21 has an invalid length.
[  428.047451][T18493] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5036'.
[  428.061019][T18493] netlink: 'syz.1.5036': attribute type 4 has an invalid length.
[  428.065544][T18493] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5036'.
[  428.632094][T18524] netlink: 'syz.1.5051': attribute type 21 has an invalid length.
[  428.646547][T18524] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5051'.
[  428.653246][T18524] netlink: 'syz.1.5051': attribute type 4 has an invalid length.
[  428.655639][T18524] netlink: 'syz.1.5051': attribute type 5 has an invalid length.
[  428.658204][T18524] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5051'.
[  429.088386][T18554] netlink: 'syz.2.5065': attribute type 21 has an invalid length.
[  429.142897][T18559] netlink: 'syz.6.5068': attribute type 2 has an invalid length.
[  429.153094][T18559] netlink: 'syz.6.5068': attribute type 2 has an invalid length.
[  429.328405][T18570] delete_channel: no stack
[  429.413786][ T5822] Bluetooth: hci0: Unknown advertising packet type: 0x3f
[  429.413831][ T5822] Bluetooth: hci0: Malformed LE Event: 0x0d
[  429.894339][ T5822] Bluetooth: hci2: command tx timeout
[  430.221343][T18643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.225143][T18643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  430.676549][ T5822] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  430.824770][T18679] veth0_vlan: left promiscuous mode
[  430.830449][T18679] veth0_vlan: entered promiscuous mode
[  430.835173][T18679] team0: Device veth0_vlan failed to register rx_handler
[  430.878886][T18683] netlink: 'syz.2.5124': attribute type 11 has an invalid length.
[  431.032024][T18697] __nla_validate_parse: 6 callbacks suppressed
[  431.032064][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5131'.
[  431.232904][T18715] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  431.338255][ T1094] wlan1: Trigger new scan to find an IBSS to join
[  431.352803][T18729] validate_nla: 3 callbacks suppressed
[  431.352815][T18729] netlink: 'syz.2.5146': attribute type 11 has an invalid length.
[  431.358504][T18729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5146'.
[  431.365877][T18727] netlink: 'syz.6.5145': attribute type 3 has an invalid length.
[  431.368488][T18727] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.5145'.
[  431.548004][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5152'.
[  431.550585][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5152'.
[  431.581598][T18746] netlink: 'syz.2.5154': attribute type 29 has an invalid length.
[  431.587458][T18746] netlink: 'syz.2.5154': attribute type 29 has an invalid length.
[  431.634622][T18750] netlink: 'syz.1.5156': attribute type 66 has an invalid length.
[  431.704410][T18754] netlink: 'syz.1.5158': attribute type 2 has an invalid length.
[  431.707115][T18754] tipc: Started in network mode
[  431.709053][T18754] tipc: Node identity 1340008, cluster identity 4711
[  431.711384][T18754] tipc: Node number set to 20185096
[  431.997895][T18764] netlink: 840 bytes leftover after parsing attributes in process `syz.1.5161'.
[  433.861176][ T3592] wlan1: Creating new IBSS network, BSSID da:83:e0:d3:86:be
[  434.130831][T18775] netlink: 'syz.2.5166': attribute type 25 has an invalid length.
[  434.135867][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5165'.
[  434.140949][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5165'.
[  434.151613][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'.
[  434.182558][T18777] cgroup2: Unknown parameter '01777777777777777777777'
[  434.352697][T18788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.679301][T18812] netlink: 'syz.1.5185': attribute type 64 has an invalid length.
[  434.871912][T18828] netlink: 'syz.2.5192': attribute type 21 has an invalid length.
[  434.874813][T18828] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5192'.
[  435.978407][T18828] netlink: 'syz.2.5192': attribute type 4 has an invalid length.
[  436.528304][T18862] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5206'.
[  436.531831][T18862] netlink: 'syz.6.5206': attribute type 1 has an invalid length.
[  436.538373][T18862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5206'.
[  438.496047][T18923] netlink: 'syz.2.5233': attribute type 7 has an invalid length.
[  438.504274][T18923] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5233'.
[  438.511839][T18924] netlink: 'syz.1.5232': attribute type 1 has an invalid length.
[  438.519961][T18924] netlink: 'syz.1.5232': attribute type 2 has an invalid length.
[  438.684885][T18928] netlink: 'syz.2.5236': attribute type 1 has an invalid length.
[  438.915867][T18945] netlink: 'syz.1.5244': attribute type 1 has an invalid length.
[  439.050324][T18957] netlink: 'syz.2.5248': attribute type 29 has an invalid length.
[  439.070964][T18957] netlink: 'syz.2.5248': attribute type 29 has an invalid length.
[  439.085724][T18957] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5248'.
[  439.098066][T18957] unsupported nla_type 58
[  439.988063][T18968] netlink: 'syz.1.5254': attribute type 10 has an invalid length.
[  439.991025][T18968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5254'.
[  440.114215][ T5822] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  443.418234][T19003] netlink: 'syz.1.5270': attribute type 10 has an invalid length.
[  443.420581][T19003] netlink: 'syz.1.5270': attribute type 19 has an invalid length.
[  443.422859][T19003] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.5270'.
[  443.898715][T19038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5284'.
[  444.033777][T19047] netlink: 'syz.2.5288': attribute type 21 has an invalid length.
[  444.037593][T19047] IPv6: NLM_F_CREATE should be specified when creating new route
[  444.120751][T19062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5295'.
[  444.247402][T19068] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5298'.
[  444.310426][T19068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5298'.
[  444.316140][T19068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5298'.
[  444.597733][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'.
[  444.738654][ T5857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.815586][ T5857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.940236][ T5857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.008267][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  445.016527][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  445.020531][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  445.036292][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  445.039868][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  445.075298][ T5857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.080345][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'.
[  445.095180][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'.
[  445.263544][T19113] sch_tbf: peakrate 5 is lower than or equals to rate 4096 !
[  445.377315][ T5857] bridge_slave_1: left allmulticast mode
[  445.379030][ T5857] bridge_slave_1: left promiscuous mode
[  445.384779][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.678773][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  445.681327][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  447.104571][ T5822] Bluetooth: hci2: command tx timeout
[  448.329413][ T5857] bridge_slave_0: left allmulticast mode
[  448.331856][ T5857] bridge_slave_0: left promiscuous mode
[  448.353421][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.596430][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.602160][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.610010][ T5857] bond0 (unregistering): Released all slaves
[  448.639881][T19099] chnl_net:caif_netlink_parms(): no params data found
[  448.726108][ T5857] tipc: Left network mode
[  448.782176][T19157] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5335'.
[  448.886209][T19099] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.888528][T19099] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.891384][T19099] bridge_slave_0: entered allmulticast mode
[  448.901351][T19099] bridge_slave_0: entered promiscuous mode
[  448.927284][T19099] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.930064][T19099] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.932488][T19099] bridge_slave_1: entered allmulticast mode
[  448.940079][T19099] bridge_slave_1: entered promiscuous mode
[  449.173372][ T5822] Bluetooth: hci2: command tx timeout
[  449.256424][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.276213][ T5857] hsr_slave_0: left promiscuous mode
[  449.279208][ T5857] hsr_slave_1: left promiscuous mode
[  449.281462][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.284338][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.288636][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.290788][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.308222][ T5857] veth1_macvtap: left promiscuous mode
[  449.309891][ T5857] veth0_macvtap: left promiscuous mode
[  449.311604][ T5857] veth1_vlan: left promiscuous mode
[  449.327655][ T5857] veth0_vlan: left promiscuous mode
[  449.355255][T19183] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  449.515942][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  449.530281][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  449.621258][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.674755][T19099] team0: Port device team_slave_0 added
[  449.694495][T19099] team0: Port device team_slave_1 added
[  449.752439][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.762973][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.786237][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.796056][T19193] netlink: 'syz.2.5346': attribute type 1 has an invalid length.
[  449.799093][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5346'.
[  449.812951][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.815524][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.824928][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.881321][T19195] syzkaller0: entered promiscuous mode
[  449.886658][T19195] syzkaller0: entered allmulticast mode
[  449.921940][T19099] hsr_slave_0: entered promiscuous mode
[  449.942541][T19099] hsr_slave_1: entered promiscuous mode
[  450.698345][T19099] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  450.705431][T19099] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  450.709579][T19099] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  450.714213][T19099] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  450.772871][T19099] 8021q: adding VLAN 0 to HW filter on device bond0
[  450.789286][T19099] 8021q: adding VLAN 0 to HW filter on device team0
[  450.796322][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.798572][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.807666][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.810028][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  450.995683][T19266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5365'.
