last executing test programs:

5m38.749607246s ago: executing program 32 (id=263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m30.981820896s ago: executing program 33 (id=382):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x4}}]}, 0x20}}, 0x0)

4m19.132153078s ago: executing program 34 (id=1132):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000180), 0x4)

3m34.439920592s ago: executing program 5 (id=1738):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3m34.439157925s ago: executing program 5 (id=1740):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000007c000480780001800b00010074617267657400006800028050000300cd4b6abe4203f10e000000000000ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a0001004e464c4f4700000008000240000000000900010073797a30000000000900020073797a32"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m34.275327605s ago: executing program 5 (id=1744):
bpf$MAP_CREATE(0x0, 0x0, 0x13)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}], 0x1}, 0x4000000)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0xa}, 0x84)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

3m34.159203417s ago: executing program 5 (id=1746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09f3ffff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44)

3m34.107604953s ago: executing program 5 (id=1748):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]})

3m34.071235704s ago: executing program 5 (id=1750):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@getsa={0x34, 0x12, 0x3, 0x70bd2a, 0x25dfdbff, {@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d5, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3m19.043889324s ago: executing program 35 (id=1750):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@getsa={0x34, 0x12, 0x3, 0x70bd2a, 0x25dfdbff, {@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d5, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3m10.544314278s ago: executing program 2 (id=2020):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0xd, &(0x7f0000000000)=[{&(0x7f00000002c0)="0800a0df167e6d2216d638ab90df14df0758af4a042607e9d0419c", 0x1b}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x0)

3m10.543475234s ago: executing program 2 (id=2022):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20)

3m10.47350711s ago: executing program 2 (id=2023):
r0 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x1)

3m10.469328202s ago: executing program 2 (id=2026):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0)

3m10.293157891s ago: executing program 2 (id=2030):
r0 = socket$unix(0x1, 0x2, 0x0)
write$cgroup_type(r0, 0x0, 0x0)

3m9.923641035s ago: executing program 2 (id=2036):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

3m9.781140062s ago: executing program 36 (id=2036):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

3m1.276142728s ago: executing program 7 (id=2144):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x40, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newtaction={0x14, 0x30, 0xffff, 0x4000, 0xe4, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3)

3m1.153397754s ago: executing program 7 (id=2148):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m1.032550151s ago: executing program 7 (id=2150):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120)

3m0.05641269s ago: executing program 7 (id=2159):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x2000, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)

2m59.868363339s ago: executing program 7 (id=2161):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

2m59.539629968s ago: executing program 7 (id=2164):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x119, 0x8, &(0x7f0000000000), 0x4)

2m59.14318512s ago: executing program 37 (id=2164):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x119, 0x8, &(0x7f0000000000), 0x4)

2m19.167731664s ago: executing program 6 (id=2884):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x0, 0x18, 0x0, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000)

2m18.893584352s ago: executing program 6 (id=2888):
bpf$ITER_CREATE(0x21, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x300440f1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

2m18.671043661s ago: executing program 6 (id=2892):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4)

2m18.543119693s ago: executing program 6 (id=2896):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

2m18.542273357s ago: executing program 6 (id=2898):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m18.305170287s ago: executing program 6 (id=2909):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0xdc, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x800)

2m18.141645784s ago: executing program 38 (id=2909):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0xdc, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x800)

1m51.752359321s ago: executing program 8 (id=3356):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28)

1m51.752011832s ago: executing program 8 (id=3357):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0)

1m51.397305721s ago: executing program 8 (id=3358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0)

1m51.339632996s ago: executing program 8 (id=3361):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020056a705251e638294ff0051f60a84c9f4d4938037e786a6d072c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)

1m51.199130561s ago: executing program 8 (id=3363):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]})

1m51.198559936s ago: executing program 8 (id=3365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc)

1m36.129862637s ago: executing program 39 (id=3365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r1, 0x0, 0x1c000000007400}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc)

1m33.380982292s ago: executing program 1 (id=3566):
socket(0x840000000002, 0x3, 0xff)
close(0x3)

1m33.330493193s ago: executing program 1 (id=3567):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80092, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

1m33.25939121s ago: executing program 1 (id=3570):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x25}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

1m32.80066744s ago: executing program 1 (id=3574):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280), 0x1, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

1m32.639917032s ago: executing program 1 (id=3575):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff3}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x4, 0x0, {0x2, 0x3, 0x0, 0x0, {0xfffc, 0x4e22, [0x2, 0xffffffff], [0x803, 0x0, 0x38, 0x1], 0x0, [0x1, 0x7fffffff]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x200040c4)

1m32.330521996s ago: executing program 1 (id=3580):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b7000000000076010000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x54)

1m32.059949056s ago: executing program 40 (id=3580):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007111b7000000000076010000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x54)

1m19.568726563s ago: executing program 9 (id=3760):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m19.568255178s ago: executing program 9 (id=3761):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x4, 0xfffc, 0x4}, {0x1, 0x0, 0x401, 0x1}]}, 0x94)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000000c0)="81", 0x1}], 0x1}, 0x4000801)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10)

1m18.629711845s ago: executing program 9 (id=3773):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0x5, 0x12)

1m18.629478542s ago: executing program 9 (id=3774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)

1m18.53004496s ago: executing program 9 (id=3775):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0)

1m18.48921165s ago: executing program 9 (id=3776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x24008000)

1m3.428325595s ago: executing program 41 (id=3776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x24008000)

728.887128ms ago: executing program 3 (id=4564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

671.889171ms ago: executing program 3 (id=4566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c00000012"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x8, 0xe, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

562.617229ms ago: executing program 0 (id=4570):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)

562.211813ms ago: executing program 3 (id=4571):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x5}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xa}, 0x21, 0x1, 0x1, 0x4, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x80)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000480)=ANY=[@ANYBLOB='gid'])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f2, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x8482, 0x0, 0x0, 0x0, 0x7, 0x3, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)

493.666151ms ago: executing program 0 (id=4573):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

493.452068ms ago: executing program 0 (id=4574):
r0 = getpid()
r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x8}, 0x100081, 0xfd3b, 0x0, 0x1, 0x40000000, 0x445feeaf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x0, 0x0}, 0x30)

292.588465ms ago: executing program 0 (id=4577):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000bc0)="cf", 0x0}, 0x20)

214.683777ms ago: executing program 4 (id=4579):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000080))

214.483659ms ago: executing program 0 (id=4580):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x254000, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000040)={'erspan0\x00', 0x200})
sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r6 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
close(0x3)

144.77767ms ago: executing program 4 (id=4581):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000840)="38e937", 0x3}, {&(0x7f0000001980)="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", 0x1000}], 0x3}, 0x0)

144.381998ms ago: executing program 4 (id=4582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500010125bd0e28386056e879284d000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)

108.338228ms ago: executing program 3 (id=4583):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r1], 0x7)

106.776412ms ago: executing program 4 (id=4584):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.378028ms ago: executing program 3 (id=4585):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000012c0)='cgroup.procs\x00', 0x2, 0x0)
close(r1)

880.578µs ago: executing program 4 (id=4586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b803c"], 0x24}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)

481.463µs ago: executing program 0 (id=4587):
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x1946}, 0x103f0, 0x0, 0x0, 0x8, 0x7fff, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

247.192µs ago: executing program 4 (id=4588):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89e0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080))

0s ago: executing program 3 (id=4589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x20000000000000a, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

