last executing test programs:

2m22.747744725s ago: executing program 1 (id=576):
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="030600005600911000dd00000000004a07"], 0xfe33)

2m22.679960131s ago: executing program 1 (id=578):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94)

2m22.679752723s ago: executing program 1 (id=579):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20000882)
gettid()
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = gettid()
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b18e00212ba0d8105040a601100fe0f040b067c73a1bc0009001e000500000000001500153f05000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001)

2m22.6201341s ago: executing program 1 (id=581):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfff9, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x2)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)

2m22.389717724s ago: executing program 1 (id=587):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

2m22.327680803s ago: executing program 1 (id=589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd)

2m7.319099258s ago: executing program 32 (id=589):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd)

2m2.352923344s ago: executing program 3 (id=727):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xb}, {0xe}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4000000)

2m2.111086041s ago: executing program 3 (id=773):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(r2)

2m1.900173707s ago: executing program 3 (id=780):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x90, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0)

2m1.798795818s ago: executing program 3 (id=783):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33)

2m1.669683433s ago: executing program 3 (id=784):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m59.82855076s ago: executing program 3 (id=799):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4f, 0x5, 0xd, 0x7, 0x0, 0x8, 0xd2dbd, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x9c, 0xfff, 0x8, 0x7, 0x5, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

1m44.828273693s ago: executing program 33 (id=799):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4f, 0x5, 0xd, 0x7, 0x0, 0x8, 0xd2dbd, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0x9c, 0xfff, 0x8, 0x7, 0x5, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

30.521402433s ago: executing program 2 (id=2073):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28)

30.471326809s ago: executing program 2 (id=2076):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f00000037c0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000380)=""/97, 0x61}], 0x8}, 0x100)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

30.407637438s ago: executing program 2 (id=2080):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250001002cbd7000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @netfilter, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x0, 0xf0, 0x0, &(0x7f0000000240)=""/240, 0x9, 0x0, 0x0, 0xa07, 0x0, &(0x7f0000002040)="0e8f634edbd89bb0d2d8afc7aaea787b3ef18fa90b725c173d18447ba836c59a753f2eab0c6c9672910935b3cbb1db85395b336a37dd21668a11cbbe2e8ff6fade064505e9f52bc6be3ff32b7d93d04cc046bc988a9c1fb52e0135881533c6cdc8980063680761cbe2dc17af15895301383500d908d29b078aced842f71e20713479da732e52e4f985ca8577019947a024680792ccc8cf4249be435a90a95817148b45df8ab76443c2f3130abca3610e77caf1d49bee5c43f3c4a3032e5a5b98d7bc2f3176fea9b9a0f10c81b6ecfaee90108db2449b2b0101586d42cf2ab92c4c2bbba45d43de0b456fb3b217cd17d4dcff38e8d35bb60af274d873f678c2919b5383408ed53a7826b6bda4550bb33adc07c73830de8bdd5dca85839cad7b424f4fb375f3a63f401c6057a4cf180b983426c06a7e7f414e6b85f3ee4acdecfe406f57bc65187a72a9674cb056a25a19103f1b57bc6e162ec335d505ae8e0adeebaa451370078f01f7d6a8e204d94ef42162e9c482cc318ee6e0cda855246d2fff258e2eb1d9a30ff3919a5a3fcac0c3a52abf19a9e4e232d7528cb968db948a8bbf9aae8df969d73023a5ec82f1af4247b218038486afe8a57bbaa590c842a9b0da98d59f58f2f948d790f015e9ae505c840564acc8988e1b315ecf79cbb5d05311527874c0c9cc89936b87ebeea3952bce052e04ec29ec41a08373870f5288311af46536244c332bf1a2641f95e033de4552466f8c21e13e8cd83c8b3e58a0a7f8d79f0ab79885eecaadeb8c09658ac64ff9fe9b728b6938b0d577afdfe7be3872a65183cc5d751bc046287499bb566ab1f6402f1628b2df812858a504b069a8748df72f581ee90773fd80f0270a48d07b535086cd1fcd1a3c525119c974c434500df530193fc3981b93995931a9a68a328fc60cd2402e21bf4fc8ea36c59fcaeb2fa90ed5aba172cb7d094c382855d14758244bacae98d966acbb2049be78db4815810be55192c4bd2acf2fe4c97bdfb0b3a0a73b5f7cc7211a880f365ae3c937f733b690c21d59a0a95f69c16cd9395aa31f404303128acdeefc304306b82170ae90e5682febdf55ab3f17e81ec95222ef8f5492673ff7cff4d0bf7b2eb7f00d76c8451946c1d24a0e8f29862de8b135aa1c3a35b99add5b0d7d154636b1b581f356427a7ed0d9eb62ed45c7b3c4bd705b7aad3ad74feaf3343da1372b56a9edf284166a8e4e699d267d64593f8c7070adbed5bb357bb48cf7992d6c6a599783f047f6c60e3c2e71e021692462a9eaf4ba8c757268ab498b0ade67462fe916e2eef5df8745ea956e6fa66b444fd6dee642ec1725046fd747d02c98561713ff165bc82cdaaea66f8148b0956e3de0dac40c984e3d74377292657ff39d13c8a06edf647a4b4a530e617b5953cff9ff0d8950a11899c39970e559113bfe4cf799d3083118aa1b343530b970ede0864e6a3a7332169550d5669afb3b085992cea3ebf78ee8468baf1788c00ab96ecb8b3bf6712391dea761f3311a885ade5680fa04ad1edc0402432e49e2f96cb9db6180bbb0f7436b67c0705d5ee9fd984fe4deb2d6929ef96d03418c5853d2816b099cfb346111374bccda42d9b1bcbcfae684480fb7766e412345617783a392f630a891828cba813046ec03e9900051e29a1b91463d58d2e8846c8fb47f77229c999a0c231d0b0739256bbdc715aa1badf84a6cdd7244350e0be2d4c7c154a29ee78f5366e1964ba8c9e2c1d361790a327130e8ba3db28d010c53062bbfb09c449efb3034eb37ba796b125e2a6690186ec4ea3c325e77c33a3564edefa54a64531d3ef1f753ddc742f49ae1ecd9b9ab58619680bb7f176828159291692b20d1d4717f578c9fc948c253d03110cf40145195c2332928b453fc01029d918449c6b890da9e23ee62e0168d101c46133d7271fdd12e4c9560725647151b9d75d11b62a206ce412a24063965d2365c18cf01395b1713c4797a57f91e17e9d10338e9a5ab1c2e644aed30081f7f53de8dc9d944acb29ce7c406395109324ef02f57b415a00b770bf3773022d277a0cc55b6a37946868d9139879a55a3c2913b2b6feaa71e68f82bb22d7ab1c297d96df42dbefc366a7f9b5da7a487d63bc2e33d86dcb31d66eb742faf1a394a985ee49206df865a80ea2514727da40fda810495abdfef4daa2d2849837b33117c351a88fb6178533499b9242e8c6db176e3928148f78c3326a2180abc8ca09aa7f8105cc9339a74e05ebc06ea149bd1b54c8b639f3a135e1e13d542c177ed6ce75baecc8295bd5163e3cf3c987d144cbeca8d33f3c3c1dc374561632bb048bde11157a5cf64ea068dfe5c2a70b0b650ee924016869a8c74528936565822b9ec4f32712be28f6aa0afc94d414ef0733769624c4b46a53ac56862942b306ef9c2679138edc8a798f452e109aaede533635ed0f49fd721ac1542bbeea271d36730e59c43f7e869d12b6778afa1216e9ef7240f5d118724eea5c8ed0c56ded8eb74d92453e38e6976cfaeac28cd02979ea5d94ddd5cb4a3782167a308311baca20fcca197afb059d83ab9879f6d7f928615e644f76e2b9a4807a79b7b4f6fd6554f7349450c8c7a68bc1ce0dfca98bd99f3a1d2b8c0f90dd296a5154af3c06480ad30e0b31b7c0dfefe9b50724c06fcac525ad701f930d6b3fc425b36ac03db71af2eaaa346df4c25575cf3c479cb53c6da4e4a3d7777a4d6695d199d267233048781fe62812ad82f4fa87cb1eaaa5424bb89e0b6bbf29a1f443ed3b7af22657d8453af7589bdb7a30cf3b4f7f49d87b50fde04070a092a499fc2940b2eb0264b059abbe8c3a1107dc429073569fa6af17e19b69f7be18e15ed5accc39cd1298d1d4a039c27ebccd0a141afb1128f30e11dc3ca54ab98a40a8246baa0a0fe246a1646a6a393ff2ee9ffaef8dc90cc704f65a108cd069958774132e43acce730541eef5439242c27d1b38743f823f4f7ac90125686cce83f97cea791108fe5d10731518665bfa07f675280ca29bd7064735a2f34755efb6c5aa82bc49af6c7390e2988745ffd5aa82ae796fc7f6439708de792c02cec3d6c7f4cfa74fd81056bee6dd35fa706ab1219b6c8191f883a0d04bad40c6201bb3e374e637ebe736298c10b1738ad3951b0ec82270d0f502d36b13c4ee1e3694d7f94db51551723a5e644972036a9d66ef330d79d1fbe7cde67763998dad26f5e2d85cf4d5f5d8d8cb45741b18be2810a4b2ec4b6a80e128d4561f680964ee2cd26913903d5dae18188f249aefbb81c5230995c6350648d863188c9e63a467ab5ac432cbb9d9b4e6333a13401e500b5706a83dfb9e2865b3b8527782d4c65c1481bcd99a09399d7fbdf6b86b5653a15355f0e467bd05f12278377e17f2fe31a6219a0cff688fc446a12743ffbc6e426b7d3a61430cb311a884d4ff46e7fe38a98a2b0d182114cee3b8ec00031d7ccb866a6289b2cd93f953f9e5f8f408b20a1137da8becb130ddfecbaba359a8728df0eb93dd29ed5cac46f0eea1ce21831de1004ac2fdd5eba132b9fe5dfe6f127c3b572d6f0cf16cee3766bc093e25dad217a445d8ef13b4530afe3eef837fa5cfd478e7d2e4bfe4a08e2b06f", 0x2, 0x0, 0xcc}, 0x50)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0xb3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0xff0a, 0x0)