[  451.006478][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.071000][T19099] veth0_vlan: entered promiscuous mode
[  451.092581][T19099] veth1_vlan: entered promiscuous mode
[  451.130506][T19099] veth0_macvtap: entered promiscuous mode
[  451.138124][T19099] veth1_macvtap: entered promiscuous mode
[  451.160266][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.185417][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.204892][T17639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.212093][T17639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.228967][T17639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.232188][T17639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.256970][ T5822] Bluetooth: hci2: command tx timeout
[  451.314346][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.317253][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.340373][ T8905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.351355][ T8905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.602695][T19313] : entered promiscuous mode
[  451.652908][T19319] netlink: 'syz.2.5385': attribute type 1 has an invalid length.
[  451.668419][T19319] netlink: 'syz.2.5385': attribute type 2 has an invalid length.
[  452.005377][T19353] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5402'.
[  452.008188][T19353] netlink: 'syz.1.5402': attribute type 2 has an invalid length.
[  452.061262][T19359] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5405'.
[  452.176589][T17639] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.227957][T19361] netlink: 'syz.1.5406': attribute type 13 has an invalid length.
[  452.255304][T19366] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  452.260370][T19366] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  452.377743][T17639] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.456007][T17639] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.479684][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  452.483686][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  452.487174][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  452.490131][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  452.498061][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  452.536602][T17639] team0: Port device 5@ removed
[  452.540177][T17639] netdevsim netdevsim6 5@ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.830443][T19370] chnl_net:caif_netlink_parms(): no params data found
[  452.902936][T17639] bridge0: port 3(dummy0) entered disabled state
[  452.907983][T17639] bridge_slave_1: left allmulticast mode
[  452.909636][T17639] bridge_slave_1: left promiscuous mode
[  452.911314][T17639] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.929268][T17639] bridge_slave_0: left allmulticast mode
[  452.931113][T17639] bridge_slave_0: left promiscuous mode
[  452.940563][T17639] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.120242][T19401] xt_socket: unknown flags 0x24
[  453.284093][T17639] : left promiscuous mode
[  453.294542][T19405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5422'.
[  453.319692][T19370] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.324631][T19370] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.333529][ T5818] Bluetooth: hci2: command tx timeout
[  453.349388][T19370] bridge_slave_0: entered allmulticast mode
[  453.363903][T19370] bridge_slave_0: entered promiscuous mode
[  453.368689][T19370] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.373290][T19370] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.383799][T19370] bridge_slave_1: entered allmulticast mode
[  453.388068][T19370] bridge_slave_1: entered promiscuous mode
[  453.475691][T19416] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5426'.
[  453.484217][T19415] dvmrp1: tun_chr_ioctl cmd 1074025677
[  453.486535][T19415] dvmrp1: linktype set to 1
[  453.534329][T19370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.562164][T19370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.609783][T19370] team0: Port device team_slave_0 added
[  453.633482][T19370] team0: Port device team_slave_1 added
[  453.680503][T19424] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.5429'.
[  453.760933][T19370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.768025][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.785578][T19370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.798295][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5431'.
[  453.807876][T19370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.810257][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.818990][T19370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.887153][T19370] hsr_slave_0: entered promiscuous mode
[  453.894444][T19370] hsr_slave_1: entered promiscuous mode
[  453.896920][T19370] debugfs: 'hsr0' already exists in 'hsr'
[  453.899298][T19370] Cannot create hsr debugfs directory
[  454.150247][T17639] hsr_slave_0: left promiscuous mode
[  454.159123][T17639] hsr_slave_1: left promiscuous mode
[  454.163367][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.169737][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.175852][T19443] netlink: 'syz.1.5436': attribute type 10 has an invalid length.
[  454.179652][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.181784][T17639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.200810][T17639] veth1_macvtap: left promiscuous mode
[  454.202524][T17639] veth0_macvtap: left promiscuous mode
[  454.204976][T17639] veth1_vlan: left promiscuous mode
[  454.206890][T17639] veth0_vlan: left promiscuous mode
[  454.450635][T17639] team0 (unregistering): Port device team_slave_1 removed
[  454.472049][T17639] team0 (unregistering): Port device team_slave_0 removed
[  454.533193][ T5818] Bluetooth: hci0: command tx timeout
[  454.634779][T19443] team0: Cannot enslave team device to itself
[  454.639549][T19453] netlink: 'syz.2.5439': attribute type 4 has an invalid length.
[  454.727610][T19455] netlink: 'syz.2.5440': attribute type 46 has an invalid length.
[  454.730651][T19455] netlink: 'syz.2.5440': attribute type 28 has an invalid length.
[  454.835900][ T5818] Bluetooth: hci1: unknown advertising packet type: 0x6e
[  454.835934][ T5818] Bluetooth: hci1: Malformed LE Event: 0x02
[  454.973638][T19473] netlink: 'syz.2.5446': attribute type 12 has an invalid length.
[  454.975928][T19473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5446'.
[  455.600568][T19515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5454'.
[  455.604876][T19515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5454'.
[  455.670439][T19523] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  455.816096][T19370] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  455.841207][T19370] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  455.892989][T19370] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  455.943852][T19370] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  456.130857][T19552] netlink: 'syz.2.5463': attribute type 21 has an invalid length.
[  456.144496][T19370] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.147370][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5463'.
[  456.188290][T19370] 8021q: adding VLAN 0 to HW filter on device team0
[  456.221444][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.223691][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.244451][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.246847][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.272106][T19370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  456.295536][T19370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  456.460678][T19370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.623784][ T5822] Bluetooth: hci0: command tx timeout
[  456.898138][T19370] veth0_vlan: entered promiscuous mode
[  456.916563][T19370] veth1_vlan: entered promiscuous mode
[  456.969255][T19370] veth0_macvtap: entered promiscuous mode
[  456.973837][T19370] veth1_macvtap: entered promiscuous mode
[  456.994353][T19370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.024138][T19370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.067895][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.070817][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.100288][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.123472][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.973436][ T5822] Bluetooth: hci1: command 0x0406 tx timeout
[  458.693208][ T5822] Bluetooth: hci0: command tx timeout
[  460.106853][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.109826][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.226977][T18124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.229415][T18124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.604766][T19663] netlink: 822 bytes leftover after parsing attributes in process `syz.2.5492'.
[  460.774542][ T5818] Bluetooth: hci0: command tx timeout
[  460.926315][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5504'.
[  460.937176][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5504'.
[  461.150057][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5507'.
[  461.445846][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5520'.
[  461.475153][T19731] netlink: 'syz.1.5521': attribute type 29 has an invalid length.
[  461.478183][T19731] netlink: 'syz.1.5521': attribute type 3 has an invalid length.
[  461.480451][T19731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5521'.
[  461.529264][T19739] netlink: 'syz.1.5524': attribute type 13 has an invalid length.
[  461.531619][T19739] netlink: 'syz.1.5524': attribute type 4 has an invalid length.
[  461.534418][T19739] netlink: 13264 bytes leftover after parsing attributes in process `syz.1.5524'.
[  461.700393][T19754] netlink: 'syz.2.5532': attribute type 21 has an invalid length.
[  461.751567][T19758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5534'.
[  461.768766][T19762] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.5536'.
[  461.918791][T19776] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5542'.
[  462.178997][T19796] netlink: 'syz.5.5552': attribute type 10 has an invalid length.
[  462.184975][T19796] ipvlan1: entered promiscuous mode
[  462.188433][T19796] ipvlan1: entered allmulticast mode
[  462.197002][T19796] veth0_vlan: entered allmulticast mode
[  462.200514][T19796] bridge0: port 3(ipvlan1) entered blocking state
[  462.207285][T19796] bridge0: port 3(ipvlan1) entered disabled state
[  462.215826][T19796] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  462.401834][T19816] netlink: 'syz.1.5562': attribute type 1 has an invalid length.
[  465.762009][T19899] netlink: 'syz.1.5598': attribute type 4 has an invalid length.
[  465.850466][T19903] netlink: 'syz.1.5600': attribute type 32 has an invalid length.
[  465.944513][T19911] netlink: 'syz.2.5604': attribute type 2 has an invalid length.
[  465.948017][T19911] __nla_validate_parse: 10 callbacks suppressed
[  465.948030][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5604'.
[  466.264584][T19933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.136894][ T5818] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  469.512472][T20032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5643'.
[  469.521001][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5643'.
[  469.626651][T20044] netlink: 763 bytes leftover after parsing attributes in process `syz.5.5648'.
[  469.682004][T20050] validate_nla: 1 callbacks suppressed
[  469.682021][T20050] netlink: 'syz.2.5651': attribute type 2 has an invalid length.
[  469.688607][T20050] netlink: 'syz.2.5651': attribute type 1 has an invalid length.
[  469.690825][T20050] netlink: 'syz.2.5651': attribute type 1 has an invalid length.
[  469.746763][T20056] netlink: 'syz.2.5653': attribute type 28 has an invalid length.
[  470.046583][T20086] netlink: 'syz.1.5668': attribute type 1 has an invalid length.
[  470.214925][T20095] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5673'.
[  470.391593][T20100] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5675'.
[  470.908405][T20153] syzkaller0: entered promiscuous mode
[  470.910037][T20153] syzkaller0: entered allmulticast mode
[  471.176148][T20171] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5708'.
