last executing test programs:

2m49.890603793s ago: executing program 2 (id=767):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1f7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e08f086dda24f733c8e4652ea392e6a16ad8c0f53c26617c38e05c8c489175277615fbd910bf89237707a0edf", 0x0, 0xfe7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2m49.890329903s ago: executing program 2 (id=769):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d)

2m49.812751794s ago: executing program 2 (id=770):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m49.812294294s ago: executing program 2 (id=772):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23)

2m49.8121601s ago: executing program 2 (id=773):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m49.730084078s ago: executing program 2 (id=776):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x20000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r4, 0x0, 0x40)
r5 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
close(r0)
sendmsg$sock(r4, 0x0, 0x4004840)
r6 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff}, 0x14}}, 0x4040000)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)

2m34.636099581s ago: executing program 32 (id=776):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$tipc(r2, 0x0, 0x20000040)
socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="000003009165a101010000aaaaaaaa07aaaaaaaaaaaa"])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2441, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
r4 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=""/167, 0xa7}, 0x50)
sendmsg$kcm(r4, 0x0, 0x40)
r5 = socket$kcm(0x28, 0x1, 0x0)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0)
close(r0)
sendmsg$sock(r4, 0x0, 0x4004840)
r6 = socket$kcm(0x2, 0x3, 0x84)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640))
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff}, 0x14}}, 0x4040000)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)

2m23.798855284s ago: executing program 1 (id=939):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x17, &(0x7f0000000100), 0x4)

2m23.798419874s ago: executing program 1 (id=941):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f4bdd7030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m23.748138621s ago: executing program 1 (id=943):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x412, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40, 0x300}, 0x20)

2m23.690815267s ago: executing program 1 (id=944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

2m23.690548186s ago: executing program 1 (id=945):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21)

2m23.690219329s ago: executing program 1 (id=946):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

2m8.651991844s ago: executing program 33 (id=946):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

1m33.721526519s ago: executing program 3 (id=1584):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000100005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m33.721393417s ago: executing program 0 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)

1m33.721292731s ago: executing program 3 (id=1586):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000240001002cbd7000fcdbdf250400000006000400520000000600040000ff"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x240400c0)

1m33.660594048s ago: executing program 0 (id=1587):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)

1m33.660116372s ago: executing program 0 (id=1589):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]})

1m33.660005899s ago: executing program 3 (id=1590):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

1m33.580243484s ago: executing program 0 (id=1592):
r0 = socket$kcm(0x2, 0x2, 0x73)
recvmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040)

1m33.579990026s ago: executing program 3 (id=1594):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880)

1m33.511607774s ago: executing program 0 (id=1595):
socket$kcm(0x28, 0x1, 0x0)
socket$kcm(0x28, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

1m33.439235993s ago: executing program 3 (id=1596):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

1m33.191050019s ago: executing program 3 (id=1597):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4042}, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x8, 0x3, 0x8, 0x0, 0x8, 0x4800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x4010, 0x0, 0x1, 0x9, 0x1, 0xbd, 0x100, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0055a1150015000200142603600e12080009007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0)

1m33.041286598s ago: executing program 34 (id=1597):
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4042}, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x8, 0x3, 0x8, 0x0, 0x8, 0x4800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x4010, 0x0, 0x1, 0x9, 0x1, 0xbd, 0x100, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0055a1150015000200142603600e12080009007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0)

1m32.830622386s ago: executing program 0 (id=1599):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f)

1m32.828193128s ago: executing program 35 (id=1599):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f)

23.570033412s ago: executing program 5 (id=2654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'veth0_to_team\x00'})

22.790105615s ago: executing program 5 (id=2656):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)=r2}, 0x20)
recvmsg$kcm(r2, 0x0, 0x4000a140)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e162bc40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351d186078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)

22.528312642s ago: executing program 5 (id=2662):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80648c2594070224fc60", 0x14}], 0x1}, 0x4000000)

22.44879666s ago: executing program 5 (id=2665):
syz_clone(0x80001280, 0x0, 0x0, 0x0, 0x0, 0x0)

22.377863561s ago: executing program 5 (id=2668):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x3368, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}, {0x0, 0x8, 0x5, 0xc0ddbc6}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef)

22.200031203s ago: executing program 5 (id=2675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x40)

7.142221627s ago: executing program 36 (id=2675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x40)

1.029588492s ago: executing program 7 (id=2869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

939.859807ms ago: executing program 7 (id=2871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@i}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

867.438525ms ago: executing program 7 (id=2875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)

867.155265ms ago: executing program 7 (id=2877):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

808.000911ms ago: executing program 7 (id=2880):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = gettid()
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xe}, 0x3, 0x0, 0x8000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x1)
syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644, 0x2, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000100)})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fbffffff18120000", @ANYRES32=r4, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r4, 0x58, &(0x7f00000005c0)}, 0x10)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8008}, 0x20040800)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
socketpair(0x10, 0x6, 0x7, &(0x7f0000000000))
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r8)
close(r7)

530.087199ms ago: executing program 7 (id=2886):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

387.470312ms ago: executing program 6 (id=2891):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xb, 0x8, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76, 0x900}, 0x20)

387.322944ms ago: executing program 4 (id=2892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20)

319.908205ms ago: executing program 6 (id=2893):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0xfffffffffffffffd}], 0x1}, 0x160)

319.617911ms ago: executing program 4 (id=2894):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x11486, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x1}, 0x200418, 0x2e, 0xfffffbff, 0x4, 0x2, 0x6, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48)
r3 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20)
recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140)
socketpair(0x5, 0x3, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x3, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r5, r4})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db53"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

319.394511ms ago: executing program 6 (id=2895):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80047437, 0x0)

198.344294ms ago: executing program 4 (id=2896):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006d40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0xfffffffffffffcd1}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x8084)

194.569534ms ago: executing program 4 (id=2897):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x30)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})

79.855766ms ago: executing program 6 (id=2898):
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc1)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)

79.646572ms ago: executing program 6 (id=2899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

388.989µs ago: executing program 4 (id=2900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x87}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0)

107.555µs ago: executing program 6 (id=2901):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f)