30.16166131s ago: executing program 0 (id=2088):
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

30.091759148s ago: executing program 0 (id=2090):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="02a449", 0x3}], 0x1}, 0x4000890)

30.09138924s ago: executing program 0 (id=2092):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x40}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5}, 0x94)

30.020866219s ago: executing program 2 (id=2095):
r0 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x24008010)

30.020586732s ago: executing program 0 (id=2096):
r0 = socket$kcm(0xa, 0x5, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b3"], 0xfe33)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

29.95229107s ago: executing program 0 (id=2098):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
close(0x3)

29.952046985s ago: executing program 2 (id=2099):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010101}}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0xffffffffffffff72)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x4000)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socket$kcm(0x11, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0xffdd)

29.691611942s ago: executing program 2 (id=2100):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x1000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004804}, 0x2c000010)

29.612511343s ago: executing program 34 (id=2100):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf3, 0x99, 0x0, 0x0, 0x0, 0x0, 0x501d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x4, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x80)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x1407, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x1000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004804}, 0x2c000010)

29.573148704s ago: executing program 0 (id=2102):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

29.526718734s ago: executing program 35 (id=2102):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

18.402413332s ago: executing program 4 (id=2238):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000000c0)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xa, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f00000001c0), 0x4)
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33)

17.086226837s ago: executing program 4 (id=2241):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a8001604040001400300000003", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

16.783739309s ago: executing program 4 (id=2248):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x51, 0x303}}], 0x18}, 0x241)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)}], 0x1}, 0x40c1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x33)
sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80, 0x0}, 0x4000008)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000005000000", 0x14}], 0x1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9613628976984407a547ed387", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10)
r7 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, 0x0, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000), 0x10)
close(r7)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0)

16.781408345s ago: executing program 5 (id=2249):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)="d80000001c0081044e81f782db44b9040a1d080220000000000000a1180002000700000000000e1208001f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000004000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40020)

16.651999456s ago: executing program 5 (id=2250):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

16.548451463s ago: executing program 5 (id=2251):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

16.544502704s ago: executing program 4 (id=2253):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f0000000000000004000000711089000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.544273844s ago: executing program 5 (id=2254):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400120038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

16.451508292s ago: executing program 6 (id=2255):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r0, &(0x7f00000011c0)={&(0x7f0000001000), 0xc, &(0x7f0000001180)=[{&(0x7f0000001040)=""/140, 0x8c}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001140)=""/55, 0x37}], 0x3, &(0x7f0000002880)=[{0xf8, 0x0, 0x0, ""/230}, {0x68, 0x0, 0x0, ""/83}, {0x100, 0x0, 0x0, ""/235}, {0x1010, 0x0, 0x0, ""/4096}], 0x1270, 0x40012001}, 0x38, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000051fc0200000000000000cc67e2b00f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB='Nt\x00\x00\x00\x00', @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {}], 0x10, 0xfffffff6}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="5c00000013006bcc9e3be35c6e17aa71116b876c1d0000007ea60864160af36514001ac00c00020007000200050007c00364bc24eab556e845251e618294ff0051f60a84c90300000000000000d0001000000e4509c517cd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

16.451285574s ago: executing program 4 (id=2256):
r0 = socket(0x1d, 0x2, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(r0, 0x6a, 0x6e, 0x0, 0x0)

16.37947433s ago: executing program 5 (id=2257):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec5", 0x88}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)='|', 0x1}, {&(0x7f0000000300)="809eb0", 0x3}], 0x2}, 0x44000)

16.378960887s ago: executing program 5 (id=2258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x15, 0x5f, 0x9f, 0x4, 0x0, 0x100000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dc, 0x80000020, 0x6, 0x8000000000000001, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x2d}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, 0x0)
close(0x3)

16.261782728s ago: executing program 4 (id=2259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

15.44903308s ago: executing program 6 (id=2260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x28}}, 0xd0)

15.448877374s ago: executing program 6 (id=2261):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x0, 0xa4, 0x4000}, 0x50)

15.448767572s ago: executing program 6 (id=2262):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7a, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840)

15.253572232s ago: executing program 6 (id=2263):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4b}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

13.865314721s ago: executing program 6 (id=2264):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x8, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}, 0x1, 0x7}, 0x0)

1.11536067s ago: executing program 36 (id=2259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

418.807082ms ago: executing program 37 (id=2258):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x15, 0x5f, 0x9f, 0x4, 0x0, 0x100000000006, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dc, 0x80000020, 0x6, 0x8000000000000001, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x2d}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r8, 0x8943, 0x0)
close(0x3)