[  472.626505][T20193] netlink: 'syz.5.5719': attribute type 29 has an invalid length.
[  472.978629][T20219] netlink: 'syz.2.5728': attribute type 2 has an invalid length.
[  472.981499][T20219] tipc: Started in network mode
[  472.988824][T20219] tipc: Node identity 8, cluster identity 4711
[  472.990856][T20219] tipc: Node number set to 8
[  473.043388][T20228] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.5732'.
[  473.218945][ T5818] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3
[  473.440532][T20260] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5745'.
[  473.503847][ T5818] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  473.662632][T20274] syzkaller0: entered promiscuous mode
[  473.667761][T20274] syzkaller0: entered allmulticast mode
[  475.141587][T20276] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5751'.
[  475.423654][T20294] netlink: 'syz.5.5760': attribute type 10 has an invalid length.
[  475.426694][T20294] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5760'.
[  475.824164][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'.
[  476.238382][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5785'.
[  476.283911][T20349] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5786'.
[  476.459896][T20367] netlink: 'syz.5.5795': attribute type 21 has an invalid length.
[  476.594816][T20377] netlink: 'syz.1.5799': attribute type 2 has an invalid length.
[  476.597078][T20377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5799'.
[  476.738074][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5806'.
[  476.754630][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5806'.
[  476.787316][T20395] netlink: 'syz.5.5808': attribute type 6 has an invalid length.
[  476.790339][T20395] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.5808'.
[  476.794935][T20395] netlink: 'syz.5.5808': attribute type 1 has an invalid length.
[  477.109916][ T5818] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  477.270108][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5829'.
[  477.286242][T20438] : entered promiscuous mode
[  477.319727][   T12] tipc: Subscription rejected, illegal request
[  477.540217][T20450] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5835'.
[  477.542916][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5835'.
[  477.546343][T20450] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5835'.
[  477.613437][ T5818] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  477.617409][ T5818] Bluetooth: hci1: unexpected event for opcode 0x1004
[  478.079264][T20472] openvswitch: netlink: Duplicate or invalid key (type 0).
[  478.082740][T20472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.221097][T20485] netlink: 'syz.1.5850': attribute type 10 has an invalid length.
[  478.242140][T20485] batman_adv: batadv0: Adding interface: vlan1
[  478.247997][T20485] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.270578][T20485] batman_adv: batadv0: Interface activated: vlan1
[  478.486523][T20498] netlink: 'syz.5.5855': attribute type 33 has an invalid length.
[  478.870671][T20522] delete_channel: no stack
[  480.444943][T20580] netlink: 'syz.2.5893': attribute type 29 has an invalid length.
[  480.450688][T20580] netlink: 'syz.2.5893': attribute type 29 has an invalid length.
[  480.462592][T20580] netlink: 'syz.2.5893': attribute type 29 has an invalid length.
[  480.981573][T20601] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  480.985173][T20601] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  481.556739][ T5818] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  481.560172][ T5818] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  481.668276][ T5818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  481.671744][ T5818] Bluetooth: hci1: Injecting HCI hardware error event
[  481.676352][ T5818] Bluetooth: hci1: hardware error 0x00
[  482.290614][T20680] openvswitch: netlink: IPv4 tun info is not correct
[  482.937930][T20696] __nla_validate_parse: 7 callbacks suppressed
[  482.937987][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5947'.
[  482.950577][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5947'.
[  483.733255][ T5818] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  486.578112][T20762] netlink: 'syz.2.5965': attribute type 17 has an invalid length.
[  486.583540][T20762] netlink: 'syz.2.5965': attribute type 41 has an invalid length.
[  486.586451][T20762] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5965'.
[  486.600363][T20761] syzkaller0: entered promiscuous mode
[  486.601950][T20761] syzkaller0: entered allmulticast mode
[  486.799169][T20768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5968'.
[  487.083708][T20779] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  487.177014][T20778] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5974'.
[  487.231750][T20776] delete_channel: no stack
[  487.464456][T20789] netlink: 'syz.2.5978': attribute type 10 has an invalid length.
[  487.466975][T20789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5978'.
[  488.785332][T20789] vcan0: entered promiscuous mode
[  488.787978][T20789] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  488.842851][T20794] netlink: 'syz.2.5979': attribute type 29 has an invalid length.
[  488.849724][T20794] netlink: 'syz.2.5979': attribute type 29 has an invalid length.
[  488.856177][T20794] netlink: 'syz.2.5979': attribute type 29 has an invalid length.
[  488.860635][T20794] netlink: 'syz.2.5979': attribute type 29 has an invalid length.
[  488.977191][T20805] netlink: 703 bytes leftover after parsing attributes in process `syz.1.5983'.
[  489.097049][T20812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5988'.
[  489.202632][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5993'.
[  489.234803][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5993'.
[  489.249229][T20822] bridge_slave_1: left allmulticast mode
[  489.251831][T20822] bridge_slave_1: left promiscuous mode
[  489.261224][T20822] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.427658][T20822] bridge_slave_0: left allmulticast mode
[  489.429702][T20822] bridge_slave_0: left promiscuous mode
[  489.432278][T20822] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.002597][T20851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.818442][T20888] openvswitch: netlink: IP tunnel dst address not specified
[  491.879703][T20891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6018'.
[  491.991949][T20903] syzkaller0: tun_chr_ioctl cmd 1074025676
[  491.996088][T20903] syzkaller0: owner set to 60928
[  492.347361][T20926] : entered promiscuous mode
[  492.771821][T20963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.137265][T20988] syzkaller0: entered promiscuous mode
[  493.139493][T20988] syzkaller0: entered allmulticast mode
[  493.144226][T20988] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  493.281806][T20994] nbd: must specify at least one socket
[  493.376820][T21000] netlink: 'syz.2.6070': attribute type 1 has an invalid length.
[  493.379238][T21000] netlink: 'syz.2.6070': attribute type 2 has an invalid length.
[  493.381466][T21000] netlink: 'syz.2.6070': attribute type 1 has an invalid length.
[  493.384180][T21000] netlink: 'syz.2.6070': attribute type 3 has an invalid length.
[  493.439414][T21003] netlink: 'syz.2.6071': attribute type 21 has an invalid length.
[  493.441953][T21003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6071'.
[  493.566758][T21013] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6076'.
[  493.636490][T21017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6080'.
[  493.650069][T21020] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6079'.
[  494.912819][T21049] netlink: 'syz.2.6091': attribute type 39 has an invalid length.
[  494.916177][T21060] netlink: 52719 bytes leftover after parsing attributes in process `syz.5.6096'.
[  495.105417][T21072] netlink: 'syz.5.6102': attribute type 29 has an invalid length.
[  495.160556][T21070] syzkaller0: entered promiscuous mode
[  495.162274][T21070] syzkaller0: entered allmulticast mode
[  495.166570][T21072] netlink: 'syz.5.6102': attribute type 29 has an invalid length.
[  495.177540][T21074] netlink: 'syz.5.6102': attribute type 29 has an invalid length.
[  495.181159][T21072] netlink: 'syz.5.6102': attribute type 29 has an invalid length.
[  495.336162][T21084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6107'.
[  496.886663][T21099] geneve0: entered promiscuous mode
[  496.925302][T21099] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  496.991421][T21112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6120'.
[  497.228896][T21126] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6126'.
[  497.567461][T21132] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.570802][T21132] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.926881][T21132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.962384][T21132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.155226][T21132] veth1_vlan: left allmulticast mode
[  498.446169][T17639] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.448905][T17639] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.452635][T17639] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.462662][T17639] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  498.771563][T21166] lo: entered promiscuous mode
[  498.891986][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'.
[  498.901556][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'.
[  498.926569][T21177] validate_nla: 5 callbacks suppressed
[  498.926589][T21177] netlink: 'syz.5.6149': attribute type 29 has an invalid length.
[  498.933769][T21177] netlink: 'syz.5.6149': attribute type 29 has an invalid length.
[  499.062679][T21186] netlink: 'syz.1.6154': attribute type 1 has an invalid length.
[  499.087825][T21189] netlink: 'syz.2.6155': attribute type 2 has an invalid length.
[  499.090998][T21189] netlink: 'syz.2.6155': attribute type 11 has an invalid length.
[  499.100591][T21189] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6155'.
[  499.229876][T21196] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6158'.
[  499.321414][T21202] netlink: 'syz.2.6157': attribute type 10 has an invalid length.
[  499.335279][T21204] netlink: 5056 bytes leftover after parsing attributes in process `syz.1.6161'.
[  499.338027][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6161'.
[  499.488696][T21215] netlink: del zone limit has 4 unknown bytes
[  499.595718][T21223] tap0: tun_chr_ioctl cmd 1074025677
[  499.597987][T21223] tap0: linktype set to 270
[  499.700426][T21230] netlink: 'syz.5.6173': attribute type 3 has an invalid length.
[  499.705560][T21230] netlink: 'syz.5.6173': attribute type 4 has an invalid length.