0s ago: executing program 4 (id=2902):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x6, 0x3, 0x401, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1a009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x3338, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43069' (ED25519) to the list of known hosts.
syzkaller login: [   49.089710][ T5770] cgroup: Unknown subsys name 'net'
[   49.197749][ T5770] cgroup: Unknown subsys name 'cpuset'
[   49.203108][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.504126][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.528918][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.536631][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.540641][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.553566][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.557622][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.564170][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.574279][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.596533][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.601003][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.604906][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.608991][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.624346][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.633211][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.638270][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.642738][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.981754][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   57.052764][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   57.066738][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   57.175011][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.180071][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.184350][ T5838] bridge_slave_0: entered allmulticast mode
[   57.188350][ T5838] bridge_slave_0: entered promiscuous mode
[   57.211185][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.214974][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.218134][ T5838] bridge_slave_1: entered allmulticast mode
[   57.222020][ T5838] bridge_slave_1: entered promiscuous mode
[   57.298881][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.302159][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.305458][ T5842] bridge_slave_0: entered allmulticast mode
[   57.309326][ T5842] bridge_slave_0: entered promiscuous mode
[   57.316157][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.319239][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.322385][ T5842] bridge_slave_1: entered allmulticast mode
[   57.326484][ T5842] bridge_slave_1: entered promiscuous mode
[   57.331897][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.336242][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.339268][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.342322][ T5848] bridge_slave_0: entered allmulticast mode
[   57.347858][ T5848] bridge_slave_0: entered promiscuous mode
[   57.352547][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.355866][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.358930][ T5848] bridge_slave_1: entered allmulticast mode
[   57.362688][ T5848] bridge_slave_1: entered promiscuous mode
[   57.380819][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.447542][ T5838] team0: Port device team_slave_0 added
[   57.454517][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.461103][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.466090][ T5838] team0: Port device team_slave_1 added
[   57.469983][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.475691][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.552824][ T5842] team0: Port device team_slave_0 added
[   57.558403][ T5842] team0: Port device team_slave_1 added
[   57.561728][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.565575][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.576702][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.586066][ T5848] team0: Port device team_slave_0 added
[   57.602336][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.605475][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.616449][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.624376][ T5848] team0: Port device team_slave_1 added
[   57.674031][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.676976][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.688234][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.694798][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.697670][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.708100][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.712731][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.715759][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.726696][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.738645][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.741638][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.754506][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.808858][ T5838] hsr_slave_0: entered promiscuous mode
[   57.812158][ T5838] hsr_slave_1: entered promiscuous mode
[   57.845693][ T5842] hsr_slave_0: entered promiscuous mode
[   57.848452][ T5842] hsr_slave_1: entered promiscuous mode
[   57.850690][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   57.852666][ T5842] Cannot create hsr debugfs directory
[   57.869842][ T5848] hsr_slave_0: entered promiscuous mode
[   57.872593][ T5848] hsr_slave_1: entered promiscuous mode
[   57.877721][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.880128][ T5848] Cannot create hsr debugfs directory
[   58.152012][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.160516][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.165432][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.180445][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.227897][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.251711][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.271756][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.280586][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.321950][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.336448][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.346423][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.355495][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.415825][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.441935][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.463858][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.466931][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.480771][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.483719][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.491874][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.543208][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   58.558546][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.561462][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.577982][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.581021][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.590472][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.614349][ T5845] Bluetooth: hci0: command tx timeout
[   58.646696][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.661029][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.664255][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.686991][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.690129][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.694119][   T54] Bluetooth: hci2: command tx timeout
[   58.697075][ T5845] Bluetooth: hci1: command tx timeout
[   58.811867][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.913107][ T5842] veth0_vlan: entered promiscuous mode
[   58.925260][ T5842] veth1_vlan: entered promiscuous mode
[   58.966903][ T5842] veth0_macvtap: entered promiscuous mode
[   58.978748][ T5842] veth1_macvtap: entered promiscuous mode
[   58.996813][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.010318][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.015620][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.018960][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.029319][ T5884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.033112][ T5884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.046617][ T5884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.049440][ T5884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.106129][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.108788][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.142633][ T5848] veth0_vlan: entered promiscuous mode
[   59.146380][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.147830][ T5838] veth0_vlan: entered promiscuous mode
[   59.151747][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.165236][ T5848] veth1_vlan: entered promiscuous mode
[   59.173106][ T5838] veth1_vlan: entered promiscuous mode
[   59.189907][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.221466][ T5848] veth0_macvtap: entered promiscuous mode
[   59.227040][ T5911] C: renamed from team_slave_0 (while UP)
[   59.231051][ T5911] netlink: 'syz.0.1': attribute type 8 has an invalid length.
[   59.237933][ T5911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   59.247886][ T5848] veth1_macvtap: entered promiscuous mode
[   59.259819][ T5838] veth0_macvtap: entered promiscuous mode
[   59.268575][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.287403][ T5838] veth1_macvtap: entered promiscuous mode
[   59.301244][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.316212][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.319463][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.322506][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.331219][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.335737][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.355244][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.386460][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.402964][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.409261][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.412659][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.477043][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.479888][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.509059][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.512956][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.543572][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.546204][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.570614][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.574940][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.672722][ T5922] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.713186][ T5922] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.719780][ T5922] bond_slave_0: entered promiscuous mode
[   59.721952][ T5922] bond_slave_1: entered promiscuous mode
[   59.866840][ T5936] netlink: 'syz.2.13': attribute type 12 has an invalid length.
[   59.870177][ T5936] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.878231][    C0] hrtimer: interrupt took 16073 ns
[   59.938379][ T5845] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[   60.694517][ T5845] Bluetooth: hci0: command tx timeout
[   60.775271][ T5845] Bluetooth: hci1: command tx timeout
[   60.777456][ T5845] Bluetooth: hci2: command tx timeout
[   61.304812][ T5979] netlink: 'syz.1.33': attribute type 13 has an invalid length.
[   61.307231][ T5979] netlink: 'syz.1.33': attribute type 17 has an invalid length.
[   61.312392][ T5979] gretap0: refused to change device tx_queue_len
[   61.315509][ T5979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   61.475257][ T5987] netlink: 180 bytes leftover after parsing attributes in process `syz.0.35'.
[   61.858127][ T6013] netlink: 763 bytes leftover after parsing attributes in process `syz.1.49'.
[   61.922439][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'.
[   61.927877][ T6015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.50'.
[   61.981006][ T6017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.172842][ T6022] syzkaller0: entered promiscuous mode
[   62.175925][ T6022] syzkaller0: entered allmulticast mode
[   62.773969][   T54] Bluetooth: hci0: command tx timeout
[   62.776507][ T6031] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   62.853464][   T54] Bluetooth: hci2: command tx timeout
[   62.855276][   T54] Bluetooth: hci1: command tx timeout
[   63.913261][ T6051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.66'.
[   63.917542][ T6051] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   64.863906][ T6068] netlink: 22 bytes leftover after parsing attributes in process `syz.1.73'.
[   64.876662][ T5845] Bluetooth: hci0: command tx timeout
[   64.935412][   T54] Bluetooth: hci2: command tx timeout
[   64.938032][ T5845] Bluetooth: hci1: command tx timeout
[   65.380362][ T6097] syzkaller0: entered promiscuous mode
[   65.382389][ T6097] syzkaller0: entered allmulticast mode
[   66.140957][ T6139] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.103'.
[   66.612776][ T6155] tap0: tun_chr_ioctl cmd 1074025677
[   66.625439][ T6155] tap0: linktype set to 825
[   66.690794][ T6159] netlink: 'syz.0.113': attribute type 2 has an invalid length.
[   66.704484][ T6159] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.113'.
[   66.821617][ T6166] netlink: 10 bytes leftover after parsing attributes in process `syz.0.116'.
[   66.949245][ T5845] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[   66.988267][ T6176] wg2: entered allmulticast mode
[   67.006315][ T6176] wg2: entered promiscuous mode
[   67.014542][ T6179] lo speed is unknown, defaulting to 1000
[   67.032377][ T6179] lo speed is unknown, defaulting to 1000
[   67.132881][ T6179] lo speed is unknown, defaulting to 1000
[   67.174379][ T6179] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.208671][ T6179] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   67.230600][ T6192] netlink: 'syz.0.128': attribute type 1 has an invalid length.
[   67.233242][ T6192] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.128'.
[   67.531574][ T6179] lo speed is unknown, defaulting to 1000
[   67.617514][ T6179] lo speed is unknown, defaulting to 1000
[   67.662924][ T6179] lo speed is unknown, defaulting to 1000
[   67.941807][ T6211] netlink: 'syz.1.136': attribute type 11 has an invalid length.
[   67.944815][ T6211] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.136'.
[   67.950921][ T6209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.250640][ T6226] lo speed is unknown, defaulting to 1000
[   68.385253][ T6236] rdma_rxe: rxe_newlink: failed to add lo
[   68.386376][ T6224] syz.1.142 uses obsolete (PF_INET,SOCK_PACKET)
[   68.479220][ T6243] netlink: 'syz.2.149': attribute type 29 has an invalid length.
[   68.500833][ T6243] netlink: 'syz.2.149': attribute type 10 has an invalid length.
[   68.689463][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.820347][ T6243] team0: Port device bond0 added
[   68.850838][ T6243] syz.2.149 (6243) used greatest stack depth: 16632 bytes left
[   69.075685][ T6259] netlink: 10 bytes leftover after parsing attributes in process `syz.0.154'.
[   69.346088][ T6280] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.440918][ T6290] netlink: 'syz.1.168': attribute type 4 has an invalid length.
[   69.448681][ T6290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.168'.
[   69.454718][ T6290] .`: renamed from bond0 (while UP)
[   69.462493][ T6292] =======================================================