0s ago: executing program 38 (id=2264):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x8, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20662' (ED25519) to the list of known hosts.
syzkaller login: [   56.696215][ T5833] cgroup: Unknown subsys name 'net'
[   56.828837][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.835071][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.886352][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.196874][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.203594][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.207114][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.210954][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.213575][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.327947][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.331287][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.335523][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.338618][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.342737][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.359646][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.362882][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.368295][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.371633][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.375349][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.458508][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.552233][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.556754][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.559572][ T5848] bridge_slave_0: entered allmulticast mode
[   64.562747][ T5848] bridge_slave_0: entered promiscuous mode
[   64.568607][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.571305][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.573858][ T5848] bridge_slave_1: entered allmulticast mode
[   64.578252][ T5848] bridge_slave_1: entered promiscuous mode
[   64.631500][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.642756][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.726925][ T5848] team0: Port device team_slave_0 added
[   64.761616][ T5848] team0: Port device team_slave_1 added
[   64.812455][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.818752][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.821522][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.832623][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.841356][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.844339][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.855086][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.868820][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.955764][ T5848] hsr_slave_0: entered promiscuous mode
[   64.958859][ T5848] hsr_slave_1: entered promiscuous mode
[   64.995193][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.998184][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.001198][ T5855] bridge_slave_0: entered allmulticast mode
[   65.005602][ T5855] bridge_slave_0: entered promiscuous mode
[   65.040488][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.043287][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.048950][ T5855] bridge_slave_1: entered allmulticast mode
[   65.052694][ T5855] bridge_slave_1: entered promiscuous mode
[   65.072600][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.075169][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.077657][ T5852] bridge_slave_0: entered allmulticast mode
[   65.080736][ T5852] bridge_slave_0: entered promiscuous mode
[   65.084847][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.087516][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.090359][ T5852] bridge_slave_1: entered allmulticast mode
[   65.093636][ T5852] bridge_slave_1: entered promiscuous mode
[   65.145453][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.165989][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.192437][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.219656][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.235385][ T5855] team0: Port device team_slave_0 added
[   65.253564][ T5855] team0: Port device team_slave_1 added
[   65.291148][ T5852] team0: Port device team_slave_0 added
[   65.298425][ T5852] team0: Port device team_slave_1 added
[   65.305230][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.307910][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.319368][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.350674][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.353402][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.364642][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.369779][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.372584][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.383586][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.389288][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.391807][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.400629][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.508436][ T5855] hsr_slave_0: entered promiscuous mode
[   65.512132][ T5855] hsr_slave_1: entered promiscuous mode
[   65.515706][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.517937][ T5855] Cannot create hsr debugfs directory
[   65.529253][ T5852] hsr_slave_0: entered promiscuous mode
[   65.531562][ T5852] hsr_slave_1: entered promiscuous mode
[   65.533672][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.536946][ T5852] Cannot create hsr debugfs directory
[   65.539919][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.555519][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.588224][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.602287][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.827746][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.836691][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.847247][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.859585][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.916195][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.928236][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.933602][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.943862][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.970126][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.013128][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.036413][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.039441][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.043907][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.046210][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.078311][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.116371][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.137725][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.140799][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.163420][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.166415][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.182449][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.236380][ T5239] Bluetooth: hci0: command tx timeout
[   66.241188][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.255680][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.277413][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.280310][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.286224][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.289235][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.386348][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.394294][   T55] Bluetooth: hci1: command tx timeout
[   66.396694][ T5239] Bluetooth: hci2: command tx timeout
[   66.449814][ T5848] veth0_vlan: entered promiscuous mode
[   66.459820][ T5848] veth1_vlan: entered promiscuous mode
[   66.476971][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.505061][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.535906][ T5848] veth0_macvtap: entered promiscuous mode
[   66.541810][ T5852] veth0_vlan: entered promiscuous mode
[   66.561386][ T5848] veth1_macvtap: entered promiscuous mode
[   66.565729][ T5852] veth1_vlan: entered promiscuous mode
[   66.603579][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.621471][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.630731][ T5855] veth0_vlan: entered promiscuous mode
[   66.637274][ T5852] veth0_macvtap: entered promiscuous mode
[   66.646217][ T5852] veth1_macvtap: entered promiscuous mode
[   66.656034][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.665163][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.667897][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.670884][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.677853][ T5855] veth1_vlan: entered promiscuous mode
[   66.699725][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.723521][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.760262][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.764982][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.788407][ T5855] veth0_macvtap: entered promiscuous mode
[   66.796720][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.800312][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.812865][ T5855] veth1_macvtap: entered promiscuous mode
[   66.825487][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.828314][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.881887][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.893193][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.897289][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.916512][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.963246][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.968214][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.977483][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.986120][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.990305][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.002050][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.009061][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.054695][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.065013][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.122802][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.126972][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.188529][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.191058][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.328481][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4'.
[   67.527975][ T5929] Zero length message leads to an empty skb
[   67.756094][    C1] hrtimer: interrupt took 33166 ns
[   68.008501][ T5952] =======================================================
[   68.008501][ T5952] WARNING: The mand mount option has been deprecated and
[   68.008501][ T5952]          and is ignored by this kernel. Remove the mand
[   68.008501][ T5952]          option from the mount to silence this warning.