[  500.281724][T21264] __nla_validate_parse: 2 callbacks suppressed
[  500.281739][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6189'.
[  500.515676][T21284] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  501.542688][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6207'.
[  501.549579][T21305] netlink: 'syz.2.6209': attribute type 2 has an invalid length.
[  501.551834][T21305] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6209'.
[  501.738532][T21316] netlink: 'syz.2.6213': attribute type 1 has an invalid length.
[  501.886608][T21316] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6213'.
[  501.890178][T21316] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  502.005372][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6216'.
[  502.727287][T21332] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6222'.
[  502.945248][T21345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.169444][T21365] netlink: 352 bytes leftover after parsing attributes in process `syz.2.6236'.
[  503.574463][T21396] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6251'.
[  503.577301][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6251'.
[  503.801368][T21418] Set syz0 is full, maxelem 0 reached
[  503.803826][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6262'.
[  504.082714][T21441] validate_nla: 6 callbacks suppressed
[  504.082729][T21441] netlink: 'syz.1.6273': attribute type 22 has an invalid length.
[  504.136129][T21444] netlink: 'syz.1.6274': attribute type 23 has an invalid length.
[  504.318922][T21461] netlink: 'syz.1.6282': attribute type 1 has an invalid length.
[  504.322055][T21461] netlink: 'syz.1.6282': attribute type 3 has an invalid length.
[  504.999773][T21505] netlink: 'syz.2.6304': attribute type 1 has an invalid length.
[  505.312469][T21537] __nla_validate_parse: 3 callbacks suppressed
[  505.312483][T21537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6318'.
[  505.317268][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6318'.
[  505.464969][T21547] netlink: 'syz.5.6323': attribute type 1 has an invalid length.
[  505.488438][T21551] xt_socket: unknown flags 0x24
[  505.536233][T21558] netlink: 'syz.1.6328': attribute type 21 has an invalid length.
[  505.773605][T21573] netlink: 'syz.5.6335': attribute type 1 has an invalid length.
[  506.590234][T21578] netlink: 'syz.2.6336': attribute type 25 has an invalid length.
[  506.592549][T21578] netlink: 'syz.2.6336': attribute type 29 has an invalid length.
[  506.605969][T21575] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6337'.
[  506.619057][T21581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.693825][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6342'.
[  506.796841][T21595] nbd: couldn't find a device at index -1
[  507.038516][T21607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6352'.
[  507.097638][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  507.100370][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  507.484303][T21638] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6367'.
[  508.603854][T21670] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6383'.
[  508.607604][T21670] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6383'.
[  508.834572][T21694] openvswitch: netlink: Message has 4 unknown bytes.
[  509.471771][T21744] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6414'.
[  509.510448][T21747] netlink: 'syz.5.6417': attribute type 32 has an invalid length.
[  513.073414][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6443'.
[  513.118073][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  513.283269][T21821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6452'.
[  513.293894][T21821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6452'.
[  513.325984][T21823] netlink: 'syz.1.6453': attribute type 10 has an invalid length.
[  513.330458][T21823] syz_tun: entered promiscuous mode
[  513.342783][T21823] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  513.402418][T21829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  513.555763][T21846] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6463'.
[  513.644760][T21850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6466'.
[  513.764058][T21856] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.6469'.
[  513.846321][T21861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6471'.
[  513.850140][T21861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6471'.
[  513.973583][T21864] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6472'.
[  513.978360][T21864] netlink: 'syz.1.6472': attribute type 10 has an invalid length.
[  515.151237][T21895] netlink: 'syz.1.6486': attribute type 10 has an invalid length.
[  515.163838][T21895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6486'.
[  515.295584][T21906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  515.382103][T21898] delete_channel: no stack
[  516.190972][T21975] netlink: 'syz.1.6522': attribute type 2 has an invalid length.
[  516.273516][T21979] netlink: 'syz.1.6523': attribute type 1 has an invalid length.
[  516.634157][T22011] netlink: 'syz.1.6538': attribute type 9 has an invalid length.
[  518.669268][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1346106283 wd_nsec: 1346106424
[  518.961114][ T5818] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  519.073202][T22027] IPv6: : Disabled Multicast RS
[  519.750957][T22050] openvswitch: netlink: Key type 29 is not supported
[  521.293686][T22066] __nla_validate_parse: 8 callbacks suppressed
[  521.293701][T22066] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6562'.
[  521.494727][T22084] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6570'.
[  521.577041][T22098] openvswitch: netlink: IP tunnel TTL not specified.
[  521.726327][T22118] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6587'.
[  529.393193][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4230067571 wd_nsec: 4230067873
[  529.575036][T22152] pimreg: tun_chr_ioctl cmd 1074812118
[  529.627124][T22159] netlink: 'syz.2.6606': attribute type 21 has an invalid length.
[  529.630392][T22159] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6606'.
[  529.824363][T22174] openvswitch: netlink: Flow key attribute not present in set flow.
[  530.202653][T22183] netlink: 'syz.5.6616': attribute type 2 has an invalid length.
[  530.212720][T22183] netlink: 'syz.5.6616': attribute type 1 has an invalid length.
[  530.215218][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6616'.
[  530.561145][T22205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6625'.
[  530.570922][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6625'.
[  530.735665][T22215] netlink: 'syz.2.6630': attribute type 10 has an invalid length.
[  530.737975][T22215] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6630'.
[  530.920688][T22234] netlink: 'syz.2.6639': attribute type 2 has an invalid length.
[  531.545883][T22275] netlink: 'syz.5.6657': attribute type 21 has an invalid length.
[  531.548310][T22275] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6657'.
[  531.626656][T22281] netlink: 'syz.5.6659': attribute type 5 has an invalid length.
[  531.708038][T22284] netlink: 'syz.5.6661': attribute type 10 has an invalid length.
[  531.736126][T22284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.747727][T22284] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  531.914388][T22292] netlink: 'syz.5.6665': attribute type 1 has an invalid length.
[  531.917487][T22292] netlink: 'syz.5.6665': attribute type 3 has an invalid length.
[  531.920476][T22292] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6665'.
[  532.042273][T22300] IPv6: NLM_F_CREATE should be specified when creating new route
[  532.328270][T22317] IPv6: pim6reg1: Disabled Multicast RS
[  532.454571][T22323] : renamed from bond_slave_1 (while UP)
[  532.660006][T22336] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6684'.
[  532.732884][T22340] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6686'.
[  532.805799][T22344] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6688'.
[  532.820148][T22344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.831800][T22344] bond0 (unregistering): (slave c): Releasing backup interface
[  532.837899][T22344] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  532.843361][T22344] bond0 (unregistering): Released all slaves
[  533.841035][T22397] delete_channel: no stack
[  534.377582][T22419] delete_channel: no stack
[  534.660254][T22438] mac80211_hwsim hwsim33 wlan1: left promiscuous mode
[  534.721680][T22440] nbd: must specify a device to reconfigure
[  534.722100][T22443] validate_nla: 3 callbacks suppressed
[  534.722153][T22443] netlink: 'syz.5.6734': attribute type 10 has an invalid length.
[  534.730338][T22443] __nla_validate_parse: 3 callbacks suppressed
[  534.730395][T22443] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6734'.
[  534.807056][T22443] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  535.113631][T22466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.205765][T22472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.510758][T22493] netlink: 'syz.1.6758': attribute type 1 has an invalid length.
[  535.511496][T22494] bpf: Bad value for 'mode'
[  536.118652][T22525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.346836][ T5818] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  536.346900][ T5818] Bluetooth: hci2: connection err: -111
[  536.479978][T22549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.686817][T22564] delete_channel: no stack
[  537.578097][T22594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6804'.
[  538.257517][T22612] netlink: 'syz.2.6811': attribute type 9 has an invalid length.
[  538.259777][T22612] netlink: 'syz.2.6811': attribute type 11 has an invalid length.
[  538.282007][T22612] netlink: 'syz.2.6811': attribute type 12 has an invalid length.
[  538.295109][T22612] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6811'.
[  538.306638][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'.
[  538.399619][T22616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.524095][T22618] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6814'.
[  538.798244][T22629] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6819'.
[  538.906545][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6825'.
[  539.100749][T22658] netlink: 'syz.1.6835': attribute type 29 has an invalid length.
[  539.113648][T22658] netlink: 'syz.1.6835': attribute type 29 has an invalid length.
[  539.116839][T22658] netlink: 'syz.1.6835': attribute type 29 has an invalid length.
[  539.119520][T22658] netlink: 'syz.1.6835': attribute type 29 has an invalid length.
[  539.393421][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.413217][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.428165][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.432100][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.445534][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.448404][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  539.458604][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.123148][T22680] net_ratelimit: 2765 callbacks suppressed
[  540.123173][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.145924][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.149914][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.154598][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.158636][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.162599][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.167908][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.171916][T22680] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  540.355621][T22697] netlink: 'syz.5.6852': attribute type 39 has an invalid length.