[   69.462493][ T6292] WARNING: The mand mount option has been deprecated and
[   69.462493][ T6292]          and is ignored by this kernel. Remove the mand
[   69.462493][ T6292]          option from the mount to silence this warning.
[   69.462493][ T6292] =======================================================
[   69.536764][ T6295] netlink: 112 bytes leftover after parsing attributes in process `syz.2.171'.
[   69.790357][ T6317] Zero length message leads to an empty skb
[   70.029683][ T5845] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[   70.098895][ T6335] netlink: 'syz.0.189': attribute type 10 has an invalid length.
[   70.115891][ T6335] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.119603][ T6335] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   70.232603][   T33] audit: type=1107 audit(1757514872.512:2): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   70.960613][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   71.142494][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145319][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.285581][ T6369] netlink: 182 bytes leftover after parsing attributes in process `syz.2.203'.
[   71.491746][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'.
[   71.503422][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[   71.844726][ T6402] IPv6: Can't replace route, no match found
[   73.910069][ T6425] delete_channel: no stack
[   73.977169][ T6462] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   76.036905][ T6522] netlink: 824 bytes leftover after parsing attributes in process `syz.2.272'.
[   76.505350][ T6539] netlink: 'syz.2.281': attribute type 10 has an invalid length.
[   77.284311][ T6546] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.282'.
[   77.323823][ T6539] team0: Device ipvlan1 failed to register rx_handler
[   77.325716][ T6542] netlink: 'syz.2.281': attribute type 29 has an invalid length.
[   77.329275][ T6542] netlink: 'syz.2.281': attribute type 3 has an invalid length.
[   77.332153][ T6542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.281'.
[   77.362859][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.284'.
[   77.411448][ T6553] netlink: 'syz.1.286': attribute type 160 has an invalid length.
[   78.232223][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   78.236806][ T6599] netlink: 6 bytes leftover after parsing attributes in process `syz.1.307'.
[   79.026041][ T6627] netlink: 'syz.1.321': attribute type 3 has an invalid length.
[   79.029162][ T6627] netlink: 135800 bytes leftover after parsing attributes in process `syz.1.321'.
[   80.650232][   T33] audit: type=1107 audit(1757514882.932:3): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   81.149721][ T6702] netlink: 'syz.1.349': attribute type 3 has an invalid length.
[   81.158596][ T6702] netlink: 'syz.1.349': attribute type 1 has an invalid length.
[   81.161955][ T6702] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.349'.
[   81.309541][ T6711] netlink: 'syz.1.352': attribute type 21 has an invalid length.
[   81.312311][ T6711] netlink: 'syz.1.352': attribute type 6 has an invalid length.
[   81.336838][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.352'.
[   82.690299][ T6772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   82.844479][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   82.866619][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.382'.
[   82.881808][ T6778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.382'.
[   82.977370][ T6783] netlink: 96 bytes leftover after parsing attributes in process `syz.2.384'.
[   83.056816][ T6790] netlink: 180 bytes leftover after parsing attributes in process `syz.0.387'.
[   83.148026][ T6799] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.393'.
[   85.140117][ T6868] netlink: 'syz.2.418': attribute type 5 has an invalid length.
[   85.933518][ T6884] lo speed is unknown, defaulting to 1000
[   86.376252][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'.
[   86.468875][   T51] cfg80211: failed to load regulatory.db
[   87.430315][ T6933] netlink: 'syz.0.447': attribute type 11 has an invalid length.
[   87.434486][ T6933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.447'.
[   87.474074][ T6932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.755299][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'.
[   88.689737][ T6959] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[   88.692996][ T6959] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.458'.
[   89.926258][ T6993] team0: Port device team_slave_0 removed
[   89.931108][ T6993] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   90.206102][ T7009] nft_compat: unsupported protocol 0
[   90.344691][ T7016] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   90.348394][ T7016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.907846][ T7050] netlink: 'syz.2.497': attribute type 32 has an invalid length.
[   91.123112][ T7059] C: renamed from team_slave_0
[   91.534453][ T7059] netlink: 'syz.2.498': attribute type 4 has an invalid length.
[   91.537894][ T7059] netlink: 116 bytes leftover after parsing attributes in process `syz.2.498'.
[   91.541582][ T7059] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   91.638457][ T7067] netlink: 'syz.1.502': attribute type 3 has an invalid length.
[   91.641671][ T7067] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.502'.
[   92.179962][ T7088] netlink: 'syz.0.512': attribute type 3 has an invalid length.
[   92.182558][ T7088] netlink: 'syz.0.512': attribute type 1 has an invalid length.
[   92.186497][ T7088] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.512'.
[   92.351690][ T7100] netlink: 'syz.1.517': attribute type 39 has an invalid length.
[   92.357119][ T7100] veth0_macvtap: left promiscuous mode
[   92.922289][ T7123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.528'.
[   94.407512][ T7165] netlink: 'syz.0.545': attribute type 11 has an invalid length.
[   94.410142][ T7165] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.545'.
[   94.415820][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.505268][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.549'.
[   94.677677][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.554'.
[   94.925144][ T7196] netlink: 'syz.0.558': attribute type 10 has an invalid length.
[   94.927671][ T7196] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.558'.
[   95.386786][ T5845] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[   95.829532][ T7239] netlink: 'syz.1.576': attribute type 10 has an invalid length.
[   95.853045][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.860745][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.968236][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.971881][ T7239] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.977683][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.981588][ T7239] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.029936][ T7239] .`: (slave bridge0): Enslaving as an active interface with an up link
[   97.527027][ T7293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.599'.
[   97.700869][ T7304] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[   97.825955][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'.
[   98.126468][ T7332] netlink: 'syz.0.616': attribute type 3 has an invalid length.
[   98.135412][ T7332] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.616'.
[   98.176553][ T7332] netlink: 14 bytes leftover after parsing attributes in process `syz.0.616'.
[   99.159597][ T7386] netlink: 'syz.1.639': attribute type 1 has an invalid length.
[   99.162115][ T7386] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.639'.
[   99.186935][ T7388] netlink: 'syz.1.640': attribute type 4 has an invalid length.
[   99.189477][ T7388] netlink: 17 bytes leftover after parsing attributes in process `syz.1.640'.
[   99.378025][ T7406] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.649'.
[   99.933196][ T7435] netlink: 'syz.0.661': attribute type 13 has an invalid length.
[  101.532486][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.676'.
[  101.536026][ T7470] unsupported nlmsg_type 40
[  101.749041][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.691'.
[  101.888411][ T7519] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.699'.
[  102.689998][ T7563] netlink: 'syz.1.718': attribute type 10 has an invalid length.
[  102.784399][ T7576] __nla_validate_parse: 2 callbacks suppressed
[  102.784408][ T7576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.724'.
[  102.861673][ T7585] netlink: 'syz.0.729': attribute type 21 has an invalid length.
[  103.608922][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[  103.635603][ T7631] netlink: 'syz.0.749': attribute type 3 has an invalid length.
[  103.638234][ T7631] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  103.640890][ T7631] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.749'.
[  103.664556][ T7635] netlink: 7 bytes leftover after parsing attributes in process `syz.2.750'.
[  103.669324][ T7635] netlink: 7 bytes leftover after parsing attributes in process `syz.2.750'.
[  104.108407][ T7684] netlink: set zone limit has 4 unknown bytes
[  105.386054][ T7703] syz.0.783: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  105.401373][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.0.783 Not tainted syzkaller #0 PREEMPT(full) 
[  105.401400][ T7703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.401406][ T7703] Call Trace:
[  105.401410][ T7703]  <TASK>
[  105.401414][ T7703]  dump_stack_lvl+0x189/0x250
[  105.401428][ T7703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.401437][ T7703]  ? __pfx__printk+0x10/0x10
[  105.401447][ T7703]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.401456][ T7703]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.401464][ T7703]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  105.401473][ T7703]  warn_alloc+0x214/0x310
[  105.401485][ T7703]  ? stack_depot_save_flags+0x41b/0x860
[  105.401496][ T7703]  ? __pfx_warn_alloc+0x10/0x10
[  105.401507][ T7703]  ? kasan_save_track+0x4f/0x80
[  105.401515][ T7703]  ? xskq_create+0x56/0x170
[  105.401524][ T7703]  ? xsk_init_queue+0xb0/0x110
[  105.401531][ T7703]  ? xsk_setsockopt+0x57b/0x8d0
[  105.401539][ T7703]  ? do_sock_setsockopt+0x17c/0x1b0
[  105.401573][ T7703]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  105.401587][ T7703]  ? do_syscall_64+0xfa/0x3b0
[  105.401599][ T7703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.401614][ T7703]  __vmalloc_node_range_noprof+0x125/0x12f0
[  105.401638][ T7703]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  105.401648][ T7703]  ? xskq_create+0x56/0x170
[  105.401657][ T7703]  ? __kasan_kmalloc+0x93/0xb0
[  105.401667][ T7703]  vmalloc_user_noprof+0xad/0xf0
[  105.401677][ T7703]  ? xskq_create+0xbf/0x170
[  105.401690][ T7703]  xskq_create+0xbf/0x170
[  105.401705][ T7703]  xsk_init_queue+0xb0/0x110
[  105.401720][ T7703]  xsk_setsockopt+0x57b/0x8d0
[  105.401730][ T7703]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.401737][ T7703]  ? __pfx_aa_sk_perm+0x10/0x10
[  105.401748][ T7703]  ? __fget_files+0x2a/0x420
[  105.401757][ T7703]  ? aa_sock_opt_perm+0xff/0x1b0
[  105.401768][ T7703]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  105.401778][ T7703]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.401791][ T7703]  do_sock_setsockopt+0x17c/0x1b0
[  105.401811][ T7703]  __x64_sys_setsockopt+0x13f/0x1b0
[  105.401827][ T7703]  do_syscall_64+0xfa/0x3b0
[  105.401837][ T7703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.401842][ T7703]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  105.401851][ T7703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.401857][ T7703] RIP: 0033:0x7f2e25b8eba9
[  105.401866][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.401874][ T7703] RSP: 002b:00007f2e269ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  105.401886][ T7703] RAX: ffffffffffffffda RBX: 00007f2e25dd6090 RCX: 00007f2e25b8eba9
[  105.401894][ T7703] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  105.401900][ T7703] RBP: 00007f2e25c11e19 R08: 0000000000000004 R09: 0000000000000000
[  105.401907][ T7703] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  105.401913][ T7703] R13: 00007f2e25dd6128 R14: 00007f2e25dd6090 R15: 00007ffdf5c09918
[  105.401931][ T7703]  </TASK>
[  105.402029][ T7703] Mem-Info:
[  105.521036][ T7703] active_anon:5629 inactive_anon:0 isolated_anon:0
[  105.521036][ T7703]  active_file:10880 inactive_file:38255 isolated_file:0
[  105.521036][ T7703]  unevictable:1768 dirty:31 writeback:0
[  105.521036][ T7703]  slab_reclaimable:9456 slab_unreclaimable:54721
[  105.521036][ T7703]  mapped:18038 shmem:2435 pagetables:909
[  105.521036][ T7703]  sec_pagetables:0 bounce:0
[  105.521036][ T7703]  kernel_misc_reclaimable:0
[  105.521036][ T7703]  free:287314 free_pcp:16495 free_cma:0
[  105.572339][ T7703] Node 0 active_anon:11184kB inactive_anon:0kB active_file:18944kB inactive_file:34088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35820kB dirty:112kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7004kB pagetables:2088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.748730][ T7703] Node 1 active_anon:10668kB inactive_anon:0kB active_file:24576kB inactive_file:118932kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36096kB dirty:12kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4324kB pagetables:1400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.915953][ T7703] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  106.070502][ T7703] lowmem_reserve[]: 0 811 811 811 811
[  106.151984][ T7703] Node 0 DMA32 free:184420kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11116kB inactive_anon:0kB active_file:18944kB inactive_file:34088kB unevictable:3536kB writepending:112kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:31484kB local_pcp:17592kB free_cma:0kB
[  106.328489][ T7703] lowmem_reserve[]: 0 0 0 0 0
[  106.357155][ T7703] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  106.545094][ T7703] lowmem_reserve[]: 0 0 854 854 854
[  106.547312][ T7703] Node 1 Normal free:294460kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10700kB inactive_anon:0kB active_file:24576kB inactive_file:118932kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41248kB local_pcp:24644kB free_cma:0kB
[  106.734576][ T7703] lowmem_reserve[]: 0 0 0 0 0
[  106.736172][ T7703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  106.740952][ T7703] Node 0 DMA32: 1125*4kB (UM) 414*8kB (UE) 137*16kB (U) 456*32kB (UM) 189*64kB (UM) 107*128kB (UME) 42*256kB (UM) 26*512kB (UM) 27*1024kB (UME) 4*2048kB (UME) 38*4096kB (UM) = 265940kB
[  106.941194][ T7703] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  106.947951][ T7703] Node 1 Normal: 3*4kB (UME) 174*8kB (M) 176*16kB (M) 118*32kB (ME) 87*64kB (ME) 82*128kB (ME) 7*256kB (M) 6*512kB (M) 2*1024kB (UM) 2*2048kB (ME) 63*4096kB (UM) = 293116kB
[  106.956210][ T7703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  106.959926][ T7703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  106.964025][ T7703] 51572 total pagecache pages
[  106.965728][ T7703] 0 pages in swap cache
[  106.968061][ T7703] Free swap  = 124996kB
[  106.972453][ T7703] Total swap = 124996kB
[  106.975020][ T7703] 786301 pages RAM
[  106.976581][ T7703] 0 pages HighMem/MovableOnly
[  106.978412][ T7703] 241329 pages reserved
[  106.980042][ T7703] 0 pages cma reserved
[  107.209823][ T7721] netlink: 'syz.0.791': attribute type 10 has an invalid length.