[   68.008501][ T5952] =======================================================
[   68.098834][ T5959] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17'.
[   68.110556][ T5952] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17'.
[   68.128739][ T5952] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.17'.
[   68.175710][ T5963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.180603][ T5962] Driver unsupported XDP return value 0 on prog  (id 21) dev N/A, expect packet loss!
[   68.210960][ T5963] netlink: 'syz.2.22': attribute type 21 has an invalid length.
[   68.313429][ T5963] netlink: 'syz.2.22': attribute type 10 has an invalid length.
[   68.320585][ T5239] Bluetooth: hci0: command tx timeout
[   68.486127][   T55] Bluetooth: hci1: command tx timeout
[   68.488375][ T5239] Bluetooth: hci2: command tx timeout
[   69.832158][  T793] cfg80211: failed to load regulatory.db
[   70.421094][ T5239] Bluetooth: hci0: command tx timeout
[   70.574393][ T5239] Bluetooth: hci2: command tx timeout
[   70.575862][   T55] Bluetooth: hci1: command tx timeout
[   70.823895][ T6013] netlink: 'syz.0.43': attribute type 10 has an invalid length.
[   71.544922][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.547785][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.887277][ T6013] team0: Port device geneve1 added
[   72.064204][   T13] syzkaller0: tun_net_xmit 76
[   72.065939][   T13] syzkaller0: tun_net_xmit 48
[   72.071262][ T6023] syzkaller0: create flow: hash 496357858 index 1
[   72.148354][ T5316] syzkaller0: tun_net_xmit 76
[   72.166458][ T6028] syzkaller0: delete flow: hash 496357858 index 1
[   72.486323][   T55] Bluetooth: hci0: command tx timeout
[   72.634768][   T55] Bluetooth: hci1: command tx timeout
[   72.645759][   T55] Bluetooth: hci2: command tx timeout
[   72.932220][ T6032] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.083531][ T6032] openvswitch: netlink: EtherType 50a is less than min 600
[   73.614412][ T6069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.633373][ T6069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.648181][ T6069] netlink: 60 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.815151][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.73'.
[   73.818090][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.73'.
[   74.319308][ T6095] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.80'.
[   74.895604][ T6113] Dead loop on virtual device ip6_vti0, fix it urgently!
[   74.960813][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[   74.970727][ T6115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.89'.
[   74.980178][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[   75.170194][ T6123] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   75.172676][ T6123] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   75.549618][ T6154] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[   75.758621][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.772430][ T6168] netlink: 'syz.2.114': attribute type 10 has an invalid length.
[   76.763447][ T6179] netlink: 'syz.1.117': attribute type 3 has an invalid length.
[   76.774629][ T6179] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.117'.
[   76.869130][ T6181] svc: failed to register nfsdv3 RPC service (errno 111).
[   76.875453][ T6181] svc: failed to register nfsaclv3 RPC service (errno 111).
[   76.963918][ T6187] netlink: 'syz.1.120': attribute type 39 has an invalid length.
[   77.265583][ T6197] netlink: 'syz.2.126': attribute type 3 has an invalid length.
[   78.251321][ T6212] netlink: 'syz.2.132': attribute type 12 has an invalid length.
[   79.636633][ T6206] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   79.771993][ T6219] __nla_validate_parse: 4 callbacks suppressed
[   79.772141][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.134'.
[   81.037148][ T6257] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.147'.
[   81.041006][ T6257] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   81.058454][ T6257] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.178250][ T6269] netlink: 'syz.1.153': attribute type 25 has an invalid length.
[   81.529009][ T6292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.691381][ T6299] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   81.735631][ T6292] syz.0.164 (6292) used greatest stack depth: 19768 bytes left
[   81.771209][ T6302] netlink: 71 bytes leftover after parsing attributes in process `syz.0.169'.
[   81.793900][ T6303] netlink: 'syz.2.168': attribute type 2 has an invalid length.
[   81.814483][ T6303] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   81.833803][ T6296] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.166'.
[   81.941570][ T6303] netlink: 228 bytes leftover after parsing attributes in process `syz.2.168'.
[   83.566388][ T6348] netlink: 'syz.2.186': attribute type 39 has an invalid length.
[   83.611477][ T6355] netlink: 'syz.1.184': attribute type 10 has an invalid length.
[   84.498995][ T6355] bond0: (slave bond_slave_0): Releasing backup interface
[   84.551540][ T6360] syzkaller0: entered promiscuous mode
[   84.553826][ T6360] syzkaller0: entered allmulticast mode
[   85.538835][ T6373] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.194'.
[   85.590730][   T55] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[   87.120622][ T6426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.214'.
[   87.226997][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.217'.
[   87.324560][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'.
[   88.461667][ T6451] netlink: 348 bytes leftover after parsing attributes in process `syz.1.226'.
[   89.471020][ T6491] netlink: 'syz.0.242': attribute type 19 has an invalid length.
[   89.473751][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.242'.
[   89.541011][ T6495] netlink: 182 bytes leftover after parsing attributes in process `syz.0.244'.
[   89.546197][ T6495] netlink: 'syz.0.244': attribute type 10 has an invalid length.
[   89.558643][ T6495] veth0_vlan: left promiscuous mode
[   89.561855][ T6495] veth0_vlan: entered promiscuous mode
[   89.571144][ T6495] team0: Device veth0_vlan failed to register rx_handler
[   89.632707][ T6495] netlink: 216 bytes leftover after parsing attributes in process `syz.0.244'.
[   89.646289][ T6495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.244'.
[   89.716776][ T6502] netlink: ct family unspecified
[   89.718641][ T6502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.916257][ T6507] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.248'.
[   90.447718][ T6495] syz.0.244 (6495) used greatest stack depth: 19224 bytes left
[   91.113412][ T6546] netlink: 'syz.1.264': attribute type 4 has an invalid length.
[   91.418816][ T6569] netlink: 'syz.2.275': attribute type 40 has an invalid length.
[   91.768409][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.928154][ T6599] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[   91.936990][ T6599] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[   91.952015][ T6599] netlink: 'syz.0.284': attribute type 29 has an invalid length.
[   92.613829][ T6616] netlink: 'syz.2.287': attribute type 2 has an invalid length.
[   92.618241][ T6616] __nla_validate_parse: 2 callbacks suppressed
[   92.618251][ T6616] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.287'.
[   92.623123][ T6616] nbd: must specify at least one socket
[   92.703703][ T6619] netlink: 'syz.2.290': attribute type 21 has an invalid length.
[   92.717450][ T6619] netlink: 128 bytes leftover after parsing attributes in process `syz.2.290'.
[   92.722108][ T6619] netlink: 'syz.2.290': attribute type 6 has an invalid length.
[   92.726307][ T6619] netlink: 3 bytes leftover after parsing attributes in process `syz.2.290'.
[   95.878308][ T6700] infiniband syz0: set active
[   95.884039][ T6700] infiniband syz0: added veth0_vlan
[   95.968173][ T6700] RDS/IB: syz0: added
[   95.979049][ T6700] smc: adding ib device syz0 with port count 1
[   95.981637][ T6700] smc:    ib device syz0 port 1 has pnetid 
[   96.117766][ T6706] openvswitch: netlink: Multiple metadata blocks provided
[   96.808414][ T6723] syz.2.324 uses obsolete (PF_INET,SOCK_PACKET)
[   96.978714][ T6730] netlink: 10 bytes leftover after parsing attributes in process `syz.2.327'.
[   97.259731][ T6743] syzkaller0: entered promiscuous mode
[   97.263418][ T6743] syzkaller0: entered allmulticast mode
[  100.200487][ T6781] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.346'.
[  100.386102][ T6793] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  100.541742][ T6803] openvswitch: netlink: Multiple metadata blocks provided
[  100.601131][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[  103.697997][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[  103.712434][ T6832] netlink: 68 bytes leftover after parsing attributes in process `syz.2.364'.
[  103.776061][ T6837] netlink: 'syz.1.367': attribute type 27 has an invalid length.
[  103.780875][ T6837] netlink: 164 bytes leftover after parsing attributes in process `syz.1.367'.
[  103.824848][ T6839] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.368'.
[  104.248466][ T6884] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[  104.251288][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.262802][ T6880] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  104.266350][ T6880] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  104.421935][ T6903] netlink: 'syz.0.398': attribute type 10 has an invalid length.
[  104.426366][ T6903] netlink: 168 bytes leftover after parsing attributes in process `syz.0.398'.
[  104.835977][ T6919] netlink: 92 bytes leftover after parsing attributes in process `syz.1.404'.
[  105.158398][ T6929] syzkaller0: entered promiscuous mode
[  105.211488][ T6928] tmpfs: Bad value for 'gid'
[  105.213762][ T6928] tmpfs: Bad value for 'gid'
[  106.171497][ T6946] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[  107.112309][ T6958] netlink: 17 bytes leftover after parsing attributes in process `syz.0.419'.
[  107.163820][ T6962] netlink: 948 bytes leftover after parsing attributes in process `syz.2.421'.
[  107.264895][ T6970] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  108.096336][ T7018] netlink: 'syz.2.448': attribute type 10 has an invalid length.
[  108.270213][ T7030] pim6reg0: tun_chr_ioctl cmd 1074025681
[  108.518375][ T7044] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.460'.
[  109.426277][ T7087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[  109.579502][ T7104] netlink: 'syz.1.483': attribute type 39 has an invalid length.
[  109.735227][ T7108] netlink: 'syz.0.484': attribute type 39 has an invalid length.
[  110.289230][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  110.472288][ T7127] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.493'.
[  110.650360][ T7142] netlink: 'syz.0.498': attribute type 10 has an invalid length.