ntered promiscuous mode
[  227.998600][T10457] hsr_slave_1: entered promiscuous mode
[  228.000824][T10457] debugfs: 'hsr0' already exists in 'hsr'
[  228.002644][T10457] Cannot create hsr debugfs directory
[  228.047214][   T12] tipc: Left network mode
[  228.409886][T10457] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  228.429107][T10457] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  228.459929][T10457] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  228.481888][T10457] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  228.754444][ T5198] Bluetooth: hci0: command tx timeout
[  228.837996][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.896331][T10457] 8021q: adding VLAN 0 to HW filter on device team0
[  228.936325][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.938681][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.982052][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.984415][ T7528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.011637][   T12] hsr_slave_0: left promiscuous mode
[  229.016881][   T12] hsr_slave_1: left promiscuous mode
[  229.019376][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.022742][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.053356][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.056975][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.068480][   T12] veth0_macvtap: left promiscuous mode
[  229.452232][   T12] team0 (unregistering): Port device team_slave_1 removed
[  229.529672][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1926'.
[  229.553450][T10594] IPv6: NLM_F_CREATE should be specified when creating new route
[  229.575201][T10596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.667088][T10457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.779895][T10606] netlink: 'syz.2.1929': attribute type 28 has an invalid length.
[  229.834007][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.387701][T10457] veth0_vlan: entered promiscuous mode
[  230.413422][T10457] veth1_vlan: entered promiscuous mode
[  230.491833][T10457] veth0_macvtap: entered promiscuous mode
[  230.507689][T10457] veth1_macvtap: entered promiscuous mode
[  230.525328][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.535287][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.546497][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.554699][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.567683][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.571916][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.218166][ T5198] Bluetooth: hci0: command tx timeout
[  231.415303][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.418869][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.477184][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.481354][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.540589][T10660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1943'.
[  231.545652][T10660] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1943'.
[  231.712789][T10667] netlink: 'syz.1.1945': attribute type 3 has an invalid length.
[  231.727057][T10667] netlink: 'syz.1.1945': attribute type 3 has an invalid length.
[  231.908572][T10678] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1950'.
[  232.571851][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1961'.
[  232.589194][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1961'.
[  232.594122][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'.
[  232.729241][T10712] syzkaller0: tun_chr_ioctl cmd 21731
[  232.888920][T10727] netlink: 'syz.2.1972': attribute type 2 has an invalid length.
[  232.892555][T10727] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1972'.
[  232.943090][T10730] netlink: set zone limit has 4 unknown bytes
[  233.045645][T10736] netlink: 'syz.2.1975': attribute type 17 has an invalid length.
[  233.048060][T10736] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1975'.
[  233.051641][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.054268][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.056884][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.059181][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.295448][ T5198] Bluetooth: hci0: command tx timeout
[  233.598782][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1988'.
[  233.804860][T10780] netlink: 'syz.2.1996': attribute type 13 has an invalid length.
[  233.922219][T10780] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  233.933867][T10780] syzkaller0: entered promiscuous mode
[  233.935989][T10780] syzkaller0: entered allmulticast mode
[  234.534073][T10805] __nla_validate_parse: 1 callbacks suppressed
[  234.534130][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'.
[  235.207751][T10849] netlink: 'syz.6.2027': attribute type 5 has an invalid length.
[  235.210681][T10849] netlink: 'syz.6.2027': attribute type 5 has an invalid length.
[  235.387287][ T5198] Bluetooth: hci0: command tx timeout
[  235.924474][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.928879][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.932597][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.943833][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.951645][T10879] netlink: 'syz.6.2043': attribute type 2 has an invalid length.
[  235.954992][T10879] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2043'.
[  235.959356][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.975841][T10878] netlink: 'syz.1.2044': attribute type 10 has an invalid length.
[  236.033292][T10873] lo speed is unknown, defaulting to 1000
[  236.037920][T10873] lo speed is unknown, defaulting to 1000
[  236.426734][T10873] chnl_net:caif_netlink_parms(): no params data found
[  236.489050][T10873] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.491349][T10873] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.496556][T10873] bridge_slave_0: entered allmulticast mode
[  236.499343][T10873] bridge_slave_0: entered promiscuous mode
[  236.504093][T10873] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.506426][T10873] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.508672][T10873] bridge_slave_1: entered allmulticast mode
[  236.511620][T10873] bridge_slave_1: entered promiscuous mode
[  236.535822][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.541727][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.565832][T10873] team0: Port device team_slave_0 added
[  236.569777][T10873] team0: Port device team_slave_1 added
[  236.591110][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.593257][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.601107][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.607551][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.609715][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.617769][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.649378][T10873] hsr_slave_0: entered promiscuous mode
[  236.655288][T10873] hsr_slave_1: entered promiscuous mode
[  236.658985][T10873] debugfs: 'hsr0' already exists in 'hsr'
[  236.660798][T10873] Cannot create hsr debugfs directory
[  236.816027][T10873] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  236.833803][T10873] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  236.838947][T10873] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  236.860818][T10873] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  236.909280][T10873] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.911501][T10873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.913876][T10873] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.916266][T10873] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.944217][T10906] delete_channel: no stack
[  236.990611][T10873] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.999692][T10873] 8021q: adding VLAN 0 to HW filter on device team0
[  237.007579][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.163117][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.182964][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.185953][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.195474][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.198337][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.425470][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.670726][T10873] veth0_vlan: entered promiscuous mode
[  237.683360][T10873] veth1_vlan: entered promiscuous mode
[  237.725980][T10873] veth0_macvtap: entered promiscuous mode
[  237.731974][T10873] veth1_macvtap: entered promiscuous mode
[  237.761516][T10873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.769413][T10942] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2062'.
[  237.780103][T10873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.793455][ T5826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.799311][ T5826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.802081][ T5826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.818522][ T5826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.880147][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.883071][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.910458][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.912983][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.976201][T10948] netlink: 'syz.1.2065': attribute type 1 has an invalid length.
[  238.013944][ T5829] Bluetooth: hci2: command tx timeout
[  238.506353][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2077'.
[  238.576508][T10980] netlink: 5240 bytes leftover after parsing attributes in process `syz.7.2077'.
[  238.885356][T10996] netlink: 'syz.7.2085': attribute type 10 has an invalid length.
[  238.889081][T10996] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2085'.
[  239.826409][T11004] netlink: 'syz.1.2088': attribute type 29 has an invalid length.
[  239.830464][T11004] netlink: 'syz.1.2088': attribute type 29 has an invalid length.
[  240.093933][ T5829] Bluetooth: hci2: command tx timeout
[  240.102328][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2099'.
[  241.405548][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2111'.
[  242.173932][ T5829] Bluetooth: hci2: command tx timeout
[  243.609357][T11100] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2118'.
[  243.983318][T11131] netlink: 'syz.6.2132': attribute type 39 has an invalid length.
[  244.013712][T11131] hsr_slave_1 (unregistering): left promiscuous mode
[  244.129121][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2138'.
[  244.136689][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2138'.
[  244.195921][T11142] netlink: 'syz.7.2139': attribute type 6 has an invalid length.
[  244.199046][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2139'.
[  244.263924][ T5829] Bluetooth: hci2: command tx timeout
[  244.359865][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  245.861238][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 150 seconds
[  246.003528][ T5829] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  246.331765][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.453245][T11202] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.2166'.
[  246.495301][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.530376][ T5198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.533881][ T5198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.543203][ T5198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.550629][ T5198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.555642][ T5198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.595980][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.644636][T11207] lo speed is unknown, defaulting to 1000
[  246.647744][T11207] lo speed is unknown, defaulting to 1000
[  246.718205][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.922538][   T13] bridge_slave_1: left allmulticast mode
[  246.926527][   T13] bridge_slave_1: left promiscuous mode
[  246.930808][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.935479][   T13] bridge_slave_0: left allmulticast mode
[  246.937573][   T13] bridge_slave_0: left promiscuous mode
[  246.939411][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.120647][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.128778][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.139321][   T13] bond0 (unregistering): Released all slaves
[  247.147779][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2173'.
[  247.193592][T11232] netlink: 'syz.1.2178': attribute type 1 has an invalid length.
[  247.196203][T11232] netlink: 'syz.1.2178': attribute type 1 has an invalid length.
[  247.268502][ T5198] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  247.490542][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2183'.
[  247.496119][T11248] netlink: 'syz.6.2183': attribute type 12 has an invalid length.
[  247.498695][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2183'.
[  247.810628][T11207] chnl_net:caif_netlink_parms(): no params data found
[  247.866418][   T13] hsr_slave_0: left promiscuous mode
[  247.871682][   T13] hsr_slave_1: left promiscuous mode
[  247.879700][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.891319][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.894134][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.896302][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.901987][   T13] veth1_macvtap: left promiscuous mode
[  247.913775][   T13] veth0_macvtap: left promiscuous mode
[  248.037600][T11284] netlink: 'syz.1.2196': attribute type 10 has an invalid length.
[  248.075546][   T13] team0 (unregistering): Port device team_slave_1 removed
[  248.088602][   T13] team0 (unregistering): Port device team_slave_0 removed
[  248.221214][T11284] team0: Device wg1 is of different type
[  248.291094][T11207] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.297761][T11207] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.300317][T11207] bridge_slave_0: entered allmulticast mode
[  248.306419][T11207] bridge_slave_0: entered promiscuous mode
[  248.309658][T11207] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.311778][T11207] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.314148][T11207] bridge_slave_1: entered allmulticast mode
[  248.316801][T11207] bridge_slave_1: entered promiscuous mode
[  248.349956][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.355595][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.383518][T11207] team0: Port device team_slave_0 added
[  248.387323][T11207] team0: Port device team_slave_1 added
[  248.438051][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.440099][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.474550][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.480979][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.485124][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.492245][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.549589][T11207] hsr_slave_0: entered promiscuous mode
[  248.566652][T11207] hsr_slave_1: entered promiscuous mode
[  248.568799][T11207] debugfs: 'hsr0' already exists in 'hsr'
[  248.570508][T11207] Cannot create hsr debugfs directory
[  248.588043][ T5198] Bluetooth: hci2: command tx timeout
[  248.746664][T11309] netlink: 'syz.1.2204': attribute type 20 has an invalid length.
[  248.833464][T11207] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  248.855951][T11207] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  248.868991][T11207] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  248.875932][T11207] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  248.951104][T11207] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.953443][T11207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.955744][T11207] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.957857][T11207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.076172][T11207] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.317491][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.321150][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.397082][T11207] 8021q: adding VLAN 0 to HW filter on device team0
[  249.408725][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.410878][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.437286][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.439457][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.536025][T11348] netlink: 'syz.1.2215': attribute type 10 has an invalid length.
[  249.619063][T11359] syz.1.2218: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  249.623486][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.1.2218 Not tainted syzkaller #0 PREEMPT(full) 
[  249.623498][T11359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.623504][T11359] Call Trace:
[  249.623509][T11359]  <TASK>
[  249.623514][T11359]  dump_stack_lvl+0xe8/0x150
[  249.623535][T11359]  warn_alloc+0x249/0x340
[  249.623548][T11359]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  249.623560][T11359]  ? __pfx_warn_alloc+0x10/0x10
[  249.623573][T11359]  ? kasan_save_track+0x4f/0x80
[  249.623582][T11359]  ? kasan_save_track+0x3e/0x80
[  249.623590][T11359]  ? __kasan_kmalloc+0x93/0xb0