[  107.212179][ T7721] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.791'.
[  107.315149][ T7727] sctp: [Deprecated]: syz.0.794 (pid 7727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.315149][ T7727] Use struct sctp_sack_info instead
[  107.324189][ T7729] netlink: 'syz.1.795': attribute type 3 has an invalid length.
[  107.327113][ T7729] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.795'.
[  107.435629][ T7737] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.800'.
[  108.360584][ T7773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.816'.
[  119.437227][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.440843][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.445308][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.449655][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.453127][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.490311][ T7784] lo speed is unknown, defaulting to 1000
[  119.610802][ T7784] chnl_net:caif_netlink_parms(): no params data found
[  119.688788][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.691844][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.695025][ T7784] bridge_slave_0: entered allmulticast mode
[  119.698834][ T7784] bridge_slave_0: entered promiscuous mode
[  119.702786][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.705764][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.708036][ T7784] bridge_slave_1: entered allmulticast mode
[  119.711742][ T7784] bridge_slave_1: entered promiscuous mode
[  119.746605][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.753136][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.785098][ T7784] team0: Port device team_slave_0 added
[  119.790984][ T7784] team0: Port device team_slave_1 added
[  119.823802][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.826730][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.837653][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.843793][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.846661][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.858159][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.897730][ T7784] hsr_slave_0: entered promiscuous mode
[  119.900021][ T7784] hsr_slave_1: entered promiscuous mode
[  119.902159][ T7784] debugfs: 'hsr0' already exists in 'hsr'
[  119.904646][ T7784] Cannot create hsr debugfs directory
[  120.007409][ T7784] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  120.011844][ T7784] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  120.018138][ T7784] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  120.022715][ T7784] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  120.043162][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.045988][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.048489][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.050803][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.090062][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.099008][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.102046][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.109387][ T7784] 8021q: adding VLAN 0 to HW filter on device team0
[  120.117631][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.119908][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.125941][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.128244][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.261484][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.288265][ T7784] veth0_vlan: entered promiscuous mode
[  120.296365][ T7784] veth1_vlan: entered promiscuous mode
[  120.316385][ T7784] veth0_macvtap: entered promiscuous mode
[  120.320338][ T7784] veth1_macvtap: entered promiscuous mode
[  120.339389][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.351677][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.358771][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.361566][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.381842][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.391027][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.440689][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.449771][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.471794][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.476347][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.479142][ T7887] netlink: 'syz.1.856': attribute type 29 has an invalid length.
[  121.482131][ T7887] netlink: 'syz.1.856': attribute type 29 has an invalid length.
[  121.485281][ T7887] netlink: 'syz.1.856': attribute type 29 has an invalid length.
[  121.504823][   T54] Bluetooth: hci2: command tx timeout
[  121.690886][ T7906] sit0: entered allmulticast mode
[  121.696976][ T7906] sit0: entered promiscuous mode
[  122.732695][ T7933] netlink: 'syz.1.870': attribute type 2 has an invalid length.
[  122.800335][ T7933] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.870'.
[  123.267043][ T7946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.875'.
[  123.611296][   T54] Bluetooth: hci2: command tx timeout
[  125.655074][   T54] Bluetooth: hci2: command tx timeout
[  126.752543][ T8000] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  126.767983][ T8002] netlink: 'syz.1.902': attribute type 33 has an invalid length.
[  126.770567][ T8002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.902'.
[  126.822740][ T8006] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  126.825620][ T8006] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[  126.828498][ T8006] netlink: 'syz.3.904': attribute type 4 has an invalid length.
[  126.831068][ T8006] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  126.833976][ T8006] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[  126.836513][ T8006] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.904'.
[  126.839374][ T8006] netlink: 'syz.3.904': attribute type 1 has an invalid length.
[  126.841799][ T8006] netlink: 'syz.3.904': attribute type 2 has an invalid length.
[  126.883845][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.733937][   T54] Bluetooth: hci2: command tx timeout
[  127.816082][ T8027] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.913'.
[  127.819818][ T8027] netlink: 5 bytes leftover after parsing attributes in process `syz.3.913'.
[  127.860717][ T8030] tc_dump_action: action bad kind
[  127.927160][ T8034] xt_l2tp: unknown flags: 51
[  128.018108][ T8038] veth0_vlan: entered allmulticast mode
[  128.963291][ T8038] veth0_vlan: left promiscuous mode
[  128.971645][ T8038] veth0_vlan: entered promiscuous mode
[  129.301612][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  129.422535][ T8064] netlink: 277 bytes leftover after parsing attributes in process `syz.1.930'.
[  129.466657][ T8068] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  129.469834][ T8068] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  129.601546][ T5294] udevd[5294]: worker [7782] terminated by signal 33 (Unknown signal 33)
[  129.616665][ T5294] udevd[5294]: worker [7782] failed while handling '/devices/virtual/block/loop3'
[  129.791372][ T8084] netlink: 'syz.3.937': attribute type 2 has an invalid length.
[  129.795034][ T8084] netlink: 'syz.3.937': attribute type 1 has an invalid length.
[  130.091623][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'.
[  130.472662][ T8111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  130.918633][   T54] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  131.842614][ T8175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.852848][ T8175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.535650][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.538209][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.588451][ T8183] validate_nla: 1 callbacks suppressed
[  132.588466][ T8183] netlink: 'syz.0.982': attribute type 1 has an invalid length.
[  135.037471][   T54] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  135.874893][ T8233] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1003'.
[  136.218594][ T8247] netlink: 'syz.0.1008': attribute type 10 has an invalid length.
[  136.501328][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  136.501852][ T8255] netlink: 'syz.0.1012': attribute type 3 has an invalid length.
[  136.511500][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1012'.
[  136.952050][ T8277] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  137.021461][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'.
[  137.028200][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'.
[  137.093494][   T54] Bluetooth: hci2: command tx timeout
[  138.120368][ T8323] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.139224][ T8323] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.129574][ T8356] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1053'.
[  139.973818][ T8390] netlink: 'syz.0.1067': attribute type 29 has an invalid length.
[  140.366841][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'.
[  140.452538][ T8410] netlink: 'syz.3.1075': attribute type 3 has an invalid length.
[  140.467565][ T8410] netlink: 'syz.3.1075': attribute type 1 has an invalid length.
[  140.471156][ T8410] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1075'.
[  141.610677][ T8427] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1082'.
[  141.658778][ T8433] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  141.686278][ T8435] netlink: 'syz.0.1086': attribute type 9 has an invalid length.
[  141.688693][ T8435] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1086'.
[  143.390328][ T8446] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1090'.
[  143.405224][ T8446] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  145.348160][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.352495][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.356600][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.360657][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.366592][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.488876][ T8504] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1108'.
[  145.523777][ T8493] chnl_net:caif_netlink_parms(): no params data found
[  145.610840][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.617859][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.620953][ T8493] bridge_slave_0: entered allmulticast mode
[  145.625253][ T8493] bridge_slave_0: entered promiscuous mode
[  145.628792][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.631727][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.636073][ T8493] bridge_slave_1: entered allmulticast mode
[  145.639167][ T8493] bridge_slave_1: entered promiscuous mode
[  145.665828][ T8516] netlink: 'syz.0.1111': attribute type 1 has an invalid length.
[  145.670488][ T8516] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1111'.
[  145.678012][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.682404][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.716526][ T8493] team0: Port device team_slave_0 added
[  145.721688][ T8493] team0: Port device team_slave_1 added
[  145.754629][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.757459][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.767920][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.778502][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.781257][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.814678][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.889085][ T8493] hsr_slave_0: entered promiscuous mode
[  145.896679][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1114'.
[  145.897520][ T8493] hsr_slave_1: entered promiscuous mode
[  145.902403][ T8493] debugfs: 'hsr0' already exists in 'hsr'
[  145.907345][ T8493] Cannot create hsr debugfs directory
[  145.975253][ T8530] netlink: 'syz.3.1116': attribute type 40 has an invalid length.
[  145.990394][ T8522] netlink: 532 bytes leftover after parsing attributes in process `syz.0.1114'.
[  146.029250][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'.
[  146.249763][ T8493] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.348824][ T8493] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.413477][ T5845] Bluetooth: hci3: command tx timeout
[  148.898370][ T8540] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1121'.
[  148.907983][ T8493] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  148.916572][ T8493] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.980234][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.002440][ T8493] 8021q: adding VLAN 0 to HW filter on device team0
[  149.009183][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.011515][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.027234][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.029815][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.267835][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.543924][ T5845] Bluetooth: hci3: command tx timeout
[  149.594817][ T8493] veth0_vlan: entered promiscuous mode
[  149.607393][ T8493] veth1_vlan: entered promiscuous mode
[  149.648409][ T8493] veth0_macvtap: entered promiscuous mode
[  149.656057][ T8493] veth1_macvtap: entered promiscuous mode
[  149.679664][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.696550][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.711665][ T5869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.722062][ T5869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.120149][ T5869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.153893][ T5869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.192473][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.196125][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.217270][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.220378][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.296447][ T8582] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1104'.
[  150.304603][ T8582] veth0_macvtap: left promiscuous mode
[  150.912722][ T8599] netlink: 'syz.0.1139': attribute type 210 has an invalid length.
[  150.919558][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.958368][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1142'.
[  150.992691][ T8607] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  150.998913][ T8607] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  151.012438][ T8609] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1144'.
[  151.089402][ T8613] netlink: 'syz.0.1146': attribute type 10 has an invalid length.
[  151.092427][ T8613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'.
[  151.107366][ T8613] veth0_vlan: entered allmulticast mode
[  151.121953][ T8613] bridge0: port 3(veth0_vlan) entered blocking state
[  151.137355][ T8613] bridge0: port 3(veth0_vlan) entered disabled state
[  151.176529][ T8613] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  151.184565][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1148'.
[  151.387769][ T8633] netlink: 'syz.0.1155': attribute type 4 has an invalid length.
[  151.391024][ T8633] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1155'.
[  151.467267][ T8633] .`: renamed from bond0 (while UP)
[  151.480330][ T8633] bond_slave_0: left promiscuous mode
[  151.482924][ T8633] bond_slave_1: left promiscuous mode
[  151.490726][ T8633] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  151.584956][ T5845] Bluetooth: hci3: command tx timeout
[  151.642954][ T8646] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1160'.
[  151.957130][ T8665] syzkaller0: entered promiscuous mode
[  151.959334][ T8665] syzkaller0: entered allmulticast mode
[  152.665938][ T8693] netlink: 'syz.3.1183': attribute type 3 has an invalid length.