[  110.660715][ T7142] veth0_vlan: entered allmulticast mode
[  110.663914][ T7142] veth0_vlan: left promiscuous mode
[  110.674360][ T7142] veth0_vlan: entered promiscuous mode
[  110.691174][ T7142] team0: Device veth0_vlan failed to register rx_handler
[  110.830981][ T7142] syz.0.498 (7142) used greatest stack depth: 18424 bytes left
[  110.903044][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  110.911851][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  110.915901][ T7159] netlink: 33 bytes leftover after parsing attributes in process `syz.1.503'.
[  110.919172][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  111.003027][ T7167] syzkaller0: entered promiscuous mode
[  111.006459][ T7167] syzkaller0: entered allmulticast mode
[  111.103095][ T7176] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.568442][ T7236] __nla_validate_parse: 6 callbacks suppressed
[  112.568454][ T7236] netlink: 532 bytes leftover after parsing attributes in process `syz.2.537'.
[  112.998830][ T7245] netlink: 'syz.2.540': attribute type 9 has an invalid length.
[  113.240189][ T7253] netlink: 'syz.2.544': attribute type 35 has an invalid length.
[  113.283243][ T7255] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  113.344242][ T7259] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.547'.
[  113.425175][ T7265] netlink: 'syz.0.550': attribute type 3 has an invalid length.
[  113.428064][ T7265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'.
[  113.477275][ T7271] netlink: 26 bytes leftover after parsing attributes in process `syz.1.553'.
[  113.612203][ T7283] netlink: 'syz.1.558': attribute type 39 has an invalid length.
[  113.745820][ T7289] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.562'.
[  113.780273][ T7293] netlink: 'syz.2.564': attribute type 2 has an invalid length.
[  113.797748][ T7296] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.566'.
[  113.904245][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'.
[  113.907730][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'.
[  113.909748][ T7308] netlink: 948 bytes leftover after parsing attributes in process `syz.0.572'.
[  113.911148][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'.
[  116.500392][ T7380] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  118.419900][ T7389] __nla_validate_parse: 1 callbacks suppressed
[  118.419914][ T7389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'.
[  118.430860][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.462742][ T7389] bridge_slave_0 (unregistering): left allmulticast mode
[  118.465473][ T7389] bridge_slave_0 (unregistering): left promiscuous mode
[  118.467665][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.486258][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  118.657697][ T7397] netlink: 'syz.0.614': attribute type 11 has an invalid length.
[  118.660801][ T7397] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.614'.
[  118.807615][ T7396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.113328][ T7413] netlink: 'syz.2.622': attribute type 5 has an invalid length.
[  119.279882][ T7419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.468549][ T7426] netlink: 'syz.0.628': attribute type 22 has an invalid length.
[  119.558365][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'.
[  120.001797][ T7454] netlink: 56 bytes leftover after parsing attributes in process `syz.2.641'.
[  120.320390][ T7456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.336998][ T7456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.359133][ T7472] netlink: 'syz.0.648': attribute type 21 has an invalid length.
[  121.362216][ T7472] netlink: 128 bytes leftover after parsing attributes in process `syz.0.648'.
[  121.384485][ T7472] netlink: 'syz.0.648': attribute type 4 has an invalid length.
[  121.387522][ T7472] netlink: 'syz.0.648': attribute type 3 has an invalid length.
[  121.390575][ T7472] netlink: 3 bytes leftover after parsing attributes in process `syz.0.648'.
[  121.536139][ T7475] netlink: 196 bytes leftover after parsing attributes in process `syz.2.649'.
[  122.464835][ T7495] netlink: 277 bytes leftover after parsing attributes in process `syz.2.657'.
[  122.550247][ T7499] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  122.641446][ T7502] openvswitch: netlink: Key type 10768 is out of range max 32
[  123.049918][ T7514] netlink: 'syz.2.666': attribute type 21 has an invalid length.
[  123.058898][ T7514] netlink: 'syz.2.666': attribute type 11 has an invalid length.
[  126.268321][ T7536] __nla_validate_parse: 1 callbacks suppressed
[  126.268333][ T7536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.677'.
[  127.008609][ T7545] netlink: 'syz.2.681': attribute type 29 has an invalid length.
[  127.035180][ T7554] netlink: 'syz.2.681': attribute type 29 has an invalid length.
[  127.049051][ T7555] netlink: 'syz.2.681': attribute type 29 has an invalid length.
[  127.072980][ T7545] netlink: 'syz.2.681': attribute type 29 has an invalid length.
[  127.141089][ T7554] netlink: 'syz.2.681': attribute type 2 has an invalid length.
[  127.148494][ T7554] netlink: 'syz.2.681': attribute type 9 has an invalid length.
[  127.151427][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.681'.
[  127.966584][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[  128.051671][ T7572] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.692'.
[  129.172931][ T7629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.720'.
[  129.671658][ T7646] TCP: TCP_TX_DELAY enabled
[  129.911976][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.917799][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.920703][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.924593][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.927826][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.946893][ T7650] netlink: 'syz.2.730': attribute type 21 has an invalid length.
[  129.953185][ T7650] netlink: 'syz.2.730': attribute type 6 has an invalid length.
[  129.957605][ T7650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.730'.
[  130.087274][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.195149][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.202364][ T7666] netlink: 'syz.2.736': attribute type 2 has an invalid length.
[  130.258572][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.358590][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.382982][ T7653] chnl_net:caif_netlink_parms(): no params data found
[  130.620624][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.627246][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.630755][ T7653] bridge_slave_0: entered allmulticast mode
[  130.639480][ T7653] bridge_slave_0: entered promiscuous mode
[  130.652794][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.657043][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.660302][ T7653] bridge_slave_1: entered allmulticast mode
[  130.665020][ T7653] bridge_slave_1: entered promiscuous mode
[  130.733431][ T5862] bridge_slave_1: left allmulticast mode
[  130.737105][ T5862] bridge_slave_1: left promiscuous mode
[  130.740478][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.748877][ T5862] bridge_slave_0: left promiscuous mode
[  130.751539][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.153098][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.160209][ T5862] bond0 (unregistering): Released all slaves
[  131.176690][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.182188][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.198892][ T7693] delete_channel: no stack
[  131.301251][ T7653] team0: Port device team_slave_0 added
[  131.308666][ T7653] team0: Port device team_slave_1 added
[  131.376307][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.379278][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.397595][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.408503][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.411185][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.422799][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.527500][ T7653] hsr_slave_0: entered promiscuous mode
[  131.530620][ T7653] hsr_slave_1: entered promiscuous mode
[  131.533551][ T7653] debugfs: 'hsr0' already exists in 'hsr'
[  131.544084][ T7653] Cannot create hsr debugfs directory
[  131.876361][ T7712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'.
[  131.879896][ T7712] unsupported nlmsg_type 40
[  132.006929][   T55] Bluetooth: hci0: command tx timeout
[  132.060474][ T5862] hsr_slave_0: left promiscuous mode
[  132.069997][ T5862] hsr_slave_1: left promiscuous mode
[  132.073517][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.077622][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.080936][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.086399][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.103570][ T5862] veth1_macvtap: left promiscuous mode
[  132.105807][ T5862] veth0_macvtap: left promiscuous mode
[  132.109099][ T5862] veth1_vlan: left promiscuous mode
[  132.113271][ T5862] veth0_vlan: left promiscuous mode
[  132.192579][ T7723] netlink: 'syz.0.754': attribute type 27 has an invalid length.
[  132.204118][ T7723] netlink: 164 bytes leftover after parsing attributes in process `syz.0.754'.
[  132.441405][   T27] smc: removing ib device syz0
[  132.678109][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  132.702818][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  132.799710][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.802081][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.959340][ T7734] netlink: 14 bytes leftover after parsing attributes in process `syz.0.759'.
[  133.092928][   T24] syz0: Port: 1 Link DOWN
[  133.126657][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.213772][ T7653] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.229095][ T7653] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.261826][ T7653] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  133.273396][ T7653] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  133.426847][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'.
[  133.522886][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.550011][ T7653] 8021q: adding VLAN 0 to HW filter on device team0
[  133.562817][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.565640][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.582685][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.585294][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.588619][ T7762] delete_channel: no stack
[  133.590357][ T7762] delete_channel: no stack
[  133.679528][ T7768] netlink: 'syz.2.768': attribute type 1 has an invalid length.
[  133.918287][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.968442][ T7653] veth0_vlan: entered promiscuous mode
[  133.978719][ T7653] veth1_vlan: entered promiscuous mode