[  249.623614][T11359]  ? __kmalloc_cache_noprof+0x31c/0x660
[  249.623626][T11359]  ? xskq_create+0x56/0x170
[  249.623635][T11359]  ? xsk_setsockopt+0x603/0x990
[  249.623647][T11359]  ? do_sock_setsockopt+0x17c/0x1b0
[  249.623657][T11359]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  249.623665][T11359]  ? do_syscall_64+0x14d/0xf80
[  249.623675][T11359]  __vmalloc_node_range_noprof+0x132/0x1730
[  249.623698][T11359]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  249.623709][T11359]  ? __kasan_kmalloc+0x93/0xb0
[  249.623720][T11359]  vmalloc_user_noprof+0xad/0xe0
[  249.623729][T11359]  ? xskq_create+0xbf/0x170
[  249.623737][T11359]  xskq_create+0xbf/0x170
[  249.623746][T11359]  xsk_init_queue+0x8a/0xe0
[  249.623755][T11359]  xsk_setsockopt+0x603/0x990
[  249.623768][T11359]  ? __pfx_xsk_setsockopt+0x10/0x10
[  249.623779][T11359]  ? __pfx_aa_sk_perm+0x10/0x10
[  249.623793][T11359]  ? __fget_files+0x2a/0x420
[  249.623804][T11359]  ? aa_sock_opt_perm+0xff/0x1a0
[  249.623836][T11359]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  249.623850][T11359]  ? __pfx_xsk_setsockopt+0x10/0x10
[  249.623863][T11359]  do_sock_setsockopt+0x17c/0x1b0
[  249.623874][T11359]  __x64_sys_setsockopt+0x13d/0x1b0
[  249.623885][T11359]  do_syscall_64+0x14d/0xf80
[  249.623895][T11359]  ? trace_irq_disable+0x3b/0x150
[  249.623907][T11359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.623917][T11359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.623925][T11359] RIP: 0033:0x7f36b3d9c799
[  249.623935][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.623942][T11359] RSP: 002b:00007f36b4cd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  249.623951][T11359] RAX: ffffffffffffffda RBX: 00007f36b4015fa0 RCX: 00007f36b3d9c799
[  249.623957][T11359] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  249.623963][T11359] RBP: 00007f36b3e32c99 R08: 0000000000000004 R09: 0000000000000000
[  249.623968][T11359] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  249.623973][T11359] R13: 00007f36b4016038 R14: 00007f36b4015fa0 R15: 00007ffddc7c5f88
[  249.623986][T11359]  </TASK>
[  249.631046][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.632579][T11359] Mem-Info:
[  249.710795][T11359] active_anon:13405 inactive_anon:0 isolated_anon:0
[  249.710795][T11359]  active_file:20483 inactive_file:38414 isolated_file:0
[  249.710795][T11359]  unevictable:1768 dirty:265 writeback:0
[  249.710795][T11359]  slab_reclaimable:11259 slab_unreclaimable:91357
[  249.710795][T11359]  mapped:18153 shmem:2439 pagetables:1441
[  249.710795][T11359]  sec_pagetables:0 bounce:0
[  249.710795][T11359]  kernel_misc_reclaimable:0
[  249.710795][T11359]  free:1107711 free_pcp:16913 free_cma:0
[  249.727999][T11359] Node 0 active_anon:34348kB inactive_anon:0kB active_file:30424kB inactive_file:121588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:6136kB dirty:268kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8776kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  249.753250][T11359] Node 1 active_anon:19372kB inactive_anon:0kB active_file:51508kB inactive_file:32068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:66476kB dirty:792kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4636kB pagetables:3260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  249.762648][T11359] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  249.771750][T11359] lowmem_reserve[]: 0 1587 2117 2117 2117
[  249.773577][T11359] Node 0 DMA32 free:1471728kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21428kB inactive_anon:0kB active_file:12312kB inactive_file:57480kB unevictable:0kB writepending:16kB zspages:0kB present:2080636kB managed:1625384kB mlocked:0kB bounce:0kB free_pcp:23504kB local_pcp:11848kB free_cma:0kB
[  249.781489][T11207] veth0_vlan: entered promiscuous mode
[  249.786230][T11359] lowmem_reserve[]: 0 0 530 530 530
[  249.787836][T11359] Node 0 Normal free:14284kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12988kB inactive_anon:0kB active_file:18112kB inactive_file:64108kB unevictable:3536kB writepending:252kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:4236kB local_pcp:4204kB free_cma:0kB
[  249.800838][T11207] veth1_vlan: entered promiscuous mode
[  249.823289][T11207] veth0_macvtap: entered promiscuous mode
[  249.829147][T11207] veth1_macvtap: entered promiscuous mode
[  249.832105][T11359] lowmem_reserve[]: 0 0 0 0 0
[  249.833505][T11359] Node 1 Normal free:2928868kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19272kB inactive_anon:0kB active_file:51508kB inactive_file:32068kB unevictable:3536kB writepending:792kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:40908kB local_pcp:33364kB free_cma:0kB
[  249.850018][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.859166][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.865288][T11359] lowmem_reserve[]: 0 0 0
[  249.868148][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.871956][T11359]  0 0
[  249.872857][T11359] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  249.875297][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.879551][T11359] Node 0 DMA32: 248*4kB (UME) 126*8kB (UM) 250*16kB (UME) 158*32kB (UME) 187*64kB (UM) 102*128kB (UME) 76*256kB (UME) 44*512kB (UME) 25*1024kB (UME) 12*2048kB (UM) 328*4096kB (UM) = 1471728kB
[  249.889409][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.892242][T11359] Node 0 Normal: 369*4kB (UE) 69*8kB (U) 257*16kB (U) 18*32kB (U) 108*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13628kB
[  249.892786][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.899401][T11359] Node 1 Normal: 11*4kB (ME) 15*8kB (ME) 212*16kB (ME) 522*32kB (UME) 354*64kB (UME) 84*128kB (UM) 75*256kB (UM) 36*512kB (UME) 55*1024kB (UME) 24*2048kB (UM) 667*4096kB (UM) = 2928804kB
[  249.909556][T11359] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.912743][T11359] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.933246][T11373] netlink: 'syz.6.2222': attribute type 10 has an invalid length.
[  249.947462][T11359] 61336 total pagecache pages
[  249.950958][T11359] 0 pages in swap cache
[  249.952484][T11359] Free swap  = 124996kB
[  249.954322][T11359] Total swap = 124996kB
[  249.955537][T11359] 1834877 pages RAM
[  249.956656][T11359] 0 pages HighMem/MovableOnly
[  249.958048][T11359] 390178 pages reserved
[  249.959247][T11359] 0 pages cma reserved
[  249.968350][T11373] team0: Port device macvlan0 added
[  249.981872][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.985225][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.016028][ T7525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.020398][ T7525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.050675][T11381] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2225'.
[  250.112198][T11385] netlink: 'syz.1.2227': attribute type 32 has an invalid length.
[  250.665599][ T5198] Bluetooth: hci2: command tx timeout
[  251.221621][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.290763][T11417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2239'.
[  251.315773][T11418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.357002][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.116862][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.133335][T11428] netlink: 'syz.6.2244': attribute type 25 has an invalid length.
[  252.140359][T11428] netlink: 'syz.6.2244': attribute type 28 has an invalid length.
[  252.147709][T11430] netlink: 'syz.8.2245': attribute type 10 has an invalid length.
[  252.158945][T11430] team0: Device ipvlan1 failed to register rx_handler
[  252.195840][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.311681][   T12] bridge_slave_1: left allmulticast mode
[  252.320201][   T12] bridge_slave_1: left promiscuous mode
[  252.322308][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.353353][   T12] bridge_slave_0: left allmulticast mode
[  252.361481][   T12] bridge_slave_0: left promiscuous mode
[  252.363416][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.526811][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2257'.
[  252.629585][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2260'.
[  252.719740][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.733811][ T5198] Bluetooth: hci2: command tx timeout
[  252.771582][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  252.777806][   T12] bond0 (unregistering): Released all slaves
[  252.782814][T11459] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2259'.
[  252.801740][T11459] tc_dump_action: action bad kind
[  252.803846][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'.
[  252.808546][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'.
[  252.816726][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2261'.
[  253.095195][T11477] IPv6: NLM_F_CREATE should be specified when creating new route
[  253.097902][T11477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.100101][T11477] IPv6: NLM_F_CREATE should be set when creating new route
[  253.514052][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[  253.721037][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2273'.
[  253.880430][T11507] openvswitch: netlink: Actions may not be safe on all matching packets
[  254.021336][T11514] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2279'.
[  254.261873][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2280'.
[  254.538231][T11530] netlink: 'syz.6.2283': attribute type 2 has an invalid length.
[  254.540712][T11530] netlink: 'syz.6.2283': attribute type 1 has an invalid length.
[  254.542975][T11530] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.666551][   T12] hsr_slave_0: left promiscuous mode
[  254.681449][   T12] hsr_slave_1: left promiscuous mode
[  254.707927][   T12] veth1_macvtap: left promiscuous mode
[  254.712172][   T12] veth0_macvtap: left promiscuous mode
[  254.716994][   T12] veth1_vlan: left promiscuous mode
[  254.718863][   T12] veth0_vlan: left promiscuous mode
[  254.814004][ T5829] Bluetooth: hci2: command tx timeout
[  255.105460][   T12] team0 (unregistering): Port device team_slave_1 removed
[  255.116193][   T12] team0 (unregistering): Port device team_slave_0 removed
[  255.222618][   T24] lo speed is unknown, defaulting to 1000
[  255.232880][   T24] syz1: Port: 1 Link DOWN
[  255.898522][T11602] netlink: 'syz.8.2311': attribute type 21 has an invalid length.
[  256.028035][T11614] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2317'.
[  257.321434][ T7525] wlan1: Trigger new scan to find an IBSS to join
[  258.105586][T11678] netlink: 'syz.6.2343': attribute type 10 has an invalid length.
[  258.108610][T11678] __nla_validate_parse: 1 callbacks suppressed
[  258.108678][T11678] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2343'.
[  258.114716][T11678] hsr0: entered promiscuous mode
[  258.149091][T11678] bridge0: port 3(hsr0) entered blocking state
[  258.152895][T11678] bridge0: port 3(hsr0) entered disabled state
[  258.158267][T11678] hsr0: entered allmulticast mode
[  258.160884][T11678] hsr_slave_0: entered allmulticast mode
[  258.190603][T11678] bridge0: port 3(hsr0) entered blocking state
[  258.194387][T11678] bridge0: port 3(hsr0) entered forwarding state
[  258.330812][T11694] sch_fq: defrate 9 ignored.
[  258.443411][T11699] netlink: 352 bytes leftover after parsing attributes in process `syz.1.2353'.
[  258.543755][T11712] netlink: 288 bytes leftover after parsing attributes in process `syz.8.2359'.
[  258.597117][T11718] netlink: 'syz.8.2361': attribute type 61 has an invalid length.
[  258.661711][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'.
[  258.868526][ T5829] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28
[  258.870910][ T5829] Bluetooth: hci2: Unable to find connection with handle 0x0000
[  259.048822][T11750] netlink: 'syz.1.2376': attribute type 1 has an invalid length.
[  259.051786][T11750] netlink: 'syz.1.2376': attribute type 2 has an invalid length.
[  259.062529][T11750] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.2376'.
[  259.101477][T11752] netlink: 'syz.6.2377': attribute type 10 has an invalid length.
[  259.111857][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2377'.
[  259.164323][T11752] veth0_vlan: entered allmulticast mode
[  259.168824][T11755] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2378'.
[  259.172056][T11755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2378'.
[  259.185983][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2378'.
[  259.199999][T11752] bridge0: port 4(veth0_vlan) entered blocking state
[  259.208480][T11752] bridge0: port 4(veth0_vlan) entered disabled state
[  259.262818][T11752] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  259.392958][T11762] openvswitch: netlink: Actions may not be safe on all matching packets
[  259.447626][T11768] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2385'.
[  259.759629][T11790] netlink: 'syz.8.2395': attribute type 10 has an invalid length.
[  261.218416][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  261.221204][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  261.695272][T11941] netlink: 'syz.6.2450': attribute type 1 has an invalid length.
[  261.878844][T11941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  262.293764][   T27] wlan1: Trigger new scan to find an IBSS to join
[  263.255937][ T9699] wlan1: Creating new IBSS network, BSSID 76:3a:5d:b6:58:03
[  263.279831][ T5829] Bluetooth: hci2: Malformed LE Event: 0x1b
[  263.765191][T11985] __nla_validate_parse: 9 callbacks suppressed
[  263.765217][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2467'.
[  264.075511][T12002] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  264.078503][T12002] netlink: 'syz.1.2474': attribute type 2 has an invalid length.
[  264.175448][T12007] netlink: 'syz.8.2477': attribute type 1 has an invalid length.
[  264.178624][T12007] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2477'.
[  264.182027][T12007] netlink: 'syz.8.2477': attribute type 1 has an invalid length.
[  264.290854][T12004] netlink: 'syz.6.2475': attribute type 11 has an invalid length.
[  264.293497][   T33] audit: type=1107 audit(1774549131.745:4): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  264.302398][T12004] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.309370][T12004] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.620453][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'.
[  264.628960][T12027] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2485'.
[  265.407638][T12047] siw: device registration error -23
[  266.017428][T12063] netlink: 'syz.1.2505': attribute type 1 has an invalid length.
[  266.146002][T12072] netlink: 'syz.8.2508': attribute type 21 has an invalid length.
[  266.157892][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2508'.
[  266.171390][T12072] netlink: 'syz.8.2508': attribute type 1 has an invalid length.
[  266.255553][ T6407] wlan1: Trigger new scan to find an IBSS to join
[  266.403293][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  267.882168][T12166] netlink: 'syz.6.2540': attribute type 4 has an invalid length.
[  267.966224][T12170] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2542'.
[  268.078423][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2545'.
[  268.122313][T12178] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  268.332348][T12189] netlink: 'syz.1.2550': attribute type 21 has an invalid length.
[  268.334954][T12189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  268.337185][T12189] IPv6: NLM_F_CREATE should be set when creating new route
[  269.024167][T12218] netlink: 'syz.1.2564': attribute type 10 has an invalid length.
[  269.092703][T12220] netlink: 'syz.1.2565': attribute type 1 has an invalid length.
[  269.249202][T12228] netlink: 'syz.8.2568': attribute type 6 has an invalid length.
[  270.200921][T12252] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.2578'.
[  270.218974][T12247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2577'.
[  270.296809][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.298710][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.301569][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.418838][T12254] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98
[  270.482209][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.493234][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.499413][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.515329][T12254] wlan1 speed is unknown, defaulting to 1000
[  270.613135][T12268] pimreg1: tun_chr_ioctl cmd 1074025677
[  270.616218][T12268] pimreg1: linktype set to 773
[  270.873994][T12279] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1
[  271.223814][ T6049] wlan1: Trigger new scan to find an IBSS to join
[  272.142935][T12302] netlink: 'syz.8.2598': attribute type 6 has an invalid length.
[  272.145904][T12302] netlink: 360 bytes leftover after parsing attributes in process `syz.8.2598'.
[  272.212273][   T27] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  273.137533][T12364] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2627'.