[  152.670008][ T8693] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1183'.
[  153.702313][   T54] Bluetooth: hci3: command tx timeout
[  153.937106][ T8715] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1192'.
[  154.228665][ T8718] netlink: 'syz.3.1193': attribute type 10 has an invalid length.
[  155.071735][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'.
[  155.076291][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1206'.
[  155.523882][ T8755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1209'.
[  155.528819][ T8755] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1209'.
[  155.635589][ T8761] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1212'.
[  155.687832][ T8763] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1213'.
[  155.691609][ T8763] netlink: zone id is out of range
[  155.696617][ T8763] netlink: zone id is out of range
[  155.698691][ T8763] netlink: zone id is out of range
[  155.700790][ T8763] netlink: zone id is out of range
[  155.702831][ T8763] netlink: zone id is out of range
[  155.705441][ T8763] netlink: zone id is out of range
[  155.707541][ T8763] netlink: zone id is out of range
[  155.709547][ T8763] netlink: zone id is out of range
[  155.829646][   T54] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  155.976421][ T8786] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1224'.
[  155.982891][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1223'.
[  155.986936][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1223'.
[  158.810602][ T8854] team0: Port device team_slave_0 removed
[  158.816359][ T8854] net_ratelimit: 14 callbacks suppressed
[  158.816371][ T8854] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  159.653154][ T8879] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  159.666171][ T8878] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  159.996126][ T8895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'.
[  160.079322][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'.
[  160.379310][ T8914] netlink: 'syz.0.1276': attribute type 4 has an invalid length.
[  160.382673][ T8914] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1276'.
[  160.509040][ T8918] netlink: 'syz.0.1278': attribute type 3 has an invalid length.
[  160.830038][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  161.642290][ T8968] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1300'.
[  161.716436][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'.
[  161.718915][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'.
[  161.719225][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'.
[  161.852049][ T8981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1303'.
[  162.070788][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'.
[  162.350505][ T9020] netlink: 'syz.3.1317': attribute type 6 has an invalid length.
[  162.913650][ T9029] _Z`Ԁ@S: entered promiscuous mode
[  164.332758][ T9068] delete_channel: no stack
[  164.852710][ T9129] netlink: 'syz.4.1373': attribute type 10 has an invalid length.
[  165.199721][ T9135] __nla_validate_parse: 4 callbacks suppressed
[  165.199795][ T9135] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1374'.
[  165.800808][ T9165] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1387'.
[  165.837585][ T9170] netlink: 'syz.3.1389': attribute type 7 has an invalid length.
[  165.863009][ T9173] netlink: 'syz.3.1390': attribute type 2 has an invalid length.
[  166.137773][ T9184] netlink: 'syz.3.1395': attribute type 11 has an invalid length.
[  166.505723][ T9194] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1399'.
[  166.819916][ T9199] netlink: 'syz.4.1400': attribute type 2 has an invalid length.
[  166.823082][ T9199] netlink: 'syz.4.1400': attribute type 1 has an invalid length.
[  166.831479][ T9199] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1400'.
[  166.884869][ T9202] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1401'.
[  167.305448][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'.
[  167.355486][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.468992][ T9219] netlink: 'syz.3.1409': attribute type 41 has an invalid length.
[  167.768337][ T9231] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1414'.
[  167.840991][ T9233] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  170.824742][ T9271] syzkaller0: entered promiscuous mode
[  170.827054][ T9271] syzkaller0: entered allmulticast mode
[  170.850756][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'.
[  170.855412][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'.
[  170.948399][ T9282] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1437'.
[  171.290986][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1444'.
[  172.218474][ T9320] netlink: 'syz.0.1455': attribute type 12 has an invalid length.
[  172.233584][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1455'.
[  172.349179][ T9338] netlink: 'syz.4.1464': attribute type 21 has an invalid length.
[  172.752873][ T9359] netlink: 8153 bytes leftover after parsing attributes in process `syz.4.1470'.
[  172.763488][ T9359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.102605][ T9372] netlink: 'syz.0.1476': attribute type 21 has an invalid length.
[  173.109198][ T9372] netlink: 'syz.0.1476': attribute type 4 has an invalid length.
[  173.112329][ T9372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1476'.
[  173.438592][ T9387] proc: Unknown parameter 'u'
[  173.776621][ T9414] : entered promiscuous mode
[  174.163864][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1500'.
[  174.172531][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.197466][ T9425] bridge_slave_0 (unregistering): left allmulticast mode
[  174.200430][ T9425] bridge_slave_0 (unregistering): left promiscuous mode
[  174.205319][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.398138][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'.
[  176.401684][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'.
[  176.868250][ T9521] netlink: 'syz.3.1540': attribute type 9 has an invalid length.
[  176.871359][ T9521] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.1540'.
[  178.558227][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1559'.
[  178.734471][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'.
[  178.801316][ T9577] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1566'.
[  179.082839][ T9585] netlink: 'syz.3.1569': attribute type 1 has an invalid length.
[  179.168170][ T9591] netlink: 'syz.3.1572': attribute type 3 has an invalid length.
[  179.351998][ T9597] netlink: 'syz.3.1575': attribute type 2 has an invalid length.
[  179.355707][ T9597] netlink: 'syz.3.1575': attribute type 1 has an invalid length.
[  179.358971][ T9597] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1575'.
[  179.362793][ T9597] nbd: couldn't find a device at index 16
[  179.408083][ T9599] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1576'.
[  179.450716][ T9601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.481874][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'.
[  180.052446][ T5235] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  180.148240][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'.
[  180.212711][ T9627] tmpfs: Bad value for 'uid'
[  180.216012][ T9627] tmpfs: Bad value for 'uid'
[  180.693882][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  180.694710][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  182.045710][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.048927][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.052929][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.056343][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.060840][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.061694][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.066649][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.069565][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.072889][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.077884][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.342724][ T9661] chnl_net:caif_netlink_parms(): no params data found
[  182.402677][ T9664] chnl_net:caif_netlink_parms(): no params data found
[  182.476481][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.479091][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.481497][ T9661] bridge_slave_0: entered allmulticast mode
[  182.486555][ T9661] bridge_slave_0: entered promiscuous mode
[  182.494102][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.496605][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.499586][ T9661] bridge_slave_1: entered allmulticast mode
[  182.503284][ T9661] bridge_slave_1: entered promiscuous mode
[  182.588738][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.591593][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.602469][ T9664] bridge_slave_0: entered allmulticast mode
[  182.607455][ T9664] bridge_slave_0: entered promiscuous mode
[  182.615892][ T9661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.620144][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.623192][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.628246][ T9664] bridge_slave_1: entered allmulticast mode
[  182.632936][ T9664] bridge_slave_1: entered promiscuous mode
[  182.639441][ T9661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.686105][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.690754][ T9661] team0: Port device team_slave_0 added
[  182.699073][ T9661] team0: Port device team_slave_1 added
[  182.703052][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.769927][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.772235][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.781625][ T9661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.787123][ T9664] team0: Port device team_slave_0 added
[  182.790885][ T9664] team0: Port device team_slave_1 added
[  182.811315][ T9661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.813765][ T9661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.822768][ T9661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.863445][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.865778][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.876335][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.901840][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.906594][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.917460][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.928813][ T9661] hsr_slave_0: entered promiscuous mode
[  182.932079][ T9661] hsr_slave_1: entered promiscuous mode
[  182.935728][ T9661] debugfs: 'hsr0' already exists in 'hsr'
[  182.938050][ T9661] Cannot create hsr debugfs directory
[  182.971740][ T9708] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1617'.
[  183.043904][ T9664] hsr_slave_0: entered promiscuous mode
[  183.046918][ T9664] hsr_slave_1: entered promiscuous mode
[  183.049664][ T9664] debugfs: 'hsr0' already exists in 'hsr'
[  183.051976][ T9664] Cannot create hsr debugfs directory
[  183.363930][ T9661] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  183.369942][ T9661] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  183.385193][ T9661] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  183.418630][ T9661] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  183.490568][ T9664] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  183.504724][ T9664] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  183.520401][ T9664] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  183.529512][ T9664] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  183.571496][ T9738] raw_sendmsg: syz.4.1626 forgot to set AF_INET. Fix it!
[  183.575221][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.575320][ T9664] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.575529][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.575613][ T9664] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.664641][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.668399][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.702435][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'.
[  183.705848][ T9661] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.748194][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.789742][ T9661] 8021q: adding VLAN 0 to HW filter on device team0
[  183.820988][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.821134][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'.
[  183.823257][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.837541][ T9664] 8021q: adding VLAN 0 to HW filter on device team0
[  183.845299][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.848376][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.867870][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.870996][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.889747][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.892167][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.948303][ T9664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.952114][ T9664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.065574][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'.
[  184.173249][ T9661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.175799][   T54] Bluetooth: hci2: command tx timeout
[  184.176279][ T5845] Bluetooth: hci1: command tx timeout
[  184.235076][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.460028][ T9661] veth0_vlan: entered promiscuous mode
[  184.470733][ T9661] veth1_vlan: entered promiscuous mode
[  184.495067][ T9661] veth0_macvtap: entered promiscuous mode
[  184.501034][ T9661] veth1_macvtap: entered promiscuous mode
[  184.522489][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.534839][ T9661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.548606][ T5870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.553267][ T5870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.571021][ T5870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.576248][ T5870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.638350][ T9664] veth0_vlan: entered promiscuous mode
[  184.671113][ T9664] veth1_vlan: entered promiscuous mode
[  184.709088][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.712388][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.750580][ T9664] veth0_macvtap: entered promiscuous mode
[  184.762726][ T9664] veth1_macvtap: entered promiscuous mode
[  184.770844][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.780867][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.809522][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.840096][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.873897][ T5884] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.881922][ T5884] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.897282][ T5884] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.912456][ T5884] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.995249][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.001454][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.069202][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.072297][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.888488][ T9866] netlink: 'syz.6.1644': attribute type 1 has an invalid length.
[  185.900218][ T9866] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1644'.
[  185.933202][ T9866] netlink: 'syz.6.1644': attribute type 1 has an invalid length.
[  185.939675][ T9866] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1644'.
[  186.061461][ T9896] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1647'.