[  134.033448][ T7653] veth0_macvtap: entered promiscuous mode
[  134.061551][ T7653] veth1_macvtap: entered promiscuous mode
[  134.075119][   T55] Bluetooth: hci0: command tx timeout
[  134.127226][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.152546][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.171954][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.211030][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.233502][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.244478][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.338537][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.357016][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.419690][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.423573][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.524147][ T7796] netlink: 'syz.3.727': attribute type 17 has an invalid length.
[  134.693825][ T7798] option changes via remount are deprecated (pid=7797 comm=syz.2.772)
[  135.078929][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'.
[  135.606675][ T7844] netlink: 67 bytes leftover after parsing attributes in process `syz.2.791'.
[  135.748976][   T55] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  135.789828][ T7851] netlink: 'syz.0.793': attribute type 12 has an invalid length.
[  135.819157][ T7851] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.793'.
[  136.033918][ T7853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.167449][   T55] Bluetooth: hci0: command tx timeout
[  136.757543][ T7859] netlink: 'syz.0.796': attribute type 4 has an invalid length.
[  136.771319][ T7859] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.796'.
[  137.009521][ T7864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'.
[  137.157075][ T7868] netlink: 'syz.0.800': attribute type 29 has an invalid length.
[  138.010543][ T7886] netlink: 204 bytes leftover after parsing attributes in process `syz.2.808'.
[  138.238045][   T55] Bluetooth: hci0: command tx timeout
[  138.649381][   T55] Bluetooth: hci1: Malformed LE Event: 0x0d
[  138.786001][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'.
[  138.789321][ T7896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'.
[  140.963042][ T7975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.847'.
[  141.006590][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'.
[  141.337204][ T7986] netlink: 'syz.0.851': attribute type 4 has an invalid length.
[  141.462252][ T7990] xt_bpf: check failed: parse error
[  141.607011][ T7998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.846527][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  141.968485][ T8008] : renamed from vlan0
[  142.423832][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[  142.593499][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'.
[  142.621408][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.873'.
[  142.632808][ T8034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.874'.
[  142.819448][ T8044] netlink: 'syz.0.879': attribute type 11 has an invalid length.
[  143.717390][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'.
[  143.821093][ T8071] netlink: 'syz.2.892': attribute type 10 has an invalid length.
[  143.823676][ T8071] netlink: 'syz.2.892': attribute type 19 has an invalid length.
[  143.828430][ T8071] netlink: 156 bytes leftover after parsing attributes in process `syz.2.892'.
[  144.698135][ T8089] tun0: tun_chr_ioctl cmd 1074812117
[  145.773905][ T8126] syzkaller0: entered promiscuous mode
[  145.780967][ T8126] syzkaller0: entered allmulticast mode
[  148.034381][ T8178] netlink: 'syz.0.928': attribute type 10 has an invalid length.
[  148.036886][ T8178] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.928'.
[  149.122416][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  149.126616][ T8208] netlink: 312 bytes leftover after parsing attributes in process `syz.0.941'.
[  149.159509][ T8210] netlink: 'syz.0.942': attribute type 13 has an invalid length.
[  149.261475][ T8216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.384288][ T8219] netlink: 'syz.2.946': attribute type 13 has an invalid length.
[  149.398982][ T8219] gretap0: refused to change device tx_queue_len
[  149.401735][ T8219] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  150.505021][ T8254] nbd: must specify an index to disconnect
[  150.803500][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.965'.
[  150.854330][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  150.934925][ T8274] netlink: 'syz.2.966': attribute type 3 has an invalid length.
[  150.940784][ T8274] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.966'.
[  151.323125][ T8291] netlink: 'syz.2.974': attribute type 16 has an invalid length.
[  151.333071][ T8291] netlink: 168 bytes leftover after parsing attributes in process `syz.2.974'.
[  151.581971][ T8302] netlink: 'syz.0.979': attribute type 46 has an invalid length.
[  151.588118][ T8302] netlink: 55 bytes leftover after parsing attributes in process `syz.0.979'.
[  151.668549][ T8304] netlink: 'syz.0.980': attribute type 21 has an invalid length.
[  151.679411][ T8304] netlink: 164 bytes leftover after parsing attributes in process `syz.0.980'.
[  151.705411][ T8309] xt_socket: unknown flags 0x20
[  151.768363][ T8313] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  151.846594][ T8319] netlink: 1 bytes leftover after parsing attributes in process `syz.0.987'.
[  151.888340][ T8321] sctp: [Deprecated]: syz.0.989 (pid 8321) Use of int in maxseg socket option.
[  151.888340][ T8321] Use struct sctp_assoc_value instead
[  152.000310][ T8323] netlink: 'syz.2.988': attribute type 10 has an invalid length.
[  152.382774][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.389310][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.392398][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.397757][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.400858][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.536985][ T8323] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.549157][ T8328] netlink: 'syz.0.991': attribute type 4 has an invalid length.
[  152.827398][ T8330] chnl_net:caif_netlink_parms(): no params data found
[  152.843892][ T8344] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.996'.
[  152.854918][ T8344] netlink: 'syz.2.996': attribute type 1 has an invalid length.
[  152.972023][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.979442][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.982582][ T8330] bridge_slave_0: entered allmulticast mode
[  152.992830][ T8330] bridge_slave_0: entered promiscuous mode
[  152.997581][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.000474][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.003201][ T8330] bridge_slave_1: entered allmulticast mode
[  153.008631][ T8330] bridge_slave_1: entered promiscuous mode
[  153.068614][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.078246][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.116499][ T8330] team0: Port device team_slave_0 added
[  153.127213][ T8330] team0: Port device team_slave_1 added
[  153.171263][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.174998][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.185367][ T8330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.191194][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.193942][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.206566][ T8330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.279070][ T8330] hsr_slave_0: entered promiscuous mode
[  153.282262][ T8330] hsr_slave_1: entered promiscuous mode
[  153.529981][ T8330] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  153.546060][ T8330] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  153.562404][ T8330] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  153.568933][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1004'.
[  153.582823][ T8330] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  153.691409][ T8368] syzkaller0: entered promiscuous mode
[  153.694794][ T8368] syzkaller0: entered allmulticast mode
[  153.873106][ T8379] netlink: 'syz.2.1008': attribute type 1 has an invalid length.
[  153.878518][ T8379] netlink: 'syz.2.1008': attribute type 2 has an invalid length.
[  154.032965][ T8385] netlink: 'syz.2.1011': attribute type 10 has an invalid length.
[  154.043040][ T8385] netlink: 'syz.2.1011': attribute type 19 has an invalid length.
[  154.058761][ T8385] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1011'.
[  154.474775][   T55] Bluetooth: hci3: command tx timeout
[  154.875754][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  154.879847][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  154.884123][ T5239] Bluetooth: hci2: hardware error 0x00
[  155.113589][ T8393] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1015'.
[  155.126437][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.159695][ T8330] 8021q: adding VLAN 0 to HW filter on device team0
[  155.170212][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.173089][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.189099][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.192074][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.249788][ T8330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.337438][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'.
[  155.387519][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.439368][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.442292][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.464909][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.475952][ T8414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.612232][ T8330] veth0_vlan: entered promiscuous mode
[  155.620262][ T8330] veth1_vlan: entered promiscuous mode
[  155.640203][ T8330] veth0_macvtap: entered promiscuous mode
[  155.655250][ T8330] veth1_macvtap: entered promiscuous mode
[  155.665183][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.677233][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.688960][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.706919][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.710117][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.712735][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.990787][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.997156][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.040642][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.043828][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.417352][ T8451] netlink: 'syz.0.1035': attribute type 3 has an invalid length.
[  156.556149][   T55] Bluetooth: hci3: command tx timeout
[  156.791392][ T8465] netlink: 'syz.0.1042': attribute type 10 has an invalid length.
[  156.810796][ T8465] 8021q: adding VLAN 0 to HW filter on device team0
[  156.817334][ T8465] bond0: (slave team0): Enslaving as an active interface with an up link