[  540.457246][T22706] netlink: 'syz.2.6856': attribute type 1 has an invalid length.
[  540.535726][T22712] netlink: 'syz.2.6859': attribute type 1 has an invalid length.
[  540.592648][ T5818] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  540.595836][ T5818] Bluetooth: hci0: Invalid handle: 0x8000 > 0x0eff
[  540.700148][T22724] netlink: 'syz.5.6865': attribute type 10 has an invalid length.
[  540.730347][T22724] team0: Port device dummy0 added
[  540.735090][T22724] netlink: 'syz.5.6865': attribute type 10 has an invalid length.
[  540.748660][T22724] team0: Port device dummy0 removed
[  540.754649][T22724] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  540.944588][T22729] netlink: 'syz.1.6867': attribute type 2 has an invalid length.
[  540.947236][T22729] netlink: 'syz.1.6867': attribute type 2 has an invalid length.
[  541.428831][T22759] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6881'.
[  541.546031][T22771] netlink: 'syz.5.6885': attribute type 2 has an invalid length.
[  542.427193][T22803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6901'.
[  542.446400][T22803] netlink: 'syz.2.6901': attribute type 20 has an invalid length.
[  542.449648][T22803] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.542450][T22809] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6904'.
[  542.552240][T22811] netlink: 'syz.2.6905': attribute type 3 has an invalid length.
[  543.079674][T22853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6925'.
[  544.113413][ T5818] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  545.679528][T22933] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  545.886353][T22947] netlink: 740 bytes leftover after parsing attributes in process `syz.1.6969'.
[  546.028815][T22954] delete_channel: no stack
[  546.466189][T22988] validate_nla: 3 callbacks suppressed
[  546.466232][T22988] netlink: 'syz.1.6988': attribute type 1 has an invalid length.
[  546.472790][T22988] netlink: 'syz.1.6988': attribute type 3 has an invalid length.
[  546.519545][T22988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6988'.
[  546.733958][T23002] netlink: 'syz.2.6992': attribute type 29 has an invalid length.
[  546.736380][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6992'.
[  549.533297][T23035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7007'.
[  549.536664][T23035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7007'.
[  549.544834][T23035] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7007'.
[  549.647450][T23043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7011'.
[  549.765345][T23049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7014'.
[  549.880445][T23051] netlink: 'syz.1.7015': attribute type 1 has an invalid length.
[  550.019147][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7020'.
[  550.250710][T23075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7025'.
[  550.917935][T23090] syzkaller0: entered allmulticast mode
[  551.953899][T23104] syz.5.7038: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  551.959861][T23104] CPU: 1 UID: 0 PID: 23104 Comm: syz.5.7038 Not tainted syzkaller #0 PREEMPT(full) 
[  551.959884][T23104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  551.959897][T23104] Call Trace:
[  551.959906][T23104]  <TASK>
[  551.959916][T23104]  dump_stack_lvl+0xe8/0x150
[  551.959955][T23104]  warn_alloc+0x249/0x340
[  551.959979][T23104]  ? stack_trace_save+0xa9/0x100
[  551.960000][T23104]  ? __pfx_warn_alloc+0x10/0x10
[  551.960026][T23104]  ? kasan_save_track+0x4f/0x80
[  551.960044][T23104]  ? kasan_save_track+0x3e/0x80
[  551.960058][T23104]  ? __kasan_kmalloc+0x93/0xb0
[  551.960075][T23104]  ? __kmalloc_cache_noprof+0x31c/0x660
[  551.960091][T23104]  ? xskq_create+0x56/0x170
[  551.960107][T23104]  ? xsk_setsockopt+0x603/0x990
[  551.960128][T23104]  ? do_sock_setsockopt+0x17c/0x1b0
[  551.960148][T23104]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  551.960163][T23104]  ? do_syscall_64+0x14d/0xf80
[  551.960184][T23104]  __vmalloc_node_range_noprof+0x132/0x1730
[  551.960225][T23104]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  551.960248][T23104]  ? __kasan_kmalloc+0x93/0xb0
[  551.960271][T23104]  vmalloc_user_noprof+0xad/0xe0
[  551.960287][T23104]  ? xskq_create+0xbf/0x170
[  551.960303][T23104]  xskq_create+0xbf/0x170
[  551.960321][T23104]  xsk_init_queue+0x8a/0xe0
[  551.960339][T23104]  xsk_setsockopt+0x603/0x990
[  551.960385][T23104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  551.960412][T23104]  ? __pfx_aa_sk_perm+0x10/0x10
[  551.960438][T23104]  ? __fget_files+0x2a/0x420
[  551.960462][T23104]  ? aa_sock_opt_perm+0xff/0x1a0
[  551.960485][T23104]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  551.960529][T23104]  ? __pfx_xsk_setsockopt+0x10/0x10
[  551.960555][T23104]  do_sock_setsockopt+0x17c/0x1b0
[  551.960579][T23104]  __x64_sys_setsockopt+0x13d/0x1b0
[  551.960600][T23104]  do_syscall_64+0x14d/0xf80
[  551.960617][T23104]  ? trace_irq_disable+0x3b/0x150
[  551.960641][T23104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.960662][T23104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.960678][T23104] RIP: 0033:0x7f46f5d9c799
[  551.960693][T23104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.960708][T23104] RSP: 002b:00007f46f6cee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  551.960727][T23104] RAX: ffffffffffffffda RBX: 00007f46f6015fa0 RCX: 00007f46f5d9c799
[  551.960741][T23104] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  551.960751][T23104] RBP: 00007f46f5e32c99 R08: 0000000000000004 R09: 0000000000000000
[  551.960762][T23104] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  551.960772][T23104] R13: 00007f46f6016038 R14: 00007f46f6015fa0 R15: 00007ffe56354628
[  551.960799][T23104]  </TASK>
[  551.961816][T23104] Mem-Info:
[  552.064220][T23104] active_anon:9434 inactive_anon:0 isolated_anon:0
[  552.064220][T23104]  active_file:20483 inactive_file:38533 isolated_file:0
[  552.064220][T23104]  unevictable:1768 dirty:190 writeback:0
[  552.064220][T23104]  slab_reclaimable:11575 slab_unreclaimable:126867
[  552.064220][T23104]  mapped:18143 shmem:2477 pagetables:1931
[  552.064220][T23104]  sec_pagetables:0 bounce:0
[  552.064220][T23104]  kernel_misc_reclaimable:0
[  552.064220][T23104]  free:1055117 free_pcp:29087 free_cma:0
[  552.082243][T23104] Node 0 active_anon:19124kB inactive_anon:0kB active_file:36460kB inactive_file:135976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45632kB dirty:140kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7488kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  552.092527][T23104] Node 1 active_anon:18612kB inactive_anon:0kB active_file:45472kB inactive_file:18156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26940kB dirty:620kB writeback:0kB shmem:5032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5736kB pagetables:3360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  552.106968][T23104] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  552.117709][T23104] lowmem_reserve[]: 0 1587 2117 2117 2117
[  552.122009][T23104] Node 0 DMA32 free:1330028kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3732kB inactive_anon:0kB active_file:11488kB inactive_file:12kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625384kB mlocked:0kB bounce:0kB free_pcp:51172kB local_pcp:10764kB free_cma:0kB
[  552.131972][T23104] lowmem_reserve[]: 0 0 530 530 530
[  552.133997][T23104] Node 0 Normal free:18148kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15376kB inactive_anon:0kB active_file:24972kB inactive_file:135964kB unevictable:3536kB writepending:140kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:6160kB local_pcp:964kB free_cma:0kB
[  552.144315][T23104] lowmem_reserve[]: 0 0 0 0 0
[  552.145928][T23104] Node 1 Normal free:2864132kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18612kB inactive_anon:0kB active_file:45472kB inactive_file:18156kB unevictable:3536kB writepending:620kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:52248kB local_pcp:21908kB free_cma:0kB
[  552.157783][T23104] lowmem_reserve[]: 0 0 0 0 0
[  552.160441][T23104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  552.165787][T23104] Node 0 DMA32: 347*4kB (UM) 227*8kB (UME) 350*16kB (UME) 333*32kB (UME) 244*64kB (UME) 183*128kB (UM) 189*256kB (UM) 125*512kB (UM) 114*1024kB (UME) 53*2048kB (UME) 228*4096kB (UM) = 1330052kB
[  552.172000][T23104] Node 0 Normal: 95*4kB (UE) 45*8kB (UE) 322*16kB (UE) 116*32kB (UE) 118*64kB (UE) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17924kB
[  552.178142][T23104] Node 1 Normal: 5*4kB (ME) 552*8kB (UME) 447*16kB (UME) 526*32kB (UME) 600*64kB (UME) 218*128kB (UME) 112*256kB (UME) 69*512kB (UM) 32*1024kB (UME) 25*2048kB (UM) 640*4096kB (UM) = 2864132kB
[  552.186189][T23104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  552.190025][T23104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  552.195050][T23104] 61493 total pagecache pages
[  552.197631][T23104] 0 pages in swap cache
[  552.199473][T23104] Free swap  = 124996kB
[  552.201311][T23104] Total swap = 124996kB
[  552.203323][T23104] 1834877 pages RAM
[  552.205391][T23104] 0 pages HighMem/MovableOnly
[  552.207918][T23104] 390178 pages reserved
[  552.209589][T23104] 0 pages cma reserved
[  552.627331][T23131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7050'.