[  186.145227][ T9902] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.1650'.
[  186.150377][ T9902] netlink: 62239 bytes leftover after parsing attributes in process `syz.5.1650'.
[  186.192933][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1649'.
[  186.214116][ T5845] Bluetooth: hci2: command tx timeout
[  186.214618][   T54] Bluetooth: hci1: command tx timeout
[  186.286500][ T9907] netlink: 'syz.4.1652': attribute type 29 has an invalid length.
[  187.258224][ T9966] netlink: 'syz.5.1677': attribute type 6 has an invalid length.
[  187.304341][ T9964] netlink: 'syz.4.1674': attribute type 10 has an invalid length.
[  187.308891][ T9964] bridge0: port 1(macsec0) entered blocking state
[  187.311584][ T9964] bridge0: port 1(macsec0) entered disabled state
[  187.320326][ T9964] macsec0: entered allmulticast mode
[  187.323079][ T9964] veth1_macvtap: entered allmulticast mode
[  187.611391][ T9964] macsec0: entered promiscuous mode
[  187.994834][ T9964] bridge0: port 1(macsec0) entered blocking state
[  187.997684][ T9964] bridge0: port 1(macsec0) entered forwarding state
[  188.289539][ T9982] __nla_validate_parse: 4 callbacks suppressed
[  188.289552][ T9982] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1683'.
[  188.295644][   T54] Bluetooth: hci1: command tx timeout
[  188.304253][   T54] Bluetooth: hci2: command tx timeout
[  188.311390][ T9982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'.
[  188.619084][T10002] netlink: 'syz.5.1693': attribute type 17 has an invalid length.
[  188.622170][T10002] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1693'.
[  189.132438][T10020] netlink: 'syz.6.1701': attribute type 10 has an invalid length.
[  189.135955][T10020] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1701'.
[  190.250318][T10042] netlink: 'syz.6.1709': attribute type 4 has an invalid length.
[  190.253667][T10042] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1709'.
[  190.339014][T10042] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  190.408636][ T5845] Bluetooth: hci1: command tx timeout
[  190.411189][   T54] Bluetooth: hci2: command tx timeout
[  190.426669][T10044] netlink: 'syz.4.1710': attribute type 11 has an invalid length.
[  190.487345][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1711'.
[  190.979114][T10077] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1719'.
[  191.493553][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'.
[  192.520819][T10107] netlink: 'syz.6.1734': attribute type 13 has an invalid length.
[  192.531583][T10107] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1734'.
[  192.538949][T10107] : renamed from syz_tun (while UP)
[  192.543980][T10107] : refused to change device tx_queue_len
[  192.546126][T10107] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  193.500492][T10159] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.1757'.
[  193.710610][T10165] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.1760'.
[  193.758444][T10176] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1765'.
[  193.986061][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.989505][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.103762][T10212] netlink: 'syz.4.1779': attribute type 27 has an invalid length.
[  195.107370][T10212] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1779'.
[  197.739830][T10270] netlink: 'syz.6.1802': attribute type 20 has an invalid length.
[  199.052971][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1822'.
[  199.059711][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1822'.
[  199.592317][T10359] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1844'.
[  199.601816][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1844'.
[  199.711378][T10365] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1847'.
[  200.049712][T10381] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  200.054616][T10381] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  200.261033][T10391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.603838][T10406] syzkaller0: entered promiscuous mode
[  200.605899][T10406] syzkaller0: entered allmulticast mode
[  201.051682][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1867'.
[  202.101889][T10436] netlink: 'syz.4.1877': attribute type 2 has an invalid length.
[  202.108308][T10436] netlink: 'syz.4.1877': attribute type 1 has an invalid length.
[  202.170188][T10436] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1877'.
[  202.405874][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'.
[  202.665121][   T54] Bluetooth: hci3: Malformed LE Event: 0x0d
[  202.743127][T10472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.954664][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1900'.
[  202.966661][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1900'.
[  203.110403][T10491] netlink: 'syz.5.1901': attribute type 1 has an invalid length.
[  203.284386][T10498] netlink: 'syz.5.1904': attribute type 2 has an invalid length.
[  203.287680][T10498] netlink: 'syz.5.1904': attribute type 3 has an invalid length.
[  204.602504][T10546] netlink: 'syz.6.1927': attribute type 2 has an invalid length.
[  204.605251][T10546] __nla_validate_parse: 2 callbacks suppressed
[  204.605258][T10546] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.1927'.
[  204.899219][T10558] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1933'.
[  204.906925][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1932'.
[  204.908663][T10558] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1933'.
[  206.707032][T10608] sock: sock_timestamping_bind_phc: sock not bind to device
[  206.891576][T10620] netlink: 'syz.6.1961': attribute type 6 has an invalid length.
[  206.897545][T10620] netlink: 'syz.6.1961': attribute type 3 has an invalid length.
[  206.900890][T10620] netlink: 153952 bytes leftover after parsing attributes in process `syz.6.1961'.
[  207.816801][T10665] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1982'.
[  208.011290][T10635] delete_channel: no stack
[  208.276169][T10676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.328876][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1988'.
[  208.332192][T10678] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  208.357064][T10680] netlink: 'syz.4.1989': attribute type 10 has an invalid length.
[  208.364678][T10680] macvlan0: entered promiscuous mode
[  208.367854][T10680] macvlan0: entered allmulticast mode
[  208.387897][T10680] veth1_vlan: entered allmulticast mode
[  208.402172][T10680] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  208.592422][T10689] netlink: 'syz.4.1992': attribute type 1 has an invalid length.
[  208.938069][T10711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2000'.
[  211.201071][T10779] netlink: 'syz.5.2031': attribute type 10 has an invalid length.
[  211.217798][T10779] team0: Device ipvlan1 failed to register rx_handler
[  211.633110][T10793] netlink: 'syz.6.2036': attribute type 10 has an invalid length.
[  211.912484][T10793] team0: Port device geneve1 added
[  212.309740][T10803] C: renamed from team_slave_0 (while UP)
[  212.321380][T10803] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2039'.
[  212.462510][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2044'.
[  213.230544][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2053'.
[  213.847303][T10847] netlink: 'syz.5.2057': attribute type 21 has an invalid length.
[  213.850671][T10847] netlink: 'syz.5.2057': attribute type 4 has an invalid length.
[  213.855163][T10847] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2057'.
[  214.340916][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2063'.
[  214.482806][T10864] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2064'.
[  214.498078][T10864] netlink: get zone limit has 8 unknown bytes
[  215.154993][T10907] netlink: 64707 bytes leftover after parsing attributes in process `syz.4.2080'.
[  216.569996][T10924] netlink: 'syz.6.2091': attribute type 2 has an invalid length.
[  216.666191][T10936] netlink: 'syz.5.2095': attribute type 39 has an invalid length.
[  216.676589][T10936] veth0_macvtap: left promiscuous mode
[  216.710646][T10938] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2096'.
[  216.918233][T10961] netlink: 'syz.6.2106': attribute type 1 has an invalid length.
[  217.047842][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2110'.
[  217.157787][T10979] syzkaller1: tun_chr_ioctl cmd 1074812117
[  217.267182][T10988] sctp: [Deprecated]: syz.5.2119 (pid 10988) Use of int in maxseg socket option.
[  217.267182][T10988] Use struct sctp_assoc_value instead
[  217.413619][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2122'.
[  218.452875][T11023] netlink: 'syz.5.2132': attribute type 4 has an invalid length.
[  218.456992][T11023] netlink: 209028 bytes leftover after parsing attributes in process `syz.5.2132'.
[  218.657850][T11042] netlink: 'syz.4.2142': attribute type 22 has an invalid length.
[  218.661215][T11042] netlink: 'syz.4.2142': attribute type 1 has an invalid length.
[  218.693861][T11039] netlink: 'syz.6.2140': attribute type 10 has an invalid length.
[  218.696866][T11039] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2140'.
[  218.700178][T11042] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2142'.
[  219.561526][T11068] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2152'.
[  219.577651][T11068] netlink: 'syz.6.2152': attribute type 1 has an invalid length.
[  219.678295][T11072] netlink: 'syz.6.2154': attribute type 21 has an invalid length.
[  219.692132][T11072] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2154'.
[  219.714200][T11072] netlink: 'syz.6.2154': attribute type 4 has an invalid length.
[  219.939106][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2157'.
[  220.061981][T11086] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.072909][T11086] netlink: 'syz.5.2161': attribute type 2 has an invalid length.
[  220.078112][T11086] netlink: 199816 bytes leftover after parsing attributes in process `syz.5.2161'.
[  220.269040][T11096] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2166'.
[  220.315637][T11096] netlink: 'syz.4.2166': attribute type 10 has an invalid length.
[  220.427824][T11104] netlink: 'syz.6.2168': attribute type 10 has an invalid length.
[  220.521126][T11096] batman_adv: batadv0: Adding interface: netdevsim0
[  220.526309][T11096] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.542394][T11096] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  220.562813][T11100] netlink: 'syz.6.2168': attribute type 29 has an invalid length.
[  220.584811][T11104] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.589722][T11104] team0: Port device bond0 added
[  220.691185][T11111] netlink: 'syz.4.2171': attribute type 19 has an invalid length.
[  220.807610][T11119] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2175'.
[  221.687662][T11164] netlink: 'syz.5.2195': attribute type 10 has an invalid length.
[  221.691375][T11164] veth0_vlan: entered allmulticast mode
[  221.707201][T11164] bridge0: port 3(veth0_vlan) entered blocking state
[  221.710418][T11164] bridge0: port 3(veth0_vlan) entered disabled state
[  221.731129][T11164] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  221.753206][T11168] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  222.439276][T11223] __nla_validate_parse: 4 callbacks suppressed
[  222.439297][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'.
[  222.612290][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2225'.
[  222.618621][T11231] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2225'.
[  223.776280][   T54] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4
[  223.860433][   T54] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  223.921594][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'.
[  223.928733][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'.
[  223.932508][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'.
[  224.068674][T11295] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2257'.
[  224.077373][T11298] netlink: 'syz.5.2258': attribute type 10 has an invalid length.
[  224.080899][T11298] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2258'.
[  224.188364][T11302] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  224.870412][T11317] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2266'.
[  225.114129][T11323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.345011][T11341] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2277'.
[  225.464992][T11351] netlink: 'syz.4.2282': attribute type 4 has an invalid length.
[  225.468520][T11351] netlink: 'syz.4.2282': attribute type 10 has an invalid length.
[  225.472719][T11353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.479513][T11351] team0: Port device dummy0 added
[  228.211947][T11470] netlink: 'syz.5.2329': attribute type 4 has an invalid length.
[  228.215637][T11470] __nla_validate_parse: 7 callbacks suppressed
[  228.215674][T11470] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2329'.
[  228.238153][T11470] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  229.049397][T11511] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2341'.
[  229.245466][ T5294] udevd[5294]: worker [11398] terminated by signal 33 (Unknown signal 33)
[  229.317605][T11515] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.2343'.
[  229.383962][T11517] netlink: 'syz.4.2344': attribute type 13 has an invalid length.
[  230.213155][T11538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.334256][T11544] netlink: 'syz.4.2357': attribute type 11 has an invalid length.
[  230.337650][T11544] netlink: 'syz.4.2357': attribute type 11 has an invalid length.
[  230.868923][T11576] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2372'.
[  231.140394][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'.
[  231.150068][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2378'.
[  231.155952][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2378'.
[  231.233274][T11595] netlink: 'syz.6.2379': attribute type 1 has an invalid length.
[  231.236013][T11595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2379'.
[  231.298676][T11597] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2380'.
[  231.352943][T11604] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2382'.
[  232.795498][T11650] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  232.801024][T11650] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  234.183653][T11685] __nla_validate_parse: 3 callbacks suppressed
[  234.183669][T11685] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2418'.
[  235.730147][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'.
[  235.745488][T11722] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  235.758763][T11724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  235.762150][T11724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.080225][T11741] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  236.089371][T11741] netlink: 'syz.4.2440': attribute type 10 has an invalid length.
[  236.127624][T11741] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  236.436954][T11757] netlink: 'syz.4.2447': attribute type 1 has an invalid length.
[  236.587656][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2454'.
[  236.591904][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2454'.
[  237.691121][T11821] openvswitch: netlink: Missing valid actions attribute.
[  237.697730][T11821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.276012][T11837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2478'.