[  273.373049][T12379] netlink: 'syz.6.2634': attribute type 1 has an invalid length.
[  273.496851][T12386] netlink: 'syz.6.2637': attribute type 28 has an invalid length.
[  273.500455][T12386] netlink: 'syz.6.2637': attribute type 29 has an invalid length.
[  273.513936][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2637'.
[  273.570162][T12392] netlink: 'syz.1.2640': attribute type 4 has an invalid length.
[  273.821520][T12404] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2646'.
[  274.115433][T12418] netlink: 'syz.6.2653': attribute type 10 has an invalid length.
[  274.118167][T12418] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2653'.
[  274.121934][T12418] bond0: entered promiscuous mode
[  274.123481][T12418] bond_slave_0: entered promiscuous mode
[  274.125928][T12418] bond_slave_1: entered promiscuous mode
[  274.128267][T12418] bridge0: port 4(bond0) entered blocking state
[  274.130319][T12418] bridge0: port 4(bond0) entered disabled state
[  274.142548][T12418] bond0: entered allmulticast mode
[  274.144387][T12418] bond_slave_0: entered allmulticast mode
[  274.150264][T12418] bond_slave_1: entered allmulticast mode
[  274.161615][T12418] bridge0: port 4(bond0) entered blocking state
[  274.163548][T12418] bridge0: port 4(bond0) entered forwarding state
[  274.199842][T12420] netlink: 'syz.8.2654': attribute type 1 has an invalid length.
[  274.373255][T12424] tap0: tun_chr_ioctl cmd 1074025677
[  274.383938][T12424] tap0: linktype set to 825
[  274.522796][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2657'.
[  274.686903][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2664'.
[  274.690279][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2664'.
[  274.779797][T12446] netlink: 'syz.8.2667': attribute type 21 has an invalid length.
[  275.020711][T12463] netlink: 'syz.1.2674': attribute type 19 has an invalid length.
[  275.941936][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 180 seconds
[  276.685581][T12511] netlink: 'syz.6.2698': attribute type 10 has an invalid length.
[  276.692572][T12511] __nla_validate_parse: 2 callbacks suppressed
[  276.692585][T12511] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2698'.
[  276.715404][T12511] batman_adv: batadv0: Adding interface: virt_wifi0
[  276.717617][T12511] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.726365][T12511] batman_adv: batadv0: Interface activated: virt_wifi0
[  277.301172][T12536] netlink: 'syz.6.2709': attribute type 1 has an invalid length.
[  277.310513][T12536] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2709'.
[  277.318612][T12536] netlink: 658 bytes leftover after parsing attributes in process `syz.6.2709'.
[  277.323535][T12536] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2709'.
[  277.648764][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2716'.
[  277.667327][T12560] netlink: 64595 bytes leftover after parsing attributes in process `syz.8.2720'.
[  277.829370][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2724'.
[  277.832805][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2724'.
[  278.229569][T12586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.240635][T12586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.272021][T12586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.276989][T12586] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.931377][T12623] C: renamed from team_slave_0 (while UP)
[  278.938117][T12623] validate_nla: 1 callbacks suppressed
[  278.938126][T12623] netlink: 'syz.6.2748': attribute type 3 has an invalid length.
[  278.945862][T12623] netlink: 'syz.6.2748': attribute type 1 has an invalid length.
[  278.971028][T12623] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2748'.
[  278.975243][T12623] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  279.323517][T12645] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2759'.
[  281.243232][T12697] netlink: 'syz.8.2778': attribute type 46 has an invalid length.
[  281.764267][ T5255] udevd[5255]: worker [5809] /devices/virtual/block/nbd0 timeout; kill it
[  281.768978][ T5255] udevd[5255]: seq 11196 '/devices/virtual/block/nbd0' killed
[  282.110037][T12727] __nla_validate_parse: 3 callbacks suppressed
[  282.110054][T12727] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2790'.
[  282.133233][T12729] netlink: 'syz.1.2791': attribute type 10 has an invalid length.
[  282.136272][T12729] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2791'.
[  282.718819][T12747] netlink: 'syz.6.2799': attribute type 25 has an invalid length.
[  282.721142][T12747] netlink: 'syz.6.2799': attribute type 10 has an invalid length.
[  282.867897][T12753] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  282.885729][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'.
[  282.901430][T12753] netlink: 'syz.1.2802': attribute type 10 has an invalid length.
[  282.901785][T12757] netlink: 'syz.8.2804': attribute type 13 has an invalid length.
[  282.968822][T12761] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.2804'.
[  282.984273][T12761] netlink: 4580 bytes leftover after parsing attributes in process `syz.8.2804'.
[  283.379998][T12764] delete_channel: no stack
[  283.399748][T12757] gretap0: refused to change device tx_queue_len
[  283.403379][T12757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  283.453287][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'.
[  283.534419][T12775] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2812'.
[  283.548314][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2813'.
[  283.550886][T12778] openvswitch: netlink: Message has 2 unknown bytes.
[  283.665219][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2818'.
[  283.668770][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2818'.
[  283.671325][T12790] netlink: 'syz.6.2818': attribute type 1 has an invalid length.
[  284.004973][T12817] netlink: 'syz.8.2832': attribute type 1 has an invalid length.
[  285.453905][ T5829] Bluetooth: hci1: Opcode 0x206a failed: -110
[  285.456788][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[  286.641895][ T5829] Bluetooth: hci2: Malformed LE Event: 0x1d
[  287.123939][T12993] __nla_validate_parse: 8 callbacks suppressed
[  287.123957][T12993] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2902'.
[  287.226081][T13003] netlink: 'syz.8.2907': attribute type 28 has an invalid length.
[  287.228463][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2907'.
[  287.515998][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.522852][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.527398][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.541615][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.547614][ T5198] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.596383][T13016] lo speed is unknown, defaulting to 1000
[  287.686916][T13022] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2917'.
[  287.939529][T13016] wlan1 speed is unknown, defaulting to 1000
[  288.078344][T13016] chnl_net:caif_netlink_parms(): no params data found
[  288.188312][T13048] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2927'.
[  288.192502][T13048] netlink: Conntrack attr type has unexpected length (type=4, length=0, expected=32)
[  288.211772][T13016] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.215514][T13016] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.218678][T13016] bridge_slave_0: entered allmulticast mode
[  288.221697][T13016] bridge_slave_0: entered promiscuous mode
[  288.226976][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2928'.
[  288.230323][T13016] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.234787][T13016] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.237052][T13016] bridge_slave_1: entered allmulticast mode
[  288.239669][T13016] bridge_slave_1: entered promiscuous mode
[  288.242135][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2928'.
[  288.259308][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2928'.
[  288.264726][T13016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.283888][T13016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.317862][T13016] team0: Port device team_slave_0 added
[  288.321089][T13016] team0: Port device team_slave_1 added
[  288.341503][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.344972][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.363375][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.368130][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.370899][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.385528][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.429868][T13016] hsr_slave_0: entered promiscuous mode
[  288.432293][T13016] hsr_slave_1: entered promiscuous mode
[  288.435468][T13016] debugfs: 'hsr0' already exists in 'hsr'
[  288.437441][T13016] Cannot create hsr debugfs directory
[  288.454827][T13062] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2934'.
[  288.462262][T13062] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2934'.
[  288.467181][T13062] netlink: 'syz.8.2934': attribute type 6 has an invalid length.
[  288.472132][T13062] netlink: 'syz.8.2934': attribute type 5 has an invalid length.
[  288.476028][T13062] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2934'.
[  288.600116][T13016] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  288.605394][T13016] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  288.609529][T13016] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  288.617010][T13016] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  288.648603][T13016] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.650822][T13016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.653299][T13016] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.655543][T13016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.703094][T13016] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.717939][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.720726][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.729226][T13016] 8021q: adding VLAN 0 to HW filter on device team0
[  288.736471][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.739200][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.746921][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.749119][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.853565][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.030413][T13016] veth0_vlan: entered promiscuous mode
[  289.046863][T13016] veth1_vlan: entered promiscuous mode
[  289.091123][T13016] veth0_macvtap: entered promiscuous mode
[  289.098678][T13016] veth1_macvtap: entered promiscuous mode
[  289.112426][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.180655][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.187199][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.192866][T13099] netlink: 'syz.1.2942': attribute type 10 has an invalid length.
[  289.201216][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.206666][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.210213][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.739664][ T5829] Bluetooth: hci0: command tx timeout
[  290.323877][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.326271][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.378470][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.381670][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.474904][T13128] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  290.679713][T13142] netlink: 'syz.9.2962': attribute type 1 has an invalid length.
[  291.109339][T13164] netlink: 'syz.1.2971': attribute type 16 has an invalid length.
[  291.111600][T13164] netlink: 'syz.1.2971': attribute type 17 has an invalid length.
[  291.164951][T13161] openvswitch: netlink: Missing valid actions attribute.
[  291.173419][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.315735][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.330397][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.341004][T13176] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  291.345211][T13176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.463205][T13184] netlink: 'syz.9.2981': attribute type 16 has an invalid length.
[  291.472718][T13164] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  291.477290][   T31] lo speed is unknown, defaulting to 1000
[  291.479164][   T31] syz2: Port: 1 Link DOWN
[  291.486724][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.490070][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.493367][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.502075][   T31] lo speed is unknown, defaulting to 1000
[  291.505609][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.773809][ T5829] Bluetooth: hci0: command tx timeout
[  291.942065][T13210] : entered promiscuous mode
[  292.755932][T13259] __nla_validate_parse: 6 callbacks suppressed
[  292.755944][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3013'.
[  292.872060][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3015'.
[  292.884664][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3015'.
[  293.430211][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3022'.
[  293.433006][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3022'.
[  293.854560][ T5829] Bluetooth: hci0: command tx timeout
[  295.376372][T13316] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3039'.
[  295.669804][T13335] IPv6: Can't replace route, no match found
[  295.733411][T13338] netlink: 'syz.8.3049': attribute type 6 has an invalid length.
[  295.842361][T13340] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  296.044747][ T5829] Bluetooth: hci0: command tx timeout
[  296.429595][T13360] sock: sock_timestamping_bind_phc: sock not bind to device
[  296.481415][T13354] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3057'.
[  296.496374][ T5829] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  296.550656][T13354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.655418][T13354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.673569][ T5829] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  296.701587][T13354] bond0 (unregistering): Released all slaves
[  296.811370][T13371] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3065'.
[  296.973064][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'.
[  297.012852][T13387] netlink: 'syz.9.3072': attribute type 21 has an invalid length.
[  297.088576][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'.
[  297.957267][T13432] __nla_validate_parse: 3 callbacks suppressed
[  297.957279][T13432] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.3091'.
[  298.027898][ T5829] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7
[  298.073535][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3094'.
[  298.384072][T13457] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3103'.
[  301.804586][T13492] syzkaller0: entered allmulticast mode
[  302.026815][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3130'.
[  302.147786][T13525] lo speed is unknown, defaulting to 1000
[  302.450589][T13525] wlan1 speed is unknown, defaulting to 1000
[  302.817879][T13549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.842530][T13550] netlink: 'syz.1.3145': attribute type 10 has an invalid length.
[  302.847154][T13550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3145'.
[  302.861541][T13550] ipvlan1: entered promiscuous mode
[  302.873850][T13550] ipvlan1: entered allmulticast mode
[  302.875627][T13550] veth0_vlan: entered allmulticast mode
[  302.885246][T13550] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  302.944600][T13556] netlink: 'syz.8.3149': attribute type 22 has an invalid length.
[  302.946883][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3149'.
[  303.126682][T13572] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  303.479977][T13590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.652838][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3169'.
[  303.667101][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3169'.
[  303.771927][T13608] netlink: 'syz.8.3173': attribute type 6 has an invalid length.
[  305.023409][T13654] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3194'.
[  305.339717][T13677] netlink: 'syz.9.3204': attribute type 1 has an invalid length.
[  305.466665][T13672] lo speed is unknown, defaulting to 1000
[  306.014696][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 210 seconds
[  306.218301][T13672] wlan1 speed is unknown, defaulting to 1000
[  307.276954][T13740] netlink: 'syz.1.3232': attribute type 1 has an invalid length.
[  307.279175][T13740] netlink: 'syz.1.3232': attribute type 2 has an invalid length.
[  307.287985][T13736] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  308.070382][T13764] netlink: 'syz.8.3244': attribute type 1 has an invalid length.
[  309.141752][T13814] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3267'.
[  309.151031][T13814] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3267'.
[  309.155816][T13814] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3267'.
[  309.727250][T13837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3277'.