[  156.955365][ T5239] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  157.443392][ T5239] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8
[  158.635292][ T5239] Bluetooth: hci3: command tx timeout
[  158.821030][ T8512] option changes via remount are deprecated (pid=8511 comm=syz.0.1062)
[  159.001311][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'.
[  159.008039][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'.
[  159.460946][ T8548] netlink: 'syz.4.1079': attribute type 3 has an invalid length.
[  159.467861][ T8548] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1079'.
[  159.523653][ T8548] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1079'.
[  160.714121][ T5239] Bluetooth: hci3: command tx timeout
[  161.326515][ T8577] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  162.713907][ T8600] netlink: 'syz.4.1098': attribute type 64 has an invalid length.
[  163.230477][ T8612] netlink: 'syz.2.1106': attribute type 1 has an invalid length.
[  163.524067][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  163.592971][ T8639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1117'.
[  163.741595][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'.
[  163.762599][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'.
[  163.999449][ T8656] netlink: 'syz.0.1124': attribute type 21 has an invalid length.
[  164.002658][ T8656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1124'.
[  164.147029][ T8656] siw: device registration error -23
[  165.125591][ T8695] netlink: 'syz.0.1144': attribute type 9 has an invalid length.
[  165.129096][ T8695] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.1144'.
[  165.140269][ T8697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.143530][ T8697] IPv6: NLM_F_CREATE should be set when creating new route
[  165.146624][ T8697] IPv6: NLM_F_CREATE should be set when creating new route
[  165.149582][ T8697] IPv6: NLM_F_CREATE should be set when creating new route
[  166.699874][ T5239] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  167.263728][ T8781] netlink: 'syz.2.1183': attribute type 21 has an invalid length.
[  167.273466][ T8781] netlink: 'syz.2.1183': attribute type 1 has an invalid length.
[  167.277488][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1183'.
[  167.368952][ T8783] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1184'.
[  167.432204][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'.
[  167.438230][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'.
[  167.881445][ T8811] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  168.663714][ T8810] delete_channel: no stack
[  168.714216][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  168.989138][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'.
[  169.022766][ T8836] tmpfs: Bad value for 'gid'
[  169.024535][ T8836] tmpfs: Bad value for 'gid'
[  170.080150][ T8854] xt_policy: neither incoming nor outgoing policy selected
[  170.111403][ T8857] netlink: 'syz.4.1215': attribute type 13 has an invalid length.
[  170.243394][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.246974][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.270120][ T8867] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1220'.
[  170.561767][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.614247][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.786577][ T8873] netlink: 'syz.0.1223': attribute type 1 has an invalid length.
[  170.789777][ T8873] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1223'.
[  171.074551][ T5911] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.085437][ T5911] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.089059][ T5911] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.093417][ T5911] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.913555][ T8895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1231'.
[  172.729209][ T8918] dummy0: entered promiscuous mode
[  172.731177][ T8918] dummy0: entered allmulticast mode
[  172.812740][ T8919] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  174.435774][ T8969] netlink: 731 bytes leftover after parsing attributes in process `syz.4.1258'.
[  175.321687][ T8977] netlink: 495 bytes leftover after parsing attributes in process `syz.0.1263'.
[  175.362249][ T8979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1264'.
[  176.397504][ T8988] netlink: 'syz.4.1267': attribute type 2 has an invalid length.
[  176.799443][ T9017] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1280'.
[  177.092096][ T9023] netlink: 'syz.4.1284': attribute type 1 has an invalid length.
[  177.199545][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'.
[  177.896949][ T9070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1305'.
[  177.900164][ T9070] tc_dump_action: action bad kind
[  178.122061][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'.
[  178.127877][ T9081] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  178.132693][ T9081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.292682][ T9091] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1314'.
[  178.481476][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'.
[  178.526820][ T9106] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  178.598759][ T9111] netlink: 'syz.2.1323': attribute type 33 has an invalid length.
[  178.601694][ T9111] netlink: 'syz.2.1323': attribute type 3 has an invalid length.
[  178.605226][ T9111] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1323'.
[  178.798234][ T9073] delete_channel: no stack
[  178.904969][ T9131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.970633][ T9137] netlink: 'syz.2.1336': attribute type 3 has an invalid length.
[  178.973424][ T9137] netlink: 'syz.2.1336': attribute type 1 has an invalid length.
[  178.979815][ T9137] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.1336'.
[  178.987101][ T9136] netlink: 'syz.0.1335': attribute type 8 has an invalid length.
[  178.990483][ T9136] netlink: 'syz.0.1335': attribute type 6 has an invalid length.
[  179.059970][ T9147] netlink: 'syz.0.1340': attribute type 2 has an invalid length.
[  180.460758][ T9204] __nla_validate_parse: 4 callbacks suppressed
[  180.460769][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1365'.
[  180.856457][ T9233] netlink: 'syz.0.1380': attribute type 29 has an invalid length.
[  181.251433][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'.
[  181.461761][ T9263] validate_nla: 1 callbacks suppressed
[  181.461785][ T9263] netlink: 'syz.0.1393': attribute type 3 has an invalid length.
[  181.470232][ T9263] netlink: 'syz.0.1393': attribute type 1 has an invalid length.
[  181.479492][ T9263] netlink: 191264 bytes leftover after parsing attributes in process `syz.0.1393'.
[  181.942760][ T9271] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1396'.
[  182.322193][ T9288] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1404'.
[  182.994119][ T9302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'.
[  182.997753][ T9302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'.
[  183.126895][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1413'.
[  183.133111][ T9308] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1413'.
[  183.153751][ T9313] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1413'.
[  183.326261][ T9321] : entered promiscuous mode
[  183.370936][ T9326] netlink: 'syz.0.1422': attribute type 3 has an invalid length.
[  184.054618][ T9359] syzkaller0: entered promiscuous mode
[  184.056443][ T9359] syzkaller0: entered allmulticast mode
[  184.505871][ T9381] netlink: 'syz.4.1446': attribute type 10 has an invalid length.
[  185.997172][ T9381] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  186.000401][ T9381] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  186.004976][ T9381] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  186.043720][ T9391] __nla_validate_parse: 5 callbacks suppressed
[  186.043730][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'.
[  186.812697][ T9429] netlink: 'syz.0.1468': attribute type 7 has an invalid length.
[  186.890126][ T9427] netlink: 'syz.4.1467': attribute type 2 has an invalid length.
[  186.894398][ T9430] : entered promiscuous mode
[  186.896585][ T9430] : entered allmulticast mode
[  187.911022][ T9467] netlink: 'syz.4.1482': attribute type 10 has an invalid length.
[  187.936863][ T9467] veth0_vlan: left promiscuous mode
[  187.950326][ T9467] veth0_vlan: entered promiscuous mode
[  187.987902][ T9467] team0: Device veth0_vlan failed to register rx_handler
[  188.097486][ T9483] netlink: 'syz.0.1486': attribute type 3 has an invalid length.
[  188.167310][ T9493] openvswitch: netlink: Key type 50 is out of range max 32
[  188.198615][ T9498] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1492'.
[  188.281955][ T9503] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1494'.
[  188.707550][ T9544] netlink: 'syz.0.1511': attribute type 39 has an invalid length.
[  191.276500][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  191.805984][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  191.811785][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'.
[  192.251941][ T5239] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  192.352495][ T9622] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1542'.
[  192.776253][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.043226][ T9649] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1554'.
[  193.101056][ T9652] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1555'.
[  193.169844][ T9652] netlink: 'syz.2.1555': attribute type 10 has an invalid length.
[  193.233270][ T9660] netlink: 'syz.4.1557': attribute type 21 has an invalid length.
[  193.388334][ T9665] openvswitch: netlink: Invalid VLAN frame
[  193.581703][ T9673] syzkaller0: entered promiscuous mode
[  193.584818][ T9673] syzkaller0: entered allmulticast mode
[  193.693188][ T9675] netlink: 'syz.0.1563': attribute type 29 has an invalid length.
[  193.715509][ T9675] netlink: 'syz.0.1563': attribute type 10 has an invalid length.
[  193.836220][ T9675] team0: Device bond0 is already an upper device of the team interface
[  193.913952][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'.
[  194.143216][ T9703] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1574'.
[  194.249593][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.251875][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.254453][ T9711] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1576'.
[  194.258048][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1576'.
[  194.353790][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1581'.
[  195.622237][ T9753] xt_l2tp: missing protocol rule (udp|l2tpip)
[  197.407212][ T9794] __nla_validate_parse: 1 callbacks suppressed
[  197.407266][ T9794] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1616'.