[  238.533878][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  238.630655][T11863] netlink: 'syz.4.2489': attribute type 1 has an invalid length.
[  239.343654][T11886] netlink: 'syz.4.2500': attribute type 1 has an invalid length.
[  239.347111][T11886] netlink: 'syz.4.2500': attribute type 4 has an invalid length.
[  239.350502][T11886] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2500'.
[  239.507291][T11897] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2506'.
[  240.607301][T11921] netlink: 'syz.4.2515': attribute type 10 has an invalid length.
[  240.610669][T11921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2515'.
[  240.631419][T11921] vcan0: entered promiscuous mode
[  240.635218][T11921] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  241.334787][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  241.339486][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  241.344039][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  241.347827][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  241.350700][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.528500][T11963] chnl_net:caif_netlink_parms(): no params data found
[  241.573703][  T994] wlan1: Trigger new scan to find an IBSS to join
[  241.637094][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.639612][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.641995][T11963] bridge_slave_0: entered allmulticast mode
[  241.645139][T11963] bridge_slave_0: entered promiscuous mode
[  241.651271][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.656884][T11963] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.659853][T11963] bridge_slave_1: entered allmulticast mode
[  241.663288][T11963] bridge_slave_1: entered promiscuous mode
[  241.708320][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.720920][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.750144][T11963] team0: Port device team_slave_0 added
[  241.755218][T11963] team0: Port device team_slave_1 added
[  241.786461][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.789567][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.802859][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.816594][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.821963][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.834690][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.062315][T11963] hsr_slave_0: entered promiscuous mode
[  242.066510][T11963] hsr_slave_1: entered promiscuous mode
[  242.069541][T11963] debugfs: 'hsr0' already exists in 'hsr'
[  242.072028][T11963] Cannot create hsr debugfs directory
[  242.769073][T11997] netlink: 'syz.4.2548': attribute type 21 has an invalid length.
[  242.788509][T11963] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.179664][T11995] syzkaller0: entered promiscuous mode
[  243.182564][T11995] syzkaller0: entered allmulticast mode
[  243.224890][T12002] sit0: entered allmulticast mode
[  243.245995][T12003] sit0: entered promiscuous mode
[  243.317178][T11963] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.424372][ T5845] Bluetooth: hci1: command tx timeout
[  243.813016][T12008] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2551'.
[  243.958840][T12010] netlink: 'syz.4.2552': attribute type 17 has an invalid length.
[  243.962299][T12010] netlink: 'syz.4.2552': attribute type 16 has an invalid length.
[  243.967908][T12010] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2552'.
[  244.563074][T11963] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.613964][   T52] wlan1: Creating new IBSS network, BSSID 16:1b:8c:79:d5:20
[  244.648356][T11963] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.659609][T12013] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.2554'.
[  244.820741][T11963] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  244.850103][T11963] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  244.863988][T11963] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  244.884039][T11963] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  244.951448][T12042] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2564'.
[  244.975053][T12044] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2565'.
[  245.010690][T12046] netlink: 'syz.6.2566': attribute type 1 has an invalid length.
[  245.020417][T11963] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.030108][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2566'.
[  245.035537][T11963] 8021q: adding VLAN 0 to HW filter on device team0
[  245.051140][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.053805][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.060367][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.062846][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.246187][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.493802][ T5845] Bluetooth: hci1: command tx timeout
[  245.603230][T11963] veth0_vlan: entered promiscuous mode
[  245.621764][T11963] veth1_vlan: entered promiscuous mode
[  245.665730][T11963] veth0_macvtap: entered promiscuous mode
[  245.673262][T11963] veth1_macvtap: entered promiscuous mode
[  245.710796][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.740482][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.772700][ T5884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.789740][ T5884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.801859][ T5884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.808464][ T5884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.887567][  T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.897927][  T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.911993][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2574'.
[  245.929087][  T490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.935229][  T490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.276627][T12099] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2586'.
[  246.371495][T12103] netlink: 'syz.6.2588': attribute type 9 has an invalid length.
[  246.618110][T12109] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2591'.
[  247.026906][ T5845] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  247.126839][T12131] netlink: 'syz.5.2600': attribute type 3 has an invalid length.
[  247.131834][T12131] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2600'.
[  247.282105][T12147] C: renamed from team_slave_0 (while UP)
[  247.288812][T12147] netlink: 'syz.5.2608': attribute type 1 has an invalid length.
[  247.293245][T12147] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2608'.
[  247.299213][T12147] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  247.359377][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2611'.
[  247.574023][ T5845] Bluetooth: hci1: command tx timeout
[  247.988963][T12193] netlink: 'syz.5.2631': attribute type 3 has an invalid length.
[  247.992451][T12193] netlink: 'syz.5.2631': attribute type 1 has an invalid length.
[  247.999609][T12193] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  248.311245][T12219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.655130][   T54] Bluetooth: hci1: command tx timeout
[  250.118156][T12231] netlink: 'syz.4.2649': attribute type 3 has an invalid length.
[  250.293162][T12241] syzkaller0: tun_chr_ioctl cmd 2147767506
[  251.212229][T12251] __nla_validate_parse: 4 callbacks suppressed
[  251.212244][T12251] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2656'.
[  251.333137][T12255] netlink: 64535 bytes leftover after parsing attributes in process `syz.6.2660'.
[  251.354561][T12259] nbd: must specify an index to disconnect
[  252.287558][T12305] sit0: left promiscuous mode
[  252.317006][T12307] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2685'.
[  252.332685][T12305] sit0: entered promiscuous mode
[  252.601551][T12315] netlink: 'syz.4.2687': attribute type 21 has an invalid length.
[  252.613496][T12315] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2687'.
[  252.623092][T12315] netlink: 'syz.4.2687': attribute type 4 has an invalid length.
[  252.629717][T12315] netlink: 'syz.4.2687': attribute type 3 has an invalid length.
[  252.633076][T12315] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2687'.
[  252.698781][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'.
[  252.702444][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'.
[  254.636610][T12361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2707'.
[  255.529553][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.532136][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  258.558279][T12390] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.571819][T12390] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.691588][T12390] bridge0: entered allmulticast mode
[  258.998130][T12393] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.001101][T12393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.004295][T12393] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.007213][T12393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.022870][T12393] bridge0: entered promiscuous mode
[  259.116287][T12401] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2724'.
[  259.292250][T12405] veth0_vlan: entered allmulticast mode
[  259.438817][ T5845] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7
[  261.317522][T12428] netlink: 'syz.4.2734': attribute type 29 has an invalid length.
[  261.323229][T12428] netlink: 'syz.4.2734': attribute type 29 has an invalid length.
[  261.344473][T12428] netlink: 'syz.4.2734': attribute type 29 has an invalid length.
[  261.512001][T12436] netlink: 'syz.6.2736': attribute type 10 has an invalid length.
[  261.524027][T12436] team0: Port device  added
[  262.198948][T12470] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2750'.
[  263.233163][T12486] netlink: 'syz.6.2758': attribute type 10 has an invalid length.
[  263.236970][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2758'.
[  263.240291][T12486] batadv0: entered promiscuous mode
[  263.242249][T12486] batadv0: entered allmulticast mode
[  263.247478][T12486] bridge0: port 3(batadv0) entered blocking state
[  263.249932][T12486] bridge0: port 3(batadv0) entered disabled state
[  263.263066][T12486] bridge0: port 3(batadv0) entered blocking state
[  263.265356][T12486] bridge0: port 3(batadv0) entered forwarding state
[  263.359278][T12489] net veth1_virt_wifi : renamed from virt_wifi0
[  263.388456][T12488] netdevsim netdevsim4 : renamed from netdevsim0
[  263.645718][ T5884] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  263.649724][ T5884] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  264.754689][ T5845] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  264.898193][T12526] netlink: 'syz.4.2775': attribute type 4 has an invalid length.
[  264.910159][T12526] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.2775'.
[  265.207978][T12534] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2778'.
[  266.623971][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2796'.
[  266.776510][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  266.975436][T12592] delete_channel: no stack
[  267.115777][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.120528][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.134116][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.139105][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.142967][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.479162][T12603] chnl_net:caif_netlink_parms(): no params data found
[  267.583224][T12603] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.589734][T12603] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.592797][T12603] bridge_slave_0: entered allmulticast mode
[  267.604726][T12603] bridge_slave_0: entered promiscuous mode
[  267.609060][T12603] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.611709][T12603] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.619586][T12603] bridge_slave_1: entered allmulticast mode
[  267.632487][T12603] bridge_slave_1: entered promiscuous mode
[  267.690291][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.696966][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.727582][T12603] team0: Port device team_slave_0 added
[  267.732136][T12603] team0: Port device team_slave_1 added
[  267.777178][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.779787][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.792355][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.802543][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.805953][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.816135][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.867438][T12603] hsr_slave_0: entered promiscuous mode
[  267.871110][T12603] hsr_slave_1: entered promiscuous mode
[  267.874649][T12603] debugfs: 'hsr0' already exists in 'hsr'
[  267.877477][T12603] Cannot create hsr debugfs directory
[  268.095018][T12603] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  268.103625][T12603] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  268.110810][T12603] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  268.120530][T12603] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  268.248897][T12603] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.285635][T12603] 8021q: adding VLAN 0 to HW filter on device team0
[  268.292888][  T490] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.296073][  T490] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.314120][  T490] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.317262][  T490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.552220][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.669304][T12670] openvswitch: netlink: IP tunnel dst address not specified
[  268.830304][T12603] veth0_vlan: entered promiscuous mode
[  268.858045][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  268.869402][T12603] veth1_vlan: entered promiscuous mode
[  268.972969][T12603] veth0_macvtap: entered promiscuous mode
[  268.991396][T12603] veth1_macvtap: entered promiscuous mode
[  269.011077][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.034514][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.068957][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.077218][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.081081][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.109001][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.174302][ T5845] Bluetooth: hci1: command tx timeout
[  269.269436][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.278427][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.299775][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.303961][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.490221][T12688] delete_channel: no stack
[  270.799676][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2853'.
[  271.443028][ T5845] Bluetooth: hci1: command tx timeout
[  272.729000][T12764] netlink: 'syz.7.2866': attribute type 10 has an invalid length.
[  272.740626][T12764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.745414][T12764] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  272.750359][T12764] netlink: 'syz.7.2866': attribute type 10 has an invalid length.
[  272.756347][T12764] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2866'.
[  272.760098][T12764] batadv0: entered promiscuous mode
[  272.762137][T12764] batadv0: entered allmulticast mode
[  272.769007][T12764] bond0: (slave batadv0): Releasing backup interface
[  272.777562][T12764] bridge0: port 3(batadv0) entered blocking state
[  272.781810][  T490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  272.787693][T12764] bridge0: port 3(batadv0) entered disabled state