[  552.629971][T23131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7050'.
[  553.280810][T23185] netlink: 'syz.1.7076': attribute type 17 has an invalid length.
[  553.283832][T23185] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7076'.
[  553.611028][T23207] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7086'.
[  553.626956][T23209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7087'.
[  553.631113][T23209] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7087'.
[  553.635366][T23209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7087'.
[  554.152971][T23248] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7105'.
[  555.158590][T23257] netlink: 'syz.2.7109': attribute type 10 has an invalid length.
[  555.405207][T23272] netlink: 'syz.2.7117': attribute type 61 has an invalid length.
[  555.504952][T23284] netlink: 'syz.2.7122': attribute type 2 has an invalid length.
[  555.560293][T23292] netlink: 774 bytes leftover after parsing attributes in process `syz.5.7125'.
[  555.754642][T23302] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  555.757628][T23302] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  556.181001][T23299] syz.1.7130 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  556.203158][T23299] CPU: 1 UID: 0 PID: 23299 Comm: syz.1.7130 Not tainted syzkaller #0 PREEMPT(full) 
[  556.203184][T23299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  556.203191][T23299] Call Trace:
[  556.203195][T23299]  <TASK>
[  556.203225][T23299]  dump_stack_lvl+0xe8/0x150
[  556.203251][T23299]  dump_header+0xd3/0x4c0
[  556.203265][T23299]  oom_kill_process+0x3ab/0x970
[  556.203278][T23299]  out_of_memory+0x106c/0x1410
[  556.203287][T23299]  ? percpu_ref_put+0x19/0x180
[  556.203300][T23299]  ? __pfx___mutex_lock+0x10/0x10
[  556.203314][T23299]  ? __pfx_out_of_memory+0x10/0x10
[  556.203321][T23299]  ? do_raw_spin_unlock+0x4d/0x210
[  556.203336][T23299]  try_charge_memcg+0xc53/0x1560
[  556.203346][T23299]  ? __lock_acquire+0x6b5/0x2cf0
[  556.203363][T23299]  ? __pfx_try_charge_memcg+0x10/0x10
[  556.203371][T23299]  ? xa_load+0x60/0x210
[  556.203385][T23299]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  556.203397][T23299]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  556.203407][T23299]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  556.203418][T23299]  __swap_cache_prepare_and_add+0x52a/0x700
[  556.203440][T23299]  swap_cache_alloc_folio+0xf1/0x240
[  556.203453][T23299]  swap_cluster_readahead+0x369/0x690
[  556.203467][T23299]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  556.203484][T23299]  ? get_vma_policy+0x27b/0x3c0
[  556.203496][T23299]  swapin_readahead+0x196/0xc50
[  556.203512][T23299]  ? __pfx_swapin_readahead+0x10/0x10
[  556.203524][T23299]  ? swap_table_get+0x1e/0x260
[  556.203534][T23299]  ? swap_table_get+0x1e/0x260
[  556.203544][T23299]  ? swap_table_get+0x1e/0x260
[  556.203554][T23299]  ? swap_table_get+0x216/0x260
[  556.203565][T23299]  ? swap_cache_get_folio+0x513/0x520
[  556.203579][T23299]  do_swap_page+0x56f/0x5a20
[  556.203601][T23299]  ? do_swap_page+0x127/0x5a20
[  556.203611][T23299]  ? __pfx_do_swap_page+0x10/0x10
[  556.203621][T23299]  ? __pte_offset_map+0x1ae/0x240
[  556.203630][T23299]  ? pte_offset_map_rw_nolock+0xea/0x160
[  556.203645][T23299]  handle_mm_fault+0x12d2/0x3310
[  556.203663][T23299]  ? handle_mm_fault+0xee/0x3310
[  556.203677][T23299]  ? __pfx_handle_mm_fault+0x10/0x10
[  556.203692][T23299]  ? lock_vma_under_rcu+0x45a/0x500
[  556.203707][T23299]  ? perf_trace_preemptirq_template+0x26f/0x350
[  556.203739][T23299]  do_user_addr_fault+0xa73/0x1340
[  556.203756][T23299]  ? rcu_is_watching+0x15/0xb0
[  556.203768][T23299]  ? trace_page_fault_user+0x84/0x210
[  556.203779][T23299]  exc_page_fault+0x6a/0xc0
[  556.203791][T23299]  asm_exc_page_fault+0x26/0x30
[  556.203803][T23299] RIP: 0033:0x7fa5fa75cfce
[  556.203812][T23299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  556.203820][T23299] RSP: 002b:00007ffea644def8 EFLAGS: 00010246
[  556.203829][T23299] RAX: 0000000000000000 RBX: 00005555664a2500 RCX: 00007fa5fa75cfce
[  556.203835][T23299] RDX: 00007ffea644df50 RSI: 0000000000000000 RDI: 0000000000000000
[  556.203840][T23299] RBP: 00007fa5faa17da0 R08: 0000000000000000 R09: 0000000000000000
[  556.203844][T23299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000087d71
[  556.203850][T23299] R13: 00007fa5faa15fac R14: 0000000000087a63 R15: 00007ffea644e080
[  556.203868][T23299]  </TASK>
[  556.205140][T23299] memory: usage 307200kB, limit 307200kB, failcnt 2242
[  556.413349][T23299] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0
[  556.415885][T23299] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  556.418035][T23299] Memory cgroup stats for /syz1:
[  556.418301][T23299] cache 4096
[  556.420786][T23299] rss 0
[  556.421575][T23299] rss_huge 0
[  556.422448][T23299] shmem 0
[  556.433145][T23299] mapped_file 0
[  556.434491][T23299] dirty 0
[  556.435308][T23299] writeback 0
[  556.436234][T23299] workingset_refault_anon 1
[  556.437524][T23299] workingset_refault_file 0
[  556.438958][T23299] swap 122880
[  556.440152][T23299] swapcached 131072
[  556.441315][T23299] pgpgin 144174
[  556.442353][T23299] pgpgout 144171
[  556.453167][T23299] pgfault 222437
[  556.454588][T23299] pgmajfault 1
[  556.455867][T23299] inactive_anon 0
[  556.457287][T23299] active_anon 8192
[  556.458544][T23299] inactive_file 0
[  556.459691][T23299] active_file 4096
[  556.460915][T23299] unevictable 0
[  556.462179][T23299] hierarchical_memory_limit 314572800
[  556.476797][T23299] hierarchical_memsw_limit 9223372036854771712
[  556.479154][T23299] total_cache 4096
[  556.480556][T23299] total_rss 0
[  556.481798][T23299] total_rss_huge 0
[  556.493168][T23299] total_shmem 0
[  556.494540][T23299] total_mapped_file 0
[  556.496039][T23299] total_dirty 0
[  556.497365][T23299] total_writeback 0
[  556.498817][T23299] total_workingset_refault_anon 1
[  556.500719][T23299] total_workingset_refault_file 0
[  556.502530][T23299] total_swap 122880
[  556.511885][T23299] total_swapcached 131072
[  556.513949][T23299] total_pgpgin 144174
[  556.515151][T23299] total_pgpgout 144171
[  556.516374][T23299] total_pgfault 222445
[  556.517722][T23299] total_pgmajfault 1
[  556.519665][T23299] total_inactive_anon 0
[  556.521277][T23299] total_active_anon 8192
[  556.522852][T23299] total_inactive_file 0
[  556.525287][T23299] total_active_file 4096
[  556.526841][T23299] total_unevictable 0
[  556.528274][T23299] anon_cost 0
[  556.529510][T23299] file_cost 0
[  556.530743][T23299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7130,pid=23299,uid=0
[  556.538631][T23299] Memory cgroup out of memory: Killed process 23299 (syz.1.7130) total-vm:102228kB, anon-rss:1264kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  557.000553][T23335] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7145'.
[  558.016606][T23383] __nla_validate_parse: 1 callbacks suppressed
[  558.016620][T23383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7167'.
[  558.165043][T23389] netlink: 'syz.1.7170': attribute type 27 has an invalid length.
[  560.529550][T23419] netlink: 'syz.2.7184': attribute type 10 has an invalid length.
[  560.540796][T23419] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7184'.
[  561.217127][T23471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7206'.
[  561.308105][T23477] netlink: 'syz.2.7209': attribute type 89 has an invalid length.
[  561.656084][T23489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7214'.
[  562.316523][T23508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7224'.
[  563.423487][T23532] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.7233'.
[  564.469306][T23527] syzkaller0: entered promiscuous mode
[  564.471974][T23527] syzkaller0: entered allmulticast mode
[  567.431526][T23588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7256'.