[  309.735883][T13839] netlink: 'syz.8.3278': attribute type 21 has an invalid length.
[  309.738961][T13839] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3278'.
[  309.742569][T13839] netlink: 'syz.8.3278': attribute type 5 has an invalid length.
[  309.746154][T13839] netlink: 'syz.8.3278': attribute type 6 has an invalid length.
[  309.749194][T13839] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3278'.
[  309.889574][T13841] netlink: 'syz.8.3279': attribute type 2 has an invalid length.
[  311.213453][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3298'.
[  311.353001][T13896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.922822][T13927] macvtap0: entered promiscuous mode
[  311.933919][T13927] macvtap0: entered allmulticast mode
[  311.936753][T13927] veth0_macvtap: entered allmulticast mode
[  311.987631][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3320'.
[  312.036619][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3323'.
[  312.106870][T13935] Cannot find add_set index 46338 as target
[  312.354950][T13965] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3336'.
[  312.357835][T13965] x_tables: ip_tables: udp match: only valid for protocol 17
[  313.516237][T13991] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0
[  314.229407][T14021] netlink: 'syz.8.3361': attribute type 2 has an invalid length.
[  314.232619][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3361'.
[  314.298570][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3362'.
[  314.325904][T14026] sysfs: Unknown parameter 'obj_type'
[  314.570502][T14037] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3369'.
[  314.583177][T14037] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3369'.
[  314.952747][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'.
[  314.962508][T14059] netlink: 145 bytes leftover after parsing attributes in process `syz.1.3379'.
[  315.578944][T14082] netlink: 'syz.1.3390': attribute type 22 has an invalid length.
[  315.612253][T14084] netlink: 'syz.1.3391': attribute type 39 has an invalid length.
[  316.119082][T14101] netlink: 'syz.1.3399': attribute type 2 has an invalid length.
[  317.878718][T14153] netlink: 'syz.1.3422': attribute type 7 has an invalid length.
[  317.991106][T14157] lo speed is unknown, defaulting to 1000
[  318.378002][T14157] wlan1 speed is unknown, defaulting to 1000
[  319.400414][T14184] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3433'.
[  319.765491][T14200] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3441'.
[  319.953460][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3447'.
[  319.960808][T14212] netlink: 'syz.9.3446': attribute type 8 has an invalid length.
[  320.538373][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3456'.
[  320.630073][T14235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3458'.
[  320.639875][T14233] C: renamed from team_slave_0 (while UP)
[  320.679231][T14233] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3457'.
[  320.734127][ T9699] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  320.980139][T14242] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3461'.
[  321.654525][T14254] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3465'.
[  321.658288][T14254] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3465'.
[  321.716026][T14251] delete_channel: no stack
[  322.660153][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  322.662082][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  323.539986][T14303] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.3486'.
[  323.996312][T14312] netlink: 'syz.9.3489': attribute type 10 has an invalid length.
[  324.424438][T14312] batman_adv: batadv0: Adding interface: netdevsim0
[  324.454049][T14312] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  324.478763][T14312] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  325.975288][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.032253][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3513'.
[  327.062822][T14371] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3513'.
[  327.309174][T14378] netlink: 'syz.1.3517': attribute type 1 has an invalid length.
[  327.323184][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'.
[  328.290173][T14417] netlink: 512 bytes leftover after parsing attributes in process `syz.9.3533'.
[  329.167636][T14422] netlink: 'syz.9.3536': attribute type 4 has an invalid length.
[  329.310084][T14426] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3538'.
[  329.313173][T14427] netlink: 'syz.1.3537': attribute type 5 has an invalid length.
[  329.325126][T14427] netlink: 'syz.1.3537': attribute type 5 has an invalid length.
[  329.560070][T14436] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3543'.
[  329.578749][T14436] bridge_slave_1: default FDB implementation only supports local addresses
[  329.602448][T14438] netlink: 'syz.9.3544': attribute type 29 has an invalid length.
[  329.608078][ T5198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.611729][ T5198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.625823][ T5198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.629357][ T5198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.632566][ T5198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.654709][T14439] lo speed is unknown, defaulting to 1000
[  329.909815][T14439] wlan1 speed is unknown, defaulting to 1000
[  329.962238][T14449] openvswitch: netlink: Flow actions attr not present in new flow.
[  330.307564][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.335284][T14454] netlink: 'syz.9.3550': attribute type 29 has an invalid length.
[  330.339638][T14454] netlink: 'syz.9.3550': attribute type 29 has an invalid length.
[  330.374183][T14454] netlink: 'syz.9.3550': attribute type 29 has an invalid length.
[  330.416643][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.427825][T14454] netlink: 'syz.9.3550': attribute type 29 has an invalid length.
[  330.436902][T14439] chnl_net:caif_netlink_parms(): no params data found
[  330.487028][T14464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.487648][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.672514][T14439] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.675387][T14439] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.677597][T14439] bridge_slave_0: entered allmulticast mode
[  330.680387][T14439] bridge_slave_0: entered promiscuous mode
[  330.686280][T14439] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.688482][T14439] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.690698][T14439] bridge_slave_1: entered allmulticast mode
[  330.693426][T14439] bridge_slave_1: entered promiscuous mode
[  330.716011][T14439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.720626][T14439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.740109][T14439] team0: Port device team_slave_0 added
[  330.744638][T14439] team0: Port device team_slave_1 added
[  330.761621][T14439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.765491][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.775219][T14439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.780540][T14439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.782807][T14439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.792536][T14439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.825546][T14439] hsr_slave_0: entered promiscuous mode
[  330.827854][T14439] hsr_slave_1: entered promiscuous mode
[  330.829958][T14439] debugfs: 'hsr0' already exists in 'hsr'
[  330.831729][T14439] Cannot create hsr debugfs directory
[  331.713845][ T5829] Bluetooth: hci3: command tx timeout
[  331.804713][T14493] netlink: 'syz.9.3561': attribute type 21 has an invalid length.
[  331.923310][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.938729][T14493] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3561'.
[  332.098740][T14501] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.226418][ T5829] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  332.265874][   T13] bridge_slave_1: left allmulticast mode
[  332.280863][   T13] bridge_slave_1: left promiscuous mode
[  332.282862][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.320807][   T13] bridge_slave_0: left allmulticast mode
[  332.323030][   T13] bridge_slave_0: left promiscuous mode
[  332.330435][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.987072][T14547] netlink: 4088 bytes leftover after parsing attributes in process `syz.9.3576'.
[  333.065318][T14549] validate_nla: 4 callbacks suppressed
[  333.065335][T14549] netlink: 'syz.9.3577': attribute type 5 has an invalid length.
[  333.071449][T14549] netlink: 176 bytes leftover after parsing attributes in process `syz.9.3577'.
[  333.138331][T14553] netlink: 'syz.9.3578': attribute type 4 has an invalid length.
[  333.141496][T14553] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3578'.
[  333.665789][   T13] hsr_slave_0: left promiscuous mode
[  333.676435][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  333.679943][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  333.682889][ T5198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  333.686469][   T13] hsr_slave_1: left promiscuous mode
[  333.689765][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  333.692723][ T5198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  333.717713][   T13] veth1_macvtap: left promiscuous mode
[  333.719848][   T13] veth0_macvtap: left promiscuous mode
[  333.721937][   T13] veth1_vlan: left promiscuous mode
[  333.724687][   T13] veth0_vlan: left promiscuous mode
[  333.783934][ T5198] Bluetooth: hci3: command tx timeout
[  334.302840][   T13] team0 (unregistering): Port device team_slave_1 removed
[  334.322799][   T13] team0 (unregistering): Port device team_slave_0 removed
[  334.666700][T14569] lo speed is unknown, defaulting to 1000
[  334.765363][T14439] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  334.806365][T14439] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  334.817384][T14439] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  334.835048][T14439] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  334.947178][T14439] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.956874][T14439] 8021q: adding VLAN 0 to HW filter on device team0
[  334.967323][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.969408][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.979654][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.982002][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.031643][T14439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.034862][T14439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.137964][T14439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.166402][T14569] wlan1 speed is unknown, defaulting to 1000
[  335.196770][T14439] veth0_vlan: entered promiscuous mode
[  335.223049][T14439] veth1_vlan: entered promiscuous mode
[  335.281126][T14439] veth0_macvtap: entered promiscuous mode
[  335.300287][T14439] veth1_macvtap: entered promiscuous mode
[  335.323285][T14439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.347680][T14569] chnl_net:caif_netlink_parms(): no params data found
[  335.382765][T14439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.426396][T14638] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3596'.
[  335.430238][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  335.433058][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.447932][T14569] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.450688][T14569] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.453541][T14569] bridge_slave_0: entered allmulticast mode
[  335.461686][T14569] bridge_slave_0: entered promiscuous mode
[  335.475606][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.479466][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.482852][T14569] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.485363][T14569] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.487758][T14569] bridge_slave_1: entered allmulticast mode
[  335.491531][T14569] bridge_slave_1: entered promiscuous mode
[  335.552600][T14569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.571117][T14569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.640911][T14569] team0: Port device team_slave_0 added
[  335.655648][T14569] team0: Port device team_slave_1 added
[  335.699410][T14569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.701927][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.722731][T14569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.735004][T14569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.737527][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.747122][T14569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.761370][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.768358][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.773787][ T5198] Bluetooth: hci1: command tx timeout
[  335.808062][T14569] hsr_slave_0: entered promiscuous mode
[  335.811062][T14569] hsr_slave_1: entered promiscuous mode
[  335.817277][T14569] debugfs: 'hsr0' already exists in 'hsr'
[  335.820257][T14569] Cannot create hsr debugfs directory
[  335.854149][ T5198] Bluetooth: hci3: command tx timeout
[  335.873444][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.879274][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.072195][T14673] netlink: 'syz.0.3607': attribute type 27 has an invalid length.
[  336.075448][T14673] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3607'.
[  336.094232][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 240 seconds
[  336.131154][T14678] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3609'.
[  336.185373][T14675] netlink: 'syz.9.3608': attribute type 15 has an invalid length.
[  336.357633][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3614'.
[  336.489786][T14569] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  336.501616][T14569] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  336.519414][T14569] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  336.541230][T14569] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  336.620209][T14720] netlink: 'syz.0.3618': attribute type 29 has an invalid length.
[  336.629849][T14709] netlink: 'syz.0.3618': attribute type 29 has an invalid length.
[  336.645179][T14709] netlink: 'syz.0.3618': attribute type 29 has an invalid length.
[  336.660941][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3619'.
[  336.680766][T14569] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.719414][T14569] 8021q: adding VLAN 0 to HW filter on device team0
[  336.739901][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.742644][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.764836][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.767269][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.037488][T14569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.078591][T14569] veth0_vlan: entered promiscuous mode
[  337.102999][T14569] veth1_vlan: entered promiscuous mode
[  337.197355][T14569] veth0_macvtap: entered promiscuous mode
[  337.211985][T14569] veth1_macvtap: entered promiscuous mode
[  337.298777][T14569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.307857][T14569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.312693][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.330912][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.336690][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.339520][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.450159][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.452417][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.487290][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.489512][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.499811][T14766] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3630'.
[  337.853884][ T5198] Bluetooth: hci1: command tx timeout
[  337.868600][T14787] netlink: 840 bytes leftover after parsing attributes in process `syz.0.3633'.
[  337.934048][ T5198] Bluetooth: hci3: command tx timeout
[  338.159383][T14800] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  339.410186][T14852] netlink: 762 bytes leftover after parsing attributes in process `syz.0.3652'.
[  339.413551][T14852] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0
[  339.477879][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3655'.
[  339.895291][T14879] delete_channel: no stack
[  339.945859][ T5198] Bluetooth: hci1: command tx timeout
[  340.632796][T14911] netlink: 10 bytes leftover after parsing attributes in process `syz.9.3669'.
[  340.870936][T14925] netlink: 'syz.0.3676': attribute type 1 has an invalid length.
[  340.881446][T14925] netlink: 'syz.0.3676': attribute type 1 has an invalid length.
[  340.954215][T14929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3679'.
[  341.596276][T14981] netlink: 'syz.0.3702': attribute type 9 has an invalid length.
[  341.694830][T14988] netlink: 'syz.0.3705': attribute type 11 has an invalid length.
[  341.697788][T14988] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3705'.