[  272.839143][T12769] netlink: 'syz.6.2868': attribute type 29 has an invalid length.
[  272.842482][T12769] netlink: 'syz.6.2868': attribute type 29 has an invalid length.
[  272.846829][T12769] netlink: 'syz.6.2868': attribute type 29 has an invalid length.
[  273.049010][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'.
[  273.051998][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2879'.
[  273.121845][T12796] netlink: 'syz.6.2882': attribute type 1 has an invalid length.
[  273.284269][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  273.287305][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  273.429678][T12816] netlink: 'syz.4.2890': attribute type 3 has an invalid length.
[  273.432833][T12816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2890'.
[  273.493665][ T5845] Bluetooth: hci1: command tx timeout
[  273.628041][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'.
[  273.631774][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'.
[  273.983793][   T34] INFO: task syz.1.946:8103 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  273.995727][   T34]       Not tainted syzkaller #0
[  274.002421][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.014339][   T34] task:syz.1.946       state:D stack:21712 pid:8103  tgid:8102  ppid:5838   task_flags:0x400140 flags:0x00004006
[  274.023443][   T34] Call Trace:
[  274.026196][   T34]  <TASK>
[  274.029901][   T34]  __schedule+0x1798/0x4cc0
[  274.034962][   T34]  ? __pfx_trace_call_bpf+0x10/0x10
[  274.040545][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.043440][   T34]  ? __pfx___schedule+0x10/0x10
[  274.047488][   T34]  ? schedule+0x91/0x360
[  274.051662][   T34]  schedule+0x165/0x360
[  274.055978][   T34]  schedule_timeout+0x9a/0x270
[  274.060525][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  274.065245][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.069889][   T34]  ? wait_for_completion+0x267/0x5d0
[  274.077303][   T34]  wait_for_completion+0x2bf/0x5d0
[  274.078983][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  274.080853][   T34]  ? up_write+0x1c4/0x420
[  274.082294][   T34]  ? remove_client_context+0xc0/0x1e0
[  274.103438][   T34]  disable_device+0x1c6/0x320
[  274.105262][   T34]  ? __pfx_disable_device+0x10/0x10
[  274.110097][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  274.111850][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  274.127316][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  274.129416][   T34]  nldev_dellink+0x2d1/0x320
[  274.131326][   T34]  ? __pfx_perf_tp_event+0x10/0x10
[  274.133109][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  274.156019][   T34]  ? apparmor_capable+0x137/0x1b0
[  274.157691][   T34]  ? bpf_lsm_capable+0x9/0x20
[  274.169515][   T34]  ? security_capable+0x7e/0x2e0
[  274.171212][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  274.183656][   T34]  rdma_nl_rcv+0x6ae/0x980
[  274.189798][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  274.191462][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.193074][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.217068][   T34]  netlink_unicast+0x82f/0x9e0
[  274.218698][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  274.220783][   T34]  ? netlink_sendmsg+0x642/0xb30
[  274.222798][   T34]  ? skb_put+0x11b/0x210
[  274.233507][   T34]  netlink_sendmsg+0x805/0xb30
[  274.235512][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.237667][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  274.239696][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.241860][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.263534][   T34]  __sock_sendmsg+0x21c/0x270
[  274.265182][   T34]  ____sys_sendmsg+0x505/0x830
[  274.266666][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.268395][   T34]  ? import_iovec+0x74/0xa0
[  274.270260][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  274.272187][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  274.283460][   T34]  ? __fget_files+0x2a/0x420
[  274.285403][   T34]  ? __fget_files+0x3a0/0x420
[  274.287329][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  274.289362][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  274.291585][   T34]  do_syscall_64+0xfa/0x3b0
[  274.313473][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.321382][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  274.323688][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.325917][   T34] RIP: 0033:0x7fda79b8eba9
[  274.327840][   T34] RSP: 002b:00007fda7a9c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.330782][   T34] RAX: ffffffffffffffda RBX: 00007fda79dd5fa0 RCX: 00007fda79b8eba9
[  274.338659][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  274.341965][   T34] RBP: 00007fda79c11e19 R08: 0000000000000000 R09: 0000000000000000
[  274.344969][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.348181][   T34] R13: 00007fda79dd6038 R14: 00007fda79dd5fa0 R15: 00007ffdf886b108
[  274.350896][   T34]  </TASK>
[  274.352136][   T34] 
[  274.352136][   T34] Showing all locks held in the system:
[  274.360055][   T34] 1 lock held by rcu_tasks_trace/31:
[  274.361920][   T34]  #0: ffffffff8e13abd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  274.367004][   T34] 1 lock held by khungtaskd/34:
[  274.368713][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  274.372109][   T34] 2 locks held by getty/5670:
[  274.379840][   T34]  #0: ffff8881093d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.386989][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  274.390502][   T34] 4 locks held by kworker/u8:3/5869:
[  274.392382][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  274.396801][   T34]  #1: ffffc9000377fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  274.401329][   T34]  #2: ffffffff8f52ae30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  274.406765][   T34]  #3: ffff888029370700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  274.411392][   T34] 2 locks held by syz.1.946/8103:
[  274.413847][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  274.421096][   T34]  #1: ffff888029370700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  274.426087][   T34] 1 lock held by syz.7.2886/12806:
[  274.428285][   T34]  #0: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  274.432285][   T34] 1 lock held by syz.4.2902/12841:
[  274.434626][   T34]  #0: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  274.439247][   T34] 1 lock held by syz.6.2903/12846:
[  274.441481][   T34]  #0: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  274.446198][   T34] 
[  274.447256][   T34] =============================================
[  274.447256][   T34] 
[  274.450800][   T34] NMI backtrace for cpu 1
[  274.450811][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.450824][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.450831][   T34] Call Trace:
[  274.450836][   T34]  <TASK>
[  274.450842][   T34]  dump_stack_lvl+0x189/0x250
[  274.450861][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.450875][   T34]  ? __pfx__printk+0x10/0x10
[  274.450900][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  274.450917][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.450954][   T34]  ? __pfx__printk+0x10/0x10
[  274.450973][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.450992][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.451007][   T34]  watchdog+0xf93/0xfe0
[  274.451027][   T34]  ? watchdog+0x1de/0xfe0
[  274.451047][   T34]  kthread+0x711/0x8a0
[  274.451064][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.451078][   T34]  ? __pfx_kthread+0x10/0x10
[  274.451094][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.451107][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.451122][   T34]  ? __pfx_kthread+0x10/0x10
[  274.451136][   T34]  ret_from_fork+0x3fc/0x770
[  274.451152][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.451168][   T34]  ? __switch_to_asm+0x39/0x70
[  274.451183][   T34]  ? __switch_to_asm+0x33/0x70
[  274.451195][   T34]  ? __pfx_kthread+0x10/0x10
[  274.451211][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.451235][   T34]  </TASK>
[  274.451240][   T34] Sending NMI from CPU 1 to CPUs 0:
[  274.513714][    C0] NMI backtrace for cpu 0
[  274.513724][    C0] CPU: 0 UID: 0 PID: 68 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  274.513732][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.513737][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  274.513750][    C0] RIP: 0010:__lock_acquire+0xf1/0xd20
[  274.513762][    C0] Code: 30 01 00 00 44 89 74 24 1c 89 6c 24 10 44 8b b4 24 88 00 00 00 8b 6c 24 78 41 89 d5 48 c7 c1 10 03 49 93 48 29 c8 48 c1 f8 03 <48> be 29 5c 8f c2 f5 28 5c 8f 48 0f af f0 45 85 f6 0f 85 4a 01 00
[  274.513768][    C0] RSP: 0018:ffffc9000175f308 EFLAGS: 00000006
[  274.513773][    C0] RAX: 00000000000000af RBX: ffffffff8e139ea0 RCX: ffffffff93490310
[  274.513778][    C0] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff888105a88000
[  274.513782][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  274.513786][    C0] R10: ffffc9000175f558 R11: ffffffff81ac3930 R12: 0000000000000002
[  274.513790][    C0] R13: 0000000000000004 R14: 0000000000000000 R15: 0000000000000000
[  274.513793][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  274.513798][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.513802][    C0] CR2: 0000001b30a23ffc CR3: 000000000df36000 CR4: 00000000000006f0
[  274.513828][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  274.513833][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  274.513837][    C0] Call Trace:
[  274.513840][    C0]  <TASK>
[  274.513844][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513851][    C0]  lock_acquire+0x120/0x360
[  274.513859][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513866][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513871][    C0]  ? kasan_save_free_info+0x46/0x50
[  274.513878][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513883][    C0]  unwind_next_frame+0xc2/0x2390
[  274.513889][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513896][    C0]  ? unwind_next_frame+0xa5/0x2390
[  274.513902][    C0]  ? kasan_save_track+0x3e/0x80
[  274.513910][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  274.513918][    C0]  arch_stack_walk+0x11c/0x150
[  274.513959][    C0]  ? kasan_save_free_info+0x46/0x50
[  274.513965][    C0]  stack_trace_save+0x9c/0xe0
[  274.513972][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  274.513978][    C0]  ? chacha_block_generic+0x53/0xc80
[  274.513985][    C0]  ? __lock_acquire+0xab9/0xd20
[  274.513993][    C0]  kasan_save_track+0x3e/0x80
[  274.513999][    C0]  ? kasan_save_track+0x3e/0x80
[  274.514005][    C0]  ? kasan_save_free_info+0x46/0x50
[  274.514017][    C0]  kasan_save_free_info+0x46/0x50
[  274.514023][    C0]  __kasan_slab_free+0x5b/0x80
[  274.514030][    C0]  ? skb_release_data+0x62d/0x7c0
[  274.514036][    C0]  kfree+0x18e/0x440
[  274.514043][    C0]  skb_release_data+0x62d/0x7c0
[  274.514050][    C0]  consume_skb+0x9e/0xf0
[  274.514059][    C0]  nsim_dev_trap_report_work+0x7cf/0xb80
[  274.514069][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  274.514075][    C0]  process_scheduled_works+0xae1/0x17b0
[  274.514084][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  274.514092][    C0]  worker_thread+0x8a0/0xda0
[  274.514098][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  274.514107][    C0]  ? __kthread_parkme+0x7b/0x200
[  274.514115][    C0]  kthread+0x711/0x8a0
[  274.514121][    C0]  ? __pfx_worker_thread+0x10/0x10
[  274.514127][    C0]  ? __pfx_kthread+0x10/0x10
[  274.514133][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.514140][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.514147][    C0]  ? __pfx_kthread+0x10/0x10
[  274.514153][    C0]  ret_from_fork+0x3fc/0x770
[  274.514160][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  274.514166][    C0]  ? __switch_to_asm+0x39/0x70
[  274.514174][    C0]  ? __switch_to_asm+0x33/0x70
[  274.514180][    C0]  ? __pfx_kthread+0x10/0x10
[  274.514187][    C0]  ret_from_fork_asm+0x1a/0x30
[  274.514196][    C0]  </TASK>
[  274.515483][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  274.664569][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  274.668390][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.672654][   T34] Call Trace:
[  274.674114][   T34]  <TASK>
[  274.675399][   T34]  dump_stack_lvl+0x99/0x250
[  274.677429][   T34]  ? __asan_memcpy+0x40/0x70
[  274.679420][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.681687][   T34]  ? __pfx__printk+0x10/0x10
[  274.683671][   T34]  vpanic+0x281/0x750
[  274.685369][   T34]  ? __pfx_vpanic+0x10/0x10
[  274.687302][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  274.689613][   T34]  ? preempt_schedule+0xae/0xc0
[  274.691679][   T34]  ? preempt_schedule_common+0x83/0xd0
[  274.694043][   T34]  panic+0xb9/0xc0
[  274.695647][   T34]  ? __pfx_panic+0x10/0x10
[  274.697583][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.699887][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  274.702465][   T34]  watchdog+0xfd2/0xfe0
[  274.704232][   T34]  ? watchdog+0x1de/0xfe0
[  274.706059][   T34]  kthread+0x711/0x8a0
[  274.707772][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.709801][   T34]  ? __pfx_kthread+0x10/0x10
[  274.711740][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.713984][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.716197][   T34]  ? __pfx_kthread+0x10/0x10
[  274.718166][   T34]  ret_from_fork+0x3fc/0x770
[  274.720092][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.722305][   T34]  ? __switch_to_asm+0x39/0x70
[  274.724349][   T34]  ? __switch_to_asm+0x33/0x70
[  274.726336][   T34]  ? __pfx_kthread+0x10/0x10
[  274.728305][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.730375][   T34]  </TASK>
[  274.732519][   T34] Kernel Offset: disabled
[  274.734380][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:37:56  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff1100bfff4a2 RBX=0000000000000100 RCX=ffff888020b73980 RDX=0000000000000000
RSI=0000000000001000 RDI=0000000000000000 RBP=0000000000043d0a RSP=ffffc90006827310
R8 =0000000000000000 R9 =ffffffff822e513d R10=dffffc0000000000 R11=fffff9400021e851
R12=0000000000043d0a R13=dffffc0000000000 R14=ffff88805fffa510 R15=0000000000001000
RIP=ffffffff822e3575 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557df5e500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f149bb056c0 CR3=0000000032b5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f149ae12e53
XMM06=0000000000000000 00007f149ae12e4d XMM07=0000000000000000 00007f149ae12e61
XMM08=0000000000000000 00007f149ae12ee7 XMM09=0000000000000000 00007f149ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93495388 RBX=0000000000000002 RCX=0000000000000067 RDX=0000000000080000
RSI=0000000000004000 RDI=ffff88802214b980 RBP=0000000000000067 RSP=ffffc900001e0cd0
R8 =0000000000000000 R9 =ffffffff81ada49a R10=dffffc0000000000 R11=ffffffff81ada3a0
R12=0000000000004000 R13=0000000000000000 R14=ffff88802214c498 R15=ffff88802214c470
RIP=ffffffff819d62eb RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3081107d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f30805a76c3 00007f30805a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0102808010001680 0401000002080606
XMM06=015b8200080016e0 0300100016d00300 XMM07=100016c003021000 16b0034810001590
XMM08=030180080011c003 04040011bc031004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