[  567.443100][T23588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7256'.
[  568.539232][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  568.545485][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  568.965100][T23632] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7277'.
[  569.021751][T23636] netlink: 'syz.5.7279': attribute type 10 has an invalid length.
[  569.055243][T23636] team0: Device wg1 is of different type
[  569.066409][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7281'.
[  569.607954][   T33] audit: type=1107 audit(1774549633.522:3): pid=23674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  570.617112][ T5818] Bluetooth: hci2: command 0x0406 tx timeout
[  575.737298][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  577.910373][T23697] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7304'.
[  578.652742][T23721] netlink: 'syz.1.7315': attribute type 10 has an invalid length.
[  578.901947][T23739] netlink: 'syz.1.7323': attribute type 3 has an invalid length.
[  578.909711][T23739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7323'.
[  579.002636][T23745] 6: renamed from wg2 (while UP)
[  579.982569][T23761] netlink: 'syz.2.7334': attribute type 1 has an invalid length.
[  579.986161][T23759] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7333'.
[  580.532302][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7353'.
[  580.579367][T23806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7354'.
[  580.598266][T23810] netlink: 'syz.1.7356': attribute type 10 has an invalid length.
[  580.600764][T23810] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.603215][T23810] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.610726][T23810] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.612871][T23810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.615230][T23810] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.617318][T23810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.628275][T23810] team0: Port device bridge0 added
[  580.707848][T23820] netlink: 824 bytes leftover after parsing attributes in process `syz.2.7361'.
[  580.850322][T23833] lo speed is unknown, defaulting to 1000
[  580.857419][T23833] lo speed is unknown, defaulting to 1000
[  580.859954][T23833] lo speed is unknown, defaulting to 1000
[  581.008725][T23833] infiniband syz2: set active
[  581.010945][T23833] infiniband syz2: added lo
[  581.023077][   T61] lo speed is unknown, defaulting to 1000
[  581.053299][T23833] RDS/IB: syz2: added
[  581.054901][T23833] smc: adding ib device syz2 with port count 1
[  581.065983][T23833] smc:    ib device syz2 port 1 has no pnetid
[  581.069881][   T61] lo speed is unknown, defaulting to 1000
[  581.074738][T23833] lo speed is unknown, defaulting to 1000
[  581.081372][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7374'.
[  581.217911][T23833] lo speed is unknown, defaulting to 1000
[  581.352531][T23833] lo speed is unknown, defaulting to 1000
[  584.525812][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7391'.
[  584.531070][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7391'.
[  584.635697][T23892] netlink: 'syz.2.7394': attribute type 6 has an invalid length.
[  584.638688][T23892] netlink: 340 bytes leftover after parsing attributes in process `syz.2.7394'.
[  585.954013][T23938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7415'.
[  585.957001][T23938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7415'.
[  586.288576][T23959] netlink: 'syz.2.7425': attribute type 10 has an invalid length.
[  586.322492][T23959] bond0: (slave geneve0): Releasing backup interface
[  586.628863][T23975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7434'.
[  586.643295][T23975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7434'.
[  586.691502][T23976] delete_channel: no stack
[  586.771873][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7436'.
[  588.071453][T24009] netlink: 'syz.2.7448': attribute type 4 has an invalid length.
[  588.074038][T24009] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7448'.
[  588.113270][T24011] netlink: 'syz.5.7449': attribute type 6 has an invalid length.
[  588.123329][T24011] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7449'.
[  588.525377][T24024] delete_channel: no stack
[  589.494480][T24068] netlink: 'syz.5.7475': attribute type 7 has an invalid length.
[  590.398275][T24090] netlink: 'syz.2.7485': attribute type 1 has an invalid length.
[  591.163227][T24125] netlink: 'syz.2.7502': attribute type 16 has an invalid length.
[  591.166653][T24125] netlink: 'syz.2.7502': attribute type 17 has an invalid length.
[  591.226969][T24125] vcan0: left promiscuous mode
[  591.235772][T24125] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.243548][T24125] 8021q: adding VLAN 0 to HW filter on device team0
[  591.559521][T24125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  592.751427][T24135] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  592.763508][T24135] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  593.498831][T24152] __nla_validate_parse: 2 callbacks suppressed
[  593.498849][T24152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7513'.
[  593.511726][T24152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7513'.
[  593.514829][T24152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7513'.
[  593.517377][T24152] netlink: 'syz.2.7513': attribute type 6 has an invalid length.
[  594.384225][T24184] netlink: 'syz.5.7528': attribute type 10 has an invalid length.
[  594.386945][T24184] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7528'.
[  595.111618][T24197] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7534'.
[  595.611209][T24206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.943317][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7545'.
[  596.387113][T24230] netlink: 'syz.2.7548': attribute type 29 has an invalid length.
[  596.394603][T24229] netlink: 'syz.2.7548': attribute type 29 has an invalid length.
[  596.401523][T24230] netlink: 'syz.2.7548': attribute type 29 has an invalid length.
[  597.730705][T24257] netlink: 'syz.2.7562': attribute type 39 has an invalid length.
[  597.950097][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7563'.
[  598.322816][T24265] delete_channel: no stack
[  598.427466][T24268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7566'.
[  598.430882][T24268] netlink: 46 bytes leftover after parsing attributes in process `syz.2.7566'.
[  598.446647][T24268] netlink: 46 bytes leftover after parsing attributes in process `syz.2.7566'.
[  600.543811][T24298] netlink: 'syz.2.7580': attribute type 1 has an invalid length.
[  601.066762][T24316] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  601.303620][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  601.314974][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  601.320713][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  601.326365][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  601.328957][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  601.375439][T24324] lo speed is unknown, defaulting to 1000
[  601.772634][T24346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7602'.
[  601.780664][T24346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7602'.
[  601.920736][T24324] chnl_net:caif_netlink_parms(): no params data found
[  601.996770][T24324] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.998944][T24324] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.001036][T24324] bridge_slave_0: entered allmulticast mode
[  602.004430][T24324] bridge_slave_0: entered promiscuous mode
[  602.007440][T24324] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.009648][T24324] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.012116][T24324] bridge_slave_1: entered allmulticast mode
[  602.016840][T24324] bridge_slave_1: entered promiscuous mode
[  602.040108][T24360] netlink: 'syz.2.7606': attribute type 10 has an invalid length.
[  602.042431][T24360] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7606'.
[  602.065232][T24324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.069588][T24324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.096030][T24324] team0: Port device team_slave_0 added
[  602.104769][T24324] team0: Port device team_slave_1 added
[  602.171614][T24324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.173844][T24324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.182501][T24324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.204449][T24324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.206640][T24324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.234293][T24324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.287001][T24324] hsr_slave_0: entered promiscuous mode
[  602.292803][T24324] hsr_slave_1: entered promiscuous mode
[  602.302006][T24324] debugfs: 'hsr0' already exists in 'hsr'
[  602.307204][T24324] Cannot create hsr debugfs directory
[  602.991264][T24324] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  603.005353][T24324] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  603.025180][T24324] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  603.029772][T24324] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  603.179797][T24324] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.205692][T24324] 8021q: adding VLAN 0 to HW filter on device team0
[  603.222214][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.224523][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.258326][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.260554][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.285890][T24324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  603.289339][T24324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  603.413519][ T5822] Bluetooth: hci3: command tx timeout
[  603.476665][T24324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.765644][T24324] veth0_vlan: entered promiscuous mode
[  603.785359][T24324] veth1_vlan: entered promiscuous mode
[  603.825132][T24324] veth0_macvtap: entered promiscuous mode
[  603.829104][T24324] veth1_macvtap: entered promiscuous mode
[  603.838175][T24324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.842380][T24324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.854255][T17639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.856780][T17639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.859919][T17639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.862440][T17639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.966211][ T8905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.969038][ T8905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.011482][ T8900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.014127][ T8900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.092894][T24454] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7591'.
[  604.480327][T24480] openvswitch: netlink: Missing valid actions attribute.
[  604.482452][T24480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.646659][T24493] tc_dump_action: action bad kind
[  605.218755][T24536] netlink: 'syz.4.7651': attribute type 5 has an invalid length.
[  605.272486][T24538] netlink: 'syz.2.7652': attribute type 10 has an invalid length.
[  605.339260][T24538] team0: Port device geneve1 added
[  605.342046][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.354696][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.357374][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.359899][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.494602][ T5822] Bluetooth: hci3: command tx timeout
[  606.227324][T24558] netlink: 'syz.4.7661': attribute type 29 has an invalid length.
[  606.233851][T24557] netlink: 'syz.4.7661': attribute type 29 has an invalid length.
[  606.236406][T24558] netlink: 'syz.4.7661': attribute type 29 has an invalid length.
[  606.497869][T24575] netlink: 'syz.2.7669': attribute type 11 has an invalid length.
[  606.928755][T24582] lo speed is unknown, defaulting to 1000
[  606.980381][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7675'.