[  341.754072][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3705'.
[  341.783272][T14988] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  341.852660][T14997] netlink: 'syz.3.3709': attribute type 19 has an invalid length.
[  341.873798][T14997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3709'.
[  342.014029][ T5198] Bluetooth: hci1: command tx timeout
[  342.299082][T15014] syzkaller0: entered promiscuous mode
[  342.300950][T15014] syzkaller0: entered allmulticast mode
[  343.655150][T15036] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3728'.
[  343.695685][T15036] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  343.933423][T15044] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3731'.
[  345.242900][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'.
[  345.345066][T15063] netlink: 'syz.3.3740': attribute type 21 has an invalid length.
[  345.347442][T15063] netlink: 'syz.3.3740': attribute type 7 has an invalid length.
[  345.461477][T15074] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3745'.
[  345.616987][T15085] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3750'.
[  345.619836][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3750'.
[  345.903889][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'.
[  345.907138][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'.
[  345.910398][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3757'.
[  346.137713][T15117] netlink: 'syz.3.3765': attribute type 7 has an invalid length.
[  346.139979][T15117] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3765'.
[  349.529238][ T5198] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  350.259153][T15202] netlink: 'syz.0.3800': attribute type 10 has an invalid length.
[  350.290919][T15202] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.304832][T15202] team0: Port device bond0 added
[  350.655849][T15226] netlink: 'syz.0.3804': attribute type 10 has an invalid length.
[  350.701957][T15226] team0: Port device netdevsim0 added
[  350.710973][T15229] netlink: 'syz.0.3804': attribute type 10 has an invalid length.
[  350.751615][T15229] team0: Port device netdevsim0 removed
[  350.785385][T15229] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  351.459060][T15270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3815'.
[  351.475401][T15270] netlink: 'syz.0.3815': attribute type 1 has an invalid length.
[  351.851804][T15289] netlink: 'syz.3.3821': attribute type 2 has an invalid length.
[  351.993354][T15294] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  351.997464][T15289] IPv6: Can't replace route, no match found
[  352.076334][T15287] delete_channel: no stack
[  352.269877][ T5198] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6
[  352.634038][T15313] netlink: 'syz.0.3831': attribute type 5 has an invalid length.
[  352.738693][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3833'.
[  353.054659][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3840'.
[  353.133588][T15335] netlink: 'syz.3.3843': attribute type 10 has an invalid length.
[  353.737362][T15340] delete_channel: no stack
[  354.179901][T15362] netlink: 'syz.3.3853': attribute type 2 has an invalid length.
[  354.182186][T15362] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3853'.
[  354.253825][ T6407] wlan1: Trigger new scan to find an IBSS to join
[  354.268737][T15364] netlink: 'syz.3.3854': attribute type 1 has an invalid length.
[  354.270998][T15364] netlink: 'syz.3.3854': attribute type 4 has an invalid length.
[  354.287640][T15364] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3854'.
[  354.487283][T15372] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  354.490367][T15372] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  354.518147][T15374] nftables ruleset with unbound set
[  355.287335][T15390] netlink: 'syz.3.3867': attribute type 46 has an invalid length.
[  355.733241][T15408] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  355.737158][T15408] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  355.962364][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3878'.
[  356.220994][T15423] netlink: 'syz.0.3881': attribute type 29 has an invalid length.
[  356.246366][T15423] netlink: 'syz.0.3881': attribute type 29 has an invalid length.
[  356.274382][T15423] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3881'.
[  356.407775][T15428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3884'.
[  357.305624][ T1112] wlan1: Trigger new scan to find an IBSS to join
[  359.590985][   T86] wlan1: Creating new IBSS network, BSSID 5a:7e:b3:8e:f4:e3
[  360.060608][T15451] validate_nla: 3 callbacks suppressed
[  360.060620][T15451] netlink: 'syz.0.3894': attribute type 2 has an invalid length.
[  360.085104][T15451] tipc: Started in network mode
[  360.086563][T15451] tipc: Node identity 1340008, cluster identity 4711
[  360.088493][T15451] tipc: Node number set to 20185096
[  360.398219][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3897'.
[  360.412880][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3897'.
[  361.838604][T15478] netlink: 'syz.3.3906': attribute type 1 has an invalid length.
[  361.841530][T15478] netlink: 'syz.3.3906': attribute type 2 has an invalid length.
[  362.324183][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.327164][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.330196][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.355514][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.359326][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.399720][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3912'.
[  362.450222][T15486] lo speed is unknown, defaulting to 1000
[  362.611631][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3916'.
[  362.616914][   T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.826801][   T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.925810][   T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.993540][   T13] batman_adv: batadv0: Removing interface: netdevsim0
[  363.002152][   T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.101522][T15486] wlan1 speed is unknown, defaulting to 1000
[  363.362379][   T13] bridge_slave_1: left allmulticast mode
[  363.365898][   T13] bridge_slave_1: left promiscuous mode
[  363.367614][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.378334][   T13] bridge_slave_0: left allmulticast mode
[  363.380102][   T13] bridge_slave_0: left promiscuous mode
[  363.381728][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.585358][T15529] netlink: 'syz.0.3928': attribute type 2 has an invalid length.
[  363.587844][T15529] netlink: 'syz.0.3928': attribute type 1 has an invalid length.
[  363.635972][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3930'.
[  363.673251][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.684693][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.692057][   T13] bond0 (unregistering): Released all slaves
[  363.702936][T15486] chnl_net:caif_netlink_parms(): no params data found
[  363.776037][   T13] : left promiscuous mode
[  363.885383][T15486] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.888053][T15486] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.890173][T15486] bridge_slave_0: entered allmulticast mode
[  363.916141][T15486] bridge_slave_0: entered promiscuous mode
[  363.931913][T15486] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.944465][T15486] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.946636][T15486] bridge_slave_1: entered allmulticast mode
[  363.949166][T15486] bridge_slave_1: entered promiscuous mode
[  364.056709][T15486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.091232][T15486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.137726][T15486] team0: Port device team_slave_0 added
[  364.148482][T15486] team0: Port device team_slave_1 added
[  364.257458][T15486] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.260950][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.272358][T15486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.282391][T15486] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.286382][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.297212][T15486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.455985][T15486] hsr_slave_0: entered promiscuous mode
[  364.458251][T15486] hsr_slave_1: entered promiscuous mode
[  364.460301][T15486] debugfs: 'hsr0' already exists in 'hsr'
[  364.462020][T15486] Cannot create hsr debugfs directory
[  364.473868][ T5829] Bluetooth: hci2: command tx timeout
[  364.508520][   T13] hsr_slave_0: left promiscuous mode
[  364.517263][   T13] hsr_slave_1: left promiscuous mode
[  364.520566][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.525323][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.529419][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.532785][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.545054][   T13] veth1_macvtap: left promiscuous mode
[  364.548977][   T13] veth0_macvtap: left promiscuous mode
[  364.551139][   T13] veth1_vlan: left promiscuous mode
[  364.553033][   T13] veth0_vlan: left promiscuous mode
[  364.556026][T15568] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3943'.
[  364.714106][   T13] team0 (unregistering): Port device team_slave_1 removed
[  364.722928][   T13] team0 (unregistering): Port device C removed
[  365.059284][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3944'.
[  365.099891][T15585] netlink: 'syz.3.3945': attribute type 10 has an invalid length.
[  365.102885][T15585] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3945'.
[  365.162270][T15577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3944'.
[  365.168975][T15585] batadv_slave_1: entered promiscuous mode
[  365.179233][T15585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.182309][T15585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.188657][T15585] bridge0: port 3(batadv_slave_1) entered blocking state
[  365.192179][T15585] bridge0: port 3(batadv_slave_1) entered disabled state
[  365.199108][T15585] batadv_slave_1: entered allmulticast mode
[  365.221609][T15585] bridge0: port 3(batadv_slave_1) entered blocking state
[  365.224078][T15585] bridge0: port 3(batadv_slave_1) entered forwarding state
[  365.230474][T15578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3944'.
[  365.413002][T15590] syz.3.3946 (15590) used obsolete PPPIOCDETACH ioctl
[  365.763226][T15486] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  365.781739][T15486] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  365.797706][T15486] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  365.834398][T15486] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  366.090285][T15486] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.151058][T15486] 8021q: adding VLAN 0 to HW filter on device team0
[  366.183734][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.186848][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.193913][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 270 seconds
[  366.230885][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.233763][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.494018][ T5829] Bluetooth: hci2: command tx timeout
[  366.618584][T15486] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.919296][T15486] veth0_vlan: entered promiscuous mode
[  366.935299][T15486] veth1_vlan: entered promiscuous mode
[  366.966259][T15486] veth0_macvtap: entered promiscuous mode
[  366.972014][T15486] veth1_macvtap: entered promiscuous mode
[  366.993036][T15486] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.008924][T15486] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.017022][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.028231][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.043433][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.573887][ T5829] Bluetooth: hci2: command tx timeout
[  368.884415][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.202805][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.212688][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.267284][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.271318][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.585503][T15685] netlink: 'syz.3.3967': attribute type 2 has an invalid length.
[  369.587910][T15685] netlink: 'syz.3.3967': attribute type 11 has an invalid length.
[  369.590309][T15685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3967'.
[  370.462760][T15718] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  370.590089][T15722] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3973'.
[  370.628236][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'.
[  370.639062][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'.
[  370.674874][ T5829] Bluetooth: hci2: command tx timeout
[  370.773771][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3976'.
[  370.793841][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3976'.
[  371.378873][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'.
[  371.382947][T15771] openvswitch: netlink: Duplicate key (type 32).
[  371.590339][T15776] tc_dump_action: action bad kind
[  371.660694][T15779] netlink: 'syz.3.3992': attribute type 39 has an invalid length.
[  371.932598][T15785] netlink: 'syz.3.3995': attribute type 10 has an invalid length.
[  371.938883][T15785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3995'.
[  371.953776][T15785] ipvlan1: entered promiscuous mode
[  371.955621][T15785] ipvlan1: entered allmulticast mode
[  371.957587][T15785] veth0_vlan: entered allmulticast mode
[  371.967704][T15785] bridge0: port 4(ipvlan1) entered blocking state
[  371.969986][T15785] bridge0: port 4(ipvlan1) entered disabled state
[  371.973196][T15785] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  372.114073][T15795] netlink: 'syz.0.4000': attribute type 9 has an invalid length.
[  372.116466][T15795] netlink: 'syz.0.4000': attribute type 11 has an invalid length.
[  372.118947][T15795] netlink: 'syz.0.4000': attribute type 12 has an invalid length.
[  372.121441][T15795] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4000'.
[  372.128108][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4000'.
[  372.207035][T15797] netlink: 'syz.0.4001': attribute type 29 has an invalid length.
[  372.211543][T15797] netlink: 'syz.0.4001': attribute type 29 has an invalid length.
[  372.216081][T15797] netlink: 'syz.0.4001': attribute type 29 has an invalid length.
[  372.219495][T15797] netlink: 'syz.0.4001': attribute type 29 has an invalid length.
[  372.254928][T15792] delete_channel: no stack
[  372.434796][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.724872][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.732747][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.738852][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.742375][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.746029][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.759950][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.829543][T15804] lo speed is unknown, defaulting to 1000
[  372.875331][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.993523][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.220331][T15814] lo speed is unknown, defaulting to 1000
[  373.330235][T15804] wlan1 speed is unknown, defaulting to 1000
[  373.332686][   T13] bridge_slave_1: left allmulticast mode
[  373.335074][   T13] bridge_slave_1: left promiscuous mode
[  373.337364][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.345236][   T13] bridge_slave_0: left allmulticast mode
[  373.347366][   T13] bridge_slave_0: left promiscuous mode
[  373.349531][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.603321][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.609459][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  373.618149][   T13] bond0 (unregistering): Released all slaves
[  373.828566][T15843] netlink: zone id is out of range
[  373.833771][T15843] netlink: zone id is out of range
[  373.843708][T15843] netlink: zone id is out of range
[  373.845746][T15843] netlink: zone id is out of range
[  373.847700][T15843] netlink: zone id is out of range
[  373.849552][T15843] netlink: zone id is out of range
[  373.851203][T15843] netlink: zone id is out of range
[  373.852711][T15843] netlink: zone id is out of range
[  373.934598][T15814] wlan1 speed is unknown, defaulting to 1000
[  374.442637][T15860] netlink: 'syz.3.4022': attribute type 322 has an invalid length.
[  374.648099][T15814] chnl_net:caif_netlink_parms(): no params data found
[  374.815137][ T5829] Bluetooth: hci0: command tx timeout
[  374.862884][   T13] hsr_slave_0: left promiscuous mode
[  374.868196][   T13] hsr_slave_1: left promiscuous mode
[  374.881899][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.886171][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.891737][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.895484][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.902406][   T13] veth1_macvtap: left promiscuous mode
[  374.906171][   T13] veth0_macvtap: left promiscuous mode
[  374.908146][   T13] veth1_vlan: left promiscuous mode
[  374.909891][   T13] veth0_vlan: left promiscuous mode
[  375.122170][   T13] team0 (unregistering): Port device team_slave_1 removed
[  375.131607][   T13] team0 (unregistering): Port device team_slave_0 removed
[  375.301315][T15814] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.307802][T15814] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.310182][T15814] bridge_slave_0: entered allmulticast mode
[  375.318593][T15814] bridge_slave_0: entered promiscuous mode
[  375.332791][T15814] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.348882][T15814] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.351808][T15814] bridge_slave_1: entered allmulticast mode
[  375.371694][T15814] bridge_slave_1: entered promiscuous mode
[  375.449349][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.477403][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.577070][T15814] team0: Port device team_slave_0 added
[  375.580496][T15814] team0: Port device team_slave_1 added
[  375.655797][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.657887][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.701794][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.736463][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.738602][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.747888][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.757890][T15896] siw: device registration error -23
[  375.779009][T15814] hsr_slave_0: entered promiscuous mode
[  375.783192][T15814] hsr_slave_1: entered promiscuous mode
[  375.787219][T15814] debugfs: 'hsr0' already exists in 'hsr'
[  375.789461][T15814] Cannot create hsr debugfs directory
[  375.906194][T15902] __nla_validate_parse: 1 callbacks suppressed
[  375.906207][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4035'.
[  375.910746][T15902] netlink: 90 bytes leftover after parsing attributes in process `syz.3.4035'.
[  375.922659][T15902] netlink: 90 bytes leftover after parsing attributes in process `syz.3.4035'.
[  376.011468][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.144332][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.153577][T15912] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4038'.
[  376.266624][T15918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4040'.
[  376.381804][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.571823][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.868459][T15944] validate_nla: 1 callbacks suppressed
[  376.868480][T15944] netlink: 'syz.3.4048': attribute type 1 has an invalid length.
[  376.905385][ T5829] Bluetooth: hci0: command tx timeout
[  376.939283][   T13] bond0: left allmulticast mode
[  376.954528][   T13] bond_slave_0: left allmulticast mode
[  376.956631][   T13] bond_slave_1: left allmulticast mode
[  376.961096][   T13] bridge0: port 4(bond0) entered disabled state
[  376.988429][   T13] hsr0: left allmulticast mode
[  376.990297][   T13] hsr_slave_0: left allmulticast mode
[  376.992501][   T13] bridge0: port 3(hsr0) entered disabled state
[  377.024110][   T13] bridge_slave_1: left allmulticast mode
[  377.026215][   T13] bridge_slave_1: left promiscuous mode
[  377.028398][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.049259][   T13] bridge_slave_0: left allmulticast mode
[  377.051464][   T13] bridge_slave_0: left promiscuous mode
[  377.064887][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.388524][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.393674][   T13] bond_slave_0: left promiscuous mode
[  377.406335][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.410581][   T13] bond_slave_1: left promiscuous mode
[  377.432388][   T13] bond0 (unregistering): Released all slaves
[  377.441918][T15962] netlink: 'syz.0.4053': attribute type 21 has an invalid length.
[  377.458710][T15962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4053'.
[  377.539459][T15962] netlink: 'syz.0.4053': attribute type 5 has an invalid length.
[  377.541790][T15962] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4053'.
[  377.690843][T15814] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  377.711256][T15814] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  377.725424][T15814] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  377.746539][T15814] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  377.820065][ T6945] wlan1 speed is unknown, defaulting to 1000
[  377.822203][ T6945] infiniband yz2: ib_query_port failed (-19)
[  378.022573][T15814] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.086711][T15814] 8021q: adding VLAN 0 to HW filter on device team0
[  378.111686][T15993] netlink: 'syz.3.4059': attribute type 7 has an invalid length.
[  378.123040][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.125461][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.163494][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.166022][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.622174][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.760167][   T13] hsr_slave_0: left promiscuous mode
[  378.766707][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.768844][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.773531][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.777193][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.782433][   T13] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  378.790715][   T13] batman_adv: batadv0: Removing interface: virt_wifi0
[  378.800316][   T13] veth1_macvtap: left promiscuous mode
[  378.801952][   T13] veth0_macvtap: left promiscuous mode
[  378.804103][   T13] veth1_vlan: left promiscuous mode
[  378.964616][   T13] team0 (unregistering): Port device macvlan0 removed
[  378.985186][ T5829] Bluetooth: hci0: command tx timeout
[  379.102449][   T13] team0 (unregistering): Port device team_slave_1 removed
[  379.131426][   T13] team0 (unregistering): Port device C removed
[  379.492101][T16048] netlink: 'syz.3.4075': attribute type 16 has an invalid length.
[  379.514774][T15814] veth0_vlan: entered promiscuous mode
[  379.520451][T15814] veth1_vlan: entered promiscuous mode
[  379.534211][T16048] netlink: 'syz.3.4075': attribute type 17 has an invalid length.
[  379.633383][T16054] netlink: 182 bytes leftover after parsing attributes in process `syz.0.4076'.
[  380.285212][T16048] bridge0: port 3(batadv_slave_1) entered disabled state
[  380.288060][T16048] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.291091][T16048] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.654139][T16048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.871714][T16048] ipvlan1: left promiscuous mode
[  380.873191][T16048] ipvlan1: left allmulticast mode
[  380.878120][T16048] veth0_vlan: left allmulticast mode
[  381.040950][T15814] veth0_macvtap: entered promiscuous mode
[  381.053808][ T5829] Bluetooth: hci0: command tx timeout
[  381.060552][T15814] veth1_macvtap: entered promiscuous mode
[  381.114014][ T5876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.117418][ T5876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.120779][ T5876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.148651][ T5876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  381.175241][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  381.189933][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.199018][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.202906][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.206197][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.208748][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.319676][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.322480][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.352875][ T7525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.356165][ T7525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.510804][T16080] rdma_rxe: rxe_newlink: failed to add wg1
[  381.636201][T16088] netlink: 'syz.3.4085': attribute type 12 has an invalid length.
[  381.641849][T16088] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4085'.
[  381.697416][T16092] netlink: 'syz.0.4087': attribute type 29 has an invalid length.
[  381.723855][T16092] netlink: 'syz.0.4087': attribute type 29 has an invalid length.
[  381.868370][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'.
[  382.050363][T16109] netlink: 'syz.3.4091': attribute type 2 has an invalid length.
[  382.393077][T16130] netlink: 'syz.4.4098': attribute type 6 has an invalid length.
[  382.401609][T16130] netlink: 'syz.4.4098': attribute type 1 has an invalid length.
[  382.407327][T16130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4098'.
[  382.410984][T16130] bridge0: port 1(bridge_slave_0) entered learning state
[  382.513229][T16137] netlink: 'syz.3.4100': attribute type 13 has an invalid length.
[  382.515937][T16137] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.4100'.
[  382.893974][T16166] netlink: 'syz.4.4113': attribute type 1 has an invalid length.
[  382.896354][T16166] netlink: 'syz.4.4113': attribute type 1 has an invalid length.
[  382.945622][T16168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4114'.
[  383.130161][ T5829] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6
[  384.179813][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  384.185967][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  384.628423][T16233] netlink: 'syz.3.4129': attribute type 22 has an invalid length.
[  384.973331][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'.
[  386.715197][T16286] IPv6: NLM_F_CREATE should be specified when creating new route
[  387.440860][T16291] netlink: 'syz.0.4153': attribute type 15 has an invalid length.
[  388.057153][T16332] netlink: 'syz.4.4171': attribute type 8 has an invalid length.
[  388.060009][T16332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4171'.
[  388.063375][T16332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4171'.
[  388.217020][T16340] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4175'.
[  388.228761][T16340] netlink: 'syz.4.4175': attribute type 10 has an invalid length.
[  390.176436][T16363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4182'.
[  391.154213][T16373] netlink: 'syz.4.4187': attribute type 3 has an invalid length.
[  391.156515][T16373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4187'.
[  391.443672][   T33] audit: type=1107 audit(1774549258.895:5): pid=16387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  392.265005][T16413] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4203'.
[  393.102004][T16447] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  393.105037][T16447] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  393.695321][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.367082][   T11] block nbd0: Possible stuck request ffff88810afe0000: control (read@0,4096B). Runtime 300 seconds
[  398.002054][ T5829] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  398.275275][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4238'.
[  400.095933][ T5198] Bluetooth: hci1: command 0x2016 tx timeout
[  401.023226][T16526] netlink: 65035 bytes leftover after parsing attributes in process `syz.3.4246'.
[  402.174991][ T5829] Bluetooth: hci1: command 0x2016 tx timeout
[  402.446678][T16520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4241'.
[  402.872901][T16554] netlink: 'syz.4.4259': attribute type 4 has an invalid length.
[  402.877104][T16554] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4259'.
[  402.888927][T16554] netlink: 'syz.4.4259': attribute type 1 has an invalid length.
[  402.891138][T16554] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.4259'.
[  403.059478][T16565] netlink: 'syz.0.4263': attribute type 10 has an invalid length.
[  403.067173][T16565] team0: Device vxcan1 is of different type
[  403.191252][T16571] netlink: 'syz.4.4267': attribute type 3 has an invalid length.
[  403.193058][T16569] netlink: 'syz.0.4266': attribute type 10 has an invalid length.
[  403.194109][T16571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4267'.
[  403.200946][T16569] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4266'.
[  403.204511][T16569] batadv_slave_1: entered promiscuous mode
[  403.206533][T16569] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.208846][T16569] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.530575][ T5198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  403.535390][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  403.539294][ T5198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  403.544293][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  403.547860][ T5198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  403.587377][T16579] lo speed is unknown, defaulting to 1000
[  404.007262][T16579] chnl_net:caif_netlink_parms(): no params data found
[  404.106710][T16579] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.109569][T16579] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.112443][T16579] bridge_slave_0: entered allmulticast mode
[  404.117501][T16579] bridge_slave_0: entered promiscuous mode
[  404.122162][T16579] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.125336][T16579] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.128221][T16579] bridge_slave_1: entered allmulticast mode
[  404.132191][T16579] bridge_slave_1: entered promiscuous mode
[  404.170526][T16579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.178415][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.211539][T16579] team0: Port device team_slave_0 added
[  404.216671][T16579] team0: Port device team_slave_1 added
[  404.245026][T16579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.247821][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.257696][T16579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.263469][T16579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.267885][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.277561][T16579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.327840][T16579] hsr_slave_0: entered promiscuous mode
[  404.331398][T16579] hsr_slave_1: entered promiscuous mode
[  404.335366][T16579] debugfs: 'hsr0' already exists in 'hsr'
[  404.337702][T16579] Cannot create hsr debugfs directory
[  405.614722][ T5829] Bluetooth: hci1: command tx timeout
[  406.830121][   T13] batadv_slave_1: left allmulticast mode
[  406.832235][   T13] batadv_slave_1: left promiscuous mode
[  406.838709][T16600] netlink: 'syz.0.4278': attribute type 10 has an invalid length.
[  406.845343][   T13] bridge0: port 3(batadv_slave_1) entered disabled state
[  406.848642][T16600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4278'.
[  406.855970][   T13] bridge_slave_1: left allmulticast mode
[  406.858113][   T13] bridge_slave_1: left promiscuous mode
[  406.860912][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.875157][   T13] bridge_slave_0: left allmulticast mode
[  406.877294][   T13] bridge_slave_0: left promiscuous mode
[  406.879501][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.150675][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  407.157866][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.162829][   T13] bond0 (unregistering): Released all slaves
[  407.172479][T16600] batadv0: entered promiscuous mode
[  407.175556][T16600] batadv0: entered allmulticast mode
[  407.182998][T16600] bridge0: port 3(batadv0) entered blocking state
[  407.186600][T16600] bridge0: port 3(batadv0) entered disabled state
[  407.374656][T16600] bridge0: port 3(batadv0) entered blocking state
[  407.380327][T16600] bridge0: port 3(batadv0) entered forwarding state
[  407.435201][ T5826] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  407.440597][ T5826] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  407.453218][T16613] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4282'.
[  407.696237][ T5829] Bluetooth: hci1: command tx timeout
[  407.891291][T16633] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4288'.
[  408.072473][   T13] hsr_slave_0: left promiscuous mode
[  408.101522][   T13] hsr_slave_1: left promiscuous mode
[  408.104746][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.304123][   T13] team0 (unregistering): Port device team_slave_1 removed
[  408.318096][   T13] team0 (unregistering): Port device team_slave_0 removed
[  408.765886][T16657] netlink: 'syz.4.4298': attribute type 5 has an invalid length.
[  408.770415][T16657] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4298'.
[  408.778975][T16579] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  408.786783][T16579] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  408.792139][T16579] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  408.809314][T16579] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  408.978078][T16579] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.005569][T16579] 8021q: adding VLAN 0 to HW filter on device team0