[  607.573369][ T5822] Bluetooth: hci3: command tx timeout
[  607.766224][T24621] netlink: 'syz.2.7689': attribute type 1 has an invalid length.
[  607.847146][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7690'.
[  607.991230][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7695'.
[  608.092017][T24642] netlink: 'syz.2.7699': attribute type 1 has an invalid length.
[  608.557434][T24671] netlink: 'syz.4.7712': attribute type 1 has an invalid length.
[  608.560075][T24671] netlink: 'syz.4.7712': attribute type 4 has an invalid length.
[  608.562920][T24671] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7712'.
[  609.031428][ T5822] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  609.654251][ T5822] Bluetooth: hci3: command tx timeout
[  609.788966][T24744] netlink: 'syz.4.7748': attribute type 4 has an invalid length.
[  609.791873][T24744] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7748'.
[  609.799191][T24744] .`: renamed from bond0 (while UP)
[  610.498594][T24777] delete_channel: no stack
[  610.797710][T24789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7769'.
[  610.851856][T24793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7771'.
[  611.508201][T24823] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7785'.
[  611.511751][T24825] netlink: 'syz.2.7786': attribute type 25 has an invalid length.
[  611.514758][T24825] netlink: 'syz.2.7786': attribute type 29 has an invalid length.
[  611.518657][T24825] netlink: 'syz.2.7786': attribute type 25 has an invalid length.
[  611.521684][T24825] netlink: 'syz.2.7786': attribute type 9 has an invalid length.
[  611.966630][T24843] netlink: 165240 bytes leftover after parsing attributes in process `syz.2.7796'.
[  612.398433][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  612.401905][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  612.407739][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  612.411840][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  612.421579][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  612.476487][T24855] lo speed is unknown, defaulting to 1000
[  612.537048][ T5818] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  612.954553][T24866] netlink: 'syz.4.7806': attribute type 21 has an invalid length.
[  612.984754][ T5833] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.035880][T24873] netlink: 'syz.2.7808': attribute type 89 has an invalid length.
[  613.071158][ T5833] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.093913][ T5822] ------------[ cut here ]------------
[  613.095844][ T5822] refcnt < 0
[  613.095853][ T5822] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u11:3/5822
[  613.101568][ T5822] Modules linked in:
[  613.103555][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) 
[  613.106476][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  613.109527][ T5822] Workqueue: hci3 hci_conn_timeout
[  613.111141][ T5822] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  613.112847][ T5822] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 8c b9 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 72 b9 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  613.119271][ T5822] RSP: 0018:ffffc900060bfab0 EFLAGS: 00010293
[  613.121587][ T5822] RAX: ffffffff8aa1e8be RBX: ffff8881b0718000 RCX: ffff888173400000
[  613.124938][ T5822] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  613.127869][ T5822] RBP: 00000000ffffffff R08: ffff8881b0718013 R09: 1ffff110360e3002
[  613.130831][ T5822] R10: dffffc0000000000 R11: ffffed10360e3003 R12: dffffc0000000000
[  613.134524][ T5822] R13: ffff888105af8918 R14: ffff8881b0718a40 R15: ffff8881b0718010
[  613.137607][ T5822] FS:  0000000000000000(0000) GS:ffff8882a945a000(0000) knlGS:0000000000000000
[  613.141374][ T5822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  613.144145][ T5822] CR2: 0000000000000000 CR3: 0000000111534000 CR4: 00000000000006f0
[  613.147102][ T5822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  613.150055][ T5822] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  613.153296][ T5822] Call Trace:
[  613.154561][ T5822]  <TASK>
[  613.155659][ T5822]  ? process_scheduled_works+0xa8d/0x18c0
[  613.157476][ T5822]  process_scheduled_works+0xb6e/0x18c0
[  613.159529][ T5822]  ? __pfx_process_scheduled_works+0x10/0x10
[  613.161290][ T5822]  ? assign_work+0x3d5/0x5e0
[  613.162645][ T5822]  worker_thread+0xa53/0xfc0
[  613.164320][ T5822]  kthread+0x388/0x470
[  613.165495][ T5822]  ? __pfx_worker_thread+0x10/0x10
[  613.167005][ T5822]  ? __pfx_kthread+0x10/0x10
[  613.168359][ T5822]  ret_from_fork+0x51e/0xb90
[  613.169730][ T5822]  ? __pfx_ret_from_fork+0x10/0x10
[  613.171224][ T5822]  ? __switch_to+0xc7d/0x1450
[  613.172575][ T5822]  ? __pfx_kthread+0x10/0x10
[  613.174123][ T5822]  ret_from_fork_asm+0x1a/0x30
[  613.175543][ T5822]  </TASK>
[  613.176478][ T5822] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  613.178605][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) 
[  613.181363][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  613.184458][ T5822] Workqueue: hci3 hci_conn_timeout
[  613.185975][ T5822] Call Trace:
[  613.186983][ T5822]  <TASK>
[  613.187904][ T5822]  vpanic+0x56c/0xa60
[  613.189158][ T5822]  ? __pfx__printk+0x10/0x10
[  613.190540][ T5822]  ? __pfx_vpanic+0x10/0x10
[  613.192009][ T5822]  ? is_bpf_text_address+0x292/0x2b0
[  613.193769][ T5822]  ? is_bpf_text_address+0x26/0x2b0
[  613.195372][ T5822]  panic+0xc5/0xd0
[  613.196467][ T5822]  ? __pfx_panic+0x10/0x10
[  613.197800][ T5822]  ? ret_from_fork_asm+0x1a/0x30
[  613.199412][ T5822]  __warn+0x315/0x4f0
[  613.200978][ T5822]  ? hci_conn_timeout+0xff/0x2c0
[  613.202441][ T5822]  ? hci_conn_timeout+0xff/0x2c0
[  613.203899][ T5822]  __report_bug+0x29a/0x540
[  613.205191][ T5822]  ? __pfx_stack_trace_save+0x10/0x10
[  613.206764][ T5822]  ? hci_conn_timeout+0xff/0x2c0
[  613.208189][ T5822]  ? __pfx___report_bug+0x10/0x10
[  613.209951][ T5822]  ? add_lock_to_list+0xc7/0x100
[  613.211835][ T5822]  ? lockdep_unlock+0x5d/0xd0
[  613.213400][ T5822]  ? __lock_acquire+0x146e/0x2cf0
[  613.215245][ T5822]  ? hci_conn_timeout+0xff/0x2c0
[  613.216963][ T5822]  report_bug+0x16a/0x220
[  613.218515][ T5822]  ? hci_conn_timeout+0xff/0x2c0
[  613.220274][ T5822]  ? hci_conn_timeout+0x101/0x2c0
[  613.222002][ T5822]  handle_bug+0x9c/0x200
[  613.223591][ T5822]  exc_invalid_op+0x1a/0x50
[  613.225028][ T5822]  asm_exc_invalid_op+0x1a/0x20
[  613.226725][ T5822] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  613.228511][ T5822] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 8c b9 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 72 b9 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  613.234234][ T5822] RSP: 0018:ffffc900060bfab0 EFLAGS: 00010293
[  613.236001][ T5822] RAX: ffffffff8aa1e8be RBX: ffff8881b0718000 RCX: ffff888173400000
[  613.238313][ T5822] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  613.240624][ T5822] RBP: 00000000ffffffff R08: ffff8881b0718013 R09: 1ffff110360e3002
[  613.242901][ T5822] R10: dffffc0000000000 R11: ffffed10360e3003 R12: dffffc0000000000
[  613.245162][ T5822] R13: ffff888105af8918 R14: ffff8881b0718a40 R15: ffff8881b0718010
[  613.247528][ T5822]  ? hci_conn_timeout+0xfe/0x2c0
[  613.249295][ T5822]  ? process_scheduled_works+0xa8d/0x18c0
[  613.251116][ T5822]  process_scheduled_works+0xb6e/0x18c0
[  613.252754][ T5822]  ? __pfx_process_scheduled_works+0x10/0x10
[  613.254472][ T5822]  ? assign_work+0x3d5/0x5e0
[  613.255843][ T5822]  worker_thread+0xa53/0xfc0
[  613.257244][ T5822]  kthread+0x388/0x470
[  613.258438][ T5822]  ? __pfx_worker_thread+0x10/0x10
[  613.259925][ T5822]  ? __pfx_kthread+0x10/0x10
[  613.261287][ T5822]  ret_from_fork+0x51e/0xb90
[  613.262641][ T5822]  ? __pfx_ret_from_fork+0x10/0x10
[  613.264122][ T5822]  ? __switch_to+0xc7d/0x1450
[  613.265489][ T5822]  ? __pfx_kthread+0x10/0x10
[  613.266848][ T5822]  ret_from_fork_asm+0x1a/0x30
[  613.268239][ T5822]  </TASK>
[  613.269715][ T5822] Kernel Offset: disabled
[  613.270984][ T5822] Rebooting in 86400 seconds..