[  409.041063][ T9701] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.043909][ T9701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.069063][ T9701] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.071951][ T9701] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.352576][T16579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.415423][T16579] veth0_vlan: entered promiscuous mode
[  409.428437][T16579] veth1_vlan: entered promiscuous mode
[  409.455545][T16579] veth0_macvtap: entered promiscuous mode
[  409.462155][T16579] veth1_macvtap: entered promiscuous mode
[  409.498640][T16579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.517181][T16579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.524935][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4302'.
[  409.532050][ T5876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.537480][ T5876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.540797][T16685] ksmbd: Unknown IPC event: 0, ignore.
[  409.548777][ T5876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.557269][ T5876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.656081][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.659018][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.716125][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.719038][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.776495][ T5829] Bluetooth: hci1: command tx timeout
[  409.900796][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4307'.
[  409.906432][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4307'.
[  409.912618][T16699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4308'.
[  409.980430][T16705] netlink: 'syz.0.4311': attribute type 10 has an invalid length.
[  410.422254][T16732] net_ratelimit: 31 callbacks suppressed
[  410.422267][T16732] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  410.654979][T16756] netlink: 'syz.0.4335': attribute type 1 has an invalid length.
[  411.500006][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'.
[  411.564728][T16811] netlink: 'syz.3.4350': attribute type 21 has an invalid length.
[  411.720550][T16820] netlink: 'syz.0.4354': attribute type 3 has an invalid length.
[  411.855200][ T5829] Bluetooth: hci1: command tx timeout
[  411.874678][T16830] openvswitch: netlink: IP tunnel dst address not specified
[  412.029269][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4361'.
[  412.052791][T16834] openvswitch: netlink: Invalid VLAN frame
[  412.240165][T16844] netlink: 'syz.4.4366': attribute type 2 has an invalid length.
[  412.243105][T16844] netlink: 'syz.4.4366': attribute type 8 has an invalid length.
[  412.249162][T16844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4366'.
[  412.460050][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4372'.
[  412.522298][T16861] netlink: 'syz.0.4374': attribute type 3 has an invalid length.
[  412.525919][T16861] netlink: 'syz.0.4374': attribute type 1 has an invalid length.
[  412.528430][T16861] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4374'.
[  412.907479][T16876] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.021998][T16883] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4384'.
[  413.053072][T16886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4385'.
[  413.258971][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4390'.
[  413.353235][T16895] netlink: 'syz.3.4389': attribute type 2 has an invalid length.
[  413.450090][T16903] hsr_slave_1 (unregistering): left promiscuous mode
[  413.579723][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'.
[  413.803148][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'.
[  413.830708][T16934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4408'.
[  414.375781][T16962] validate_nla: 2 callbacks suppressed
[  414.375799][T16962] netlink: 'syz.0.4422': attribute type 21 has an invalid length.
[  415.352403][T17019] netlink: 'syz.4.4449': attribute type 10 has an invalid length.
[  415.390208][ T5829] Bluetooth: hci0: unexpected subevent 0x06 length: 150 > 10
[  415.502117][T17031] openvswitch: netlink: Missing key (keys=800040, expected=2000)
[  416.177760][T17062] rdma_rxe: rxe_newlink: failed to add lo
[  417.454718][ T5829] Bluetooth: hci0: command tx timeout
[  418.599062][T17079] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  418.847629][T17094] __nla_validate_parse: 8 callbacks suppressed
[  418.847642][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4487'.
[  418.887060][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'.
[  418.890057][T17098] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  418.925268][T17098] netlink: 'syz.0.4486': attribute type 2 has an invalid length.
[  419.292822][ T5829] Bluetooth: hci0: Malformed Event: 0x02
[  419.337167][T17106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4491'.
[  419.848872][T17148] mac80211_hwsim hwsim41 .3c: renamed from wlan1 (while UP)
[  420.980840][T17190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.038980][T17224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4545'.
[  422.465341][T17219] delete_channel: no stack
[  423.552165][T17258] netlink: 'syz.4.4559': attribute type 21 has an invalid length.
[  423.562616][T17258] netlink: 'syz.4.4559': attribute type 5 has an invalid length.
[  424.899090][T17275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4567'.
[  425.170724][T17283] proc: Bad value for 'gid'
[  425.580702][T17324] syzkaller0: entered promiscuous mode
[  425.582423][T17324] syzkaller0: entered allmulticast mode
[  425.695119][   T34] INFO: task udevd:5809 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  425.715194][   T34]       Not tainted syzkaller #0
[  425.717156][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  425.720391][   T34] task:udevd           state:D stack:22200 pid:5809  tgid:5809  ppid:5255   task_flags:0x400140 flags:0x00080002
[  425.751910][   T34] Call Trace:
[  425.753337][   T34]  <TASK>
[  425.755215][   T34]  __schedule+0x15dd/0x52d0
[  425.762085][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  425.764967][   T34]  ? __pfx___schedule+0x10/0x10
[  425.767036][   T34]  ? schedule+0x90/0x360
[  425.772197][   T34]  schedule+0x164/0x360
[  425.773485][   T34]  io_schedule+0x7f/0xd0
[  425.779072][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  425.780683][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  425.788827][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  425.791100][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  425.792897][   T34]  do_read_cache_folio+0x1ad/0x590
[  425.798983][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  425.800932][   T34]  read_part_sector+0xb6/0x2b0
[  425.802397][   T34]  adfspart_check_POWERTEC+0x92/0xef0
[  425.809487][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  425.811216][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  425.812969][   T34]  bdev_disk_changed+0x7ba/0x1550
[  425.819295][   T34]  ? bdev_open+0xe0/0xd30
[  425.820701][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  425.822335][   T34]  blkdev_get_whole+0x380/0x510
[  425.829504][   T34]  bdev_open+0x31e/0xd30
[  425.830876][   T34]  blkdev_open+0x470/0x610
[  425.832299][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  425.839633][   T34]  do_dentry_open+0x785/0x14e0
[  425.841089][   T34]  vfs_open+0x3b/0x340
[  425.842272][   T34]  ? path_openat+0x2df0/0x3860
[  425.849803][   T34]  path_openat+0x2e08/0x3860
[  425.851336][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  425.853247][   T34]  ? stack_depot_save_flags+0x33/0x810
[  425.859947][   T34]  ? __pfx_path_openat+0x10/0x10
[  425.861415][   T34]  ? __x64_sys_openat+0x138/0x170
[  425.862915][   T34]  ? do_syscall_64+0x14d/0xf80
[  425.871179][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.873516][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  425.880662][   T34]  do_file_open+0x23e/0x4a0
[  425.882392][   T34]  ? __pfx_do_file_open+0x10/0x10
[  425.888023][   T34]  ? _raw_spin_unlock+0x28/0x50
[  425.889842][   T34]  ? alloc_fd+0x64b/0x6c0
[  425.923708][   T34]  do_sys_openat2+0x113/0x200
[  425.934019][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  425.942172][   T34]  ? rcu_is_watching+0x15/0xb0
[  425.954986][   T34]  __x64_sys_openat+0x138/0x170
[  425.956495][   T34]  do_syscall_64+0x14d/0xf80
[  425.957902][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.973751][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.975656][   T34] RIP: 0033:0x7f765a9169a4
[  425.977047][   T34] RSP: 002b:00007ffeb3080b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  425.979538][   T34] RAX: ffffffffffffffda RBX: 000055ba3f3ad220 RCX: 00007f765a9169a4
[  425.982493][   T34] RDX: 00000000000a0800 RSI: 000055ba3f3a7820 RDI: 00000000ffffff9c
[  425.985178][   T34] RBP: 000055ba3f3a7820 R08: 0000000000000001 R09: 3fffffffffffffff
[  425.987958][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  425.990957][   T34] R13: 000055ba3f3a3950 R14: 0000000000000001 R15: 000055ba3f38c910
[  425.994072][   T34]  </TASK>
[  425.996082][   T34] 
[  425.996082][   T34] Showing all locks held in the system:
[  426.000480][   T34] 2 locks held by kworker/1:1/31:
[  426.002386][   T34]  #0: ffff88810006b148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  426.007271][   T34]  #1: ffffc90000a67c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  426.010560][   T34] 1 lock held by khungtaskd/34:
[  426.011971][   T34]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  426.015751][   T34] 1 lock held by klogd/5244:
[  426.017544][   T34]  #0: ffff88812103ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  426.021192][   T34] 2 locks held by getty/5632:
[  426.022971][   T34]  #0: ffff88811745c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  426.026747][   T34]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  426.030521][   T34] 1 lock held by udevd/5809:
[  426.032221][   T34]  #0: ffff888169e4b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  426.035839][   T34] 1 lock held by syz-executor/16579:
[  426.037843][   T34] 2 locks held by syz.0.4587/17321:
[  426.039729][   T34]  #0: ffffffff8fbd22e8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70
[  426.044874][   T34]  #1: ffffffff8e764878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  426.048960][   T34] 
[  426.065356][   T34] =============================================
[  426.065356][   T34] 
[  426.067828][   T34] NMI backtrace for cpu 1
[  426.067839][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  426.067849][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.067869][   T34] Call Trace:
[  426.067874][   T34]  <TASK>
[  426.067879][   T34]  dump_stack_lvl+0xe8/0x150
[  426.067898][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  426.067914][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  426.067927][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  426.067940][   T34]  sys_info+0x135/0x170
[  426.067951][   T34]  watchdog+0xfd9/0x1030
[  426.067966][   T34]  ? watchdog+0x21a/0x1030
[  426.067985][   T34]  kthread+0x388/0x470
[  426.067994][   T34]  ? __pfx_watchdog+0x10/0x10
[  426.068004][   T34]  ? __pfx_kthread+0x10/0x10
[  426.068012][   T34]  ret_from_fork+0x51e/0xb90
[  426.068026][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  426.068035][   T34]  ? __switch_to+0xc7d/0x1450
[  426.068048][   T34]  ? __pfx_kthread+0x10/0x10
[  426.068056][   T34]  ret_from_fork_asm+0x1a/0x30
[  426.068073][   T34]  </TASK>
[  426.068090][   T34] Sending NMI from CPU 1 to CPUs 0:
[  426.100690][    C0] NMI backtrace for cpu 0
[  426.100707][    C0] CPU: 0 UID: 0 PID: 17323 Comm: syz.4.4588 Not tainted syzkaller #0 PREEMPT(full) 
[  426.100717][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.100723][    C0] RIP: 0010:rcu_is_watching+0x74/0xb0
[  426.100741][    C0] Code: 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 39 aa 71 11 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f <e9> 97 02 07 0a cc e8 21 f8 88 ff eb e8 48 c7 c7 c0 4a 76 8e 48 89
[  426.100749][    C0] RSP: 0018:ffffc900017ef478 EFLAGS: 00000202
[  426.100757][    C0] RAX: 0000000000000001 RBX: ffffffff8176a787 RCX: 0000000080000001
[  426.100763][    C0] RDX: 0000000000000000 RSI: ffffffff8c27c9e0 RDI: ffffffff8c27c9a0
[  426.100768][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  426.100773][    C0] R10: ffffc900017ef628 R11: fffff520002fded1 R12: 0000000000000002
[  426.100778][    C0] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000
[  426.100783][    C0] FS:  00005555890ab500(0000) GS:ffff88818de5a000(0000) knlGS:0000000000000000
[  426.100793][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  426.100798][    C0] CR2: 00007fd81d887e20 CR3: 0000000169958000 CR4: 00000000000006f0
[  426.100823][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  426.100829][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  426.100833][    C0] Call Trace:
[  426.100838][    C0]  <TASK>
[  426.100841][    C0]  lock_acquire+0x57/0x2e0
[  426.100855][    C0]  ? __unwind_start+0xf7/0x760
[  426.100868][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  426.100878][    C0]  unwind_next_frame+0xc2/0x23c0
[  426.100888][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  426.100899][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  426.100908][    C0]  ? get_stack_info_noinstr+0x1b/0x130
[  426.100922][    C0]  __unwind_start+0x5b8/0x760
[  426.100932][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  426.100942][    C0]  arch_stack_walk+0xe3/0x150
[  426.100954][    C0]  ? __unwind_start+0xf7/0x760
[  426.100965][    C0]  stack_trace_save+0xa9/0x100
[  426.100972][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  426.100980][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  426.100990][    C0]  save_stack+0x122/0x230
[  426.101000][    C0]  ? __pfx_save_stack+0x10/0x10
[  426.101013][    C0]  __reset_page_owner+0x71/0x1f0
[  426.101021][    C0]  __free_frozen_pages+0xc2b/0xdb0
[  426.101031][    C0]  ? ___free_pages+0xb2/0x220
[  426.101040][    C0]  vfree+0x25a/0x400
[  426.101048][    C0]  ? __pfx_kcov_close+0x10/0x10
[  426.101060][    C0]  kcov_close+0x28/0x50
[  426.101069][    C0]  __fput+0x44f/0xa70
[  426.101083][    C0]  task_work_run+0x1d9/0x270
[  426.101092][    C0]  ? __pfx_task_work_run+0x10/0x10
[  426.101100][    C0]  ? kmem_cache_free+0x187/0x630
[  426.101109][    C0]  ? do_exit+0x70a/0x23c0
[  426.101118][    C0]  do_exit+0x70f/0x23c0
[  426.101126][    C0]  ? __pfx_do_exit+0x10/0x10
[  426.101133][    C0]  ? perf_trace_preemptirq_template+0xb2/0x350
[  426.101145][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  426.101156][    C0]  do_group_exit+0x21b/0x2d0
[  426.101162][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  426.101171][    C0]  get_signal+0x1284/0x1330
[  426.101185][    C0]  arch_do_signal_or_restart+0xbc/0x830
[  426.101195][    C0]  ? perf_trace_preemptirq_template+0xb2/0x350
[  426.101205][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  426.101218][    C0]  exit_to_user_mode_loop+0x86/0x480
[  426.101227][    C0]  ? rcu_is_watching+0x15/0xb0
[  426.101237][    C0]  do_syscall_64+0x32d/0xf80
[  426.101245][    C0]  ? trace_irq_disable+0x3b/0x150
[  426.101255][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.101264][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.101271][    C0] RIP: 0033:0x7fd16719c799
[  426.101278][    C0] Code: Unable to access opcode bytes at 0x7fd16719c76f.
[  426.101283][    C0] RSP: 002b:00007ffffe473b98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  426.101291][    C0] RAX: 0000000000000000 RBX: 00007ffffe473c80 RCX: 00007fd16719c799
[  426.101296][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  426.101300][    C0] RBP: 0000000000067df9 R08: 0000000000000001 R09: 0000000000000000
[  426.101305][    C0] R10: 0000001b30120000 R11: 0000000000000246 R12: 00007ffffe473cc0
[  426.101310][    C0] R13: 00007fd167415fac R14: 0000000000067e3d R15: 00007fd167415fa0
[  426.101319][    C0]  </TASK>
[  426.228659][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  426.230657][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  426.233268][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.236175][   T34] Call Trace:
[  426.237148][   T34]  <TASK>
[  426.238017][   T34]  vpanic+0x56c/0xa60
[  426.239183][   T34]  ? __pfx___schedule+0x10/0x10
[  426.240604][   T34]  ? __pfx_vpanic+0x10/0x10
[  426.241976][   T34]  ? __pfx_console_unlock+0x10/0x10
[  426.243551][   T34]  panic+0xc5/0xd0
[  426.244661][   T34]  ? __pfx_panic+0x10/0x10
[  426.245965][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  426.247529][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  426.249308][   T34]  watchdog+0x1023/0x1030
[  426.250604][   T34]  ? watchdog+0x21a/0x1030
[  426.251941][   T34]  kthread+0x388/0x470
[  426.253171][   T34]  ? __pfx_watchdog+0x10/0x10
[  426.254927][   T34]  ? __pfx_kthread+0x10/0x10
[  426.256267][   T34]  ret_from_fork+0x51e/0xb90
[  426.257620][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  426.259092][   T34]  ? __switch_to+0xc7d/0x1450
[  426.260509][   T34]  ? __pfx_kthread+0x10/0x10
[  426.261952][   T34]  ret_from_fork_asm+0x1a/0x30
[  426.263425][   T34]  </TASK>
[  426.264954][   T34] Kernel Offset: disabled
[  426.266215][   T34] Rebooting in 86400 seconds..