[  197.437078][ T9793] delete_channel: no stack
[  197.644419][ T9804] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  198.387154][ T9814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.312447][ T9837] netlink: 'syz.2.1635': attribute type 5 has an invalid length.
[  199.333761][ T9837] netlink: 'syz.2.1635': attribute type 7 has an invalid length.
[  199.349150][ T9837] : entered promiscuous mode
[  199.521277][ T9847] netlink: 'syz.2.1639': attribute type 29 has an invalid length.
[  199.525378][ T9847] netlink: 'syz.2.1639': attribute type 29 has an invalid length.
[  199.534152][ T9846] netlink: 'syz.4.1640': attribute type 21 has an invalid length.
[  199.536923][ T9846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1640'.
[  199.594622][ T9849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1641'.
[  199.612780][ T9849] bridge_slave_0 (unregistering): left promiscuous mode
[  199.618420][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.005815][ T9872] netlink: 'syz.0.1651': attribute type 1 has an invalid length.
[  200.009018][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'.
[  200.012480][ T9872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1651'.
[  200.433760][ T9894] netlink: 'syz.4.1661': attribute type 25 has an invalid length.
[  200.443639][ T9894] netlink: 'syz.4.1661': attribute type 16 has an invalid length.
[  200.447303][ T9894] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1661'.
[  200.496271][ T9898] netlink: 'syz.4.1663': attribute type 1 has an invalid length.
[  200.499652][ T9898] netlink: 376 bytes leftover after parsing attributes in process `syz.4.1663'.
[  201.506672][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1681'.
[  202.010974][ T9970] netlink: 'syz.0.1695': attribute type 29 has an invalid length.
[  202.090725][ T9972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.112941][ T9972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.131535][ T9972] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  202.302101][ T9983] sit0: entered promiscuous mode
[  202.740430][ T9998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1707'.
[  202.743393][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1707'.
[  202.749916][ T9998] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1707'.
[  202.797158][T10002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1709'.
[  203.188474][T10028] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1721'.
[  203.249220][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'.
[  203.586498][T10064] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1738'.
[  203.797324][T10081] sock: sock_timestamping_bind_phc: sock not bind to device
[  204.534819][T10099] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1753'.
[  204.763868][T10107] IPv6: NLM_F_REPLACE set, but no existing node found!
[  204.957498][T10113] validate_nla: 7 callbacks suppressed
[  204.957586][T10113] netlink: 'syz.4.1760': attribute type 2 has an invalid length.
[  204.963653][T10113] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1760'.
[  205.499873][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1771'.
[  208.750319][T10217] syzkaller0: entered promiscuous mode
[  208.752380][T10217] syzkaller0: entered allmulticast mode
[  209.031441][T10228] __nla_validate_parse: 2 callbacks suppressed
[  209.031464][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'.
[  209.667826][T10232] netlink: 'syz.4.1812': attribute type 21 has an invalid length.
[  209.702549][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'.
[  209.707974][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1813'.
[  211.002571][T10249] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  212.008808][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1829'.
[  212.084706][T10273] netlink: 'syz.2.1831': attribute type 29 has an invalid length.
[  212.091521][T10273] netlink: 'syz.2.1831': attribute type 29 has an invalid length.
[  212.100845][T10273] netlink: 'syz.2.1831': attribute type 29 has an invalid length.
[  212.550175][T10306] netlink: 'syz.0.1847': attribute type 29 has an invalid length.
[  212.555414][T10306] netlink: 'syz.0.1847': attribute type 29 has an invalid length.
[  212.559450][T10306] netlink: 'syz.0.1847': attribute type 29 has an invalid length.
[  212.803092][ T5239] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9
[  213.377669][T10340] sctp: [Deprecated]: syz.2.1862 (pid 10340) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.377669][T10340] Use struct sctp_sack_info instead
[  213.511663][T10351] netlink: 'syz.0.1867': attribute type 9 has an invalid length.
[  213.514942][T10351] netlink: 195776 bytes leftover after parsing attributes in process `syz.0.1867'.
[  214.057385][   T34] audit: type=1107 audit(1758100309.307:2): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  214.179574][T10379] C: renamed from team_slave_0
[  214.183720][T10379] netlink: 'syz.0.1879': attribute type 3 has an invalid length.
[  214.189072][T10379] netlink: 'syz.0.1879': attribute type 1 has an invalid length.
[  214.192067][T10379] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1879'.
[  214.263028][T10383] 0: renamed from bond_slave_1 (while UP)
[  214.805680][T10401] netlink: 'syz.2.1887': attribute type 11 has an invalid length.
[  214.808822][T10401] netlink: 'syz.2.1887': attribute type 11 has an invalid length.
[  215.133682][T10421] netlink: 'syz.2.1894': attribute type 21 has an invalid length.
[  215.136849][T10421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1894'.
[  215.171366][T10412] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1888'.
[  215.961147][T10430] tQ6\bY4: renamed from lo (while UP)
[  216.220495][T10451] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1909'.
[  216.345214][T10453] tap0: tun_chr_ioctl cmd 21731
[  216.362789][T10453] tap0: tun_chr_ioctl cmd 2147767521
[  217.030805][T10470] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1917'.
[  217.097833][T10472] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1918'.
[  217.112332][T10472] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1918'.
[  217.279759][T10490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.357676][T10496] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1930'.
[  218.067025][T10554] validate_nla: 4 callbacks suppressed
[  218.067042][T10554] netlink: 'syz.2.1955': attribute type 29 has an invalid length.
[  218.108658][T10560] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  218.189574][T10563] netlink: 'syz.0.1958': attribute type 3 has an invalid length.
[  218.194659][T10554] netlink: 'syz.2.1955': attribute type 29 has an invalid length.
[  218.220353][T10554] netlink: 'syz.2.1955': attribute type 29 has an invalid length.
[  218.227532][T10554] netlink: 'syz.2.1955': attribute type 29 has an invalid length.
[  218.477124][T10577] netlink: 'syz.0.1961': attribute type 21 has an invalid length.
[  218.480758][T10577] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1961'.
[  218.975867][ T5239] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[  219.159600][T10593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1970'.
[  219.334517][T10605] C: renamed from team_slave_0 (while UP)
[  219.363190][T10605] netlink: 'syz.2.1976': attribute type 3 has an invalid length.
[  219.374187][T10605] netlink: 'syz.2.1976': attribute type 1 has an invalid length.
[  219.376907][T10605] __nla_validate_parse: 2 callbacks suppressed
[  219.376920][T10605] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1976'.
[  219.399857][T10605] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  219.447066][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  219.449941][T10615] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  219.452251][T10615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.727464][T10639] netlink: 'syz.2.1992': attribute type 1 has an invalid length.
[  219.879740][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'.
[  220.838812][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'.
[  220.859700][T10670] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2007'.
[  221.272635][T10698] netlink: 'syz.4.2020': attribute type 8 has an invalid length.
[  224.081953][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2032'.
[  224.091426][T10723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2032'.
[  224.095856][T10723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2032'.
[  224.248834][T10731] netlink: 'syz.2.2035': attribute type 16 has an invalid length.
[  224.252114][T10731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2035'.
[  224.399279][T10741] netlink: 'syz.0.2040': attribute type 3 has an invalid length.
[  224.402183][T10741] netlink: 'syz.0.2040': attribute type 16 has an invalid length.
[  224.404944][T10741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2040'.
[  224.541423][T10754] siw: device registration error -23
[  224.852555][T10760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2049'.
[  225.214703][T10770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.942644][T10780] _Z`Ԁ@S: entered promiscuous mode
[  226.038126][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'.
[  226.134586][T10800] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  226.202781][T10806] option changes via remount are deprecated (pid=10805 comm=syz.4.2068)
[  226.399959][T10825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2076'.
[  226.404720][T10818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2076'.
[  226.408622][T10818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2076'.
[  226.606356][T10841] netlink: 'syz.0.2086': attribute type 21 has an invalid length.
[  226.609551][T10841] netlink: 'syz.0.2086': attribute type 1 has an invalid length.
[  226.612621][T10841] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2086'.
[  228.048666][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  228.051949][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  228.055197][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  228.058565][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  228.061066][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  228.168651][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  228.173076][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  228.177572][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  228.181644][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  228.188079][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  228.255557][T10889] chnl_net:caif_netlink_parms(): no params data found
[  228.346682][T10904] netlink: 'syz.4.2109': attribute type 29 has an invalid length.
[  228.376942][T10904] netlink: 'syz.4.2109': attribute type 29 has an invalid length.
[  228.426549][T10889] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.429038][T10889] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.431410][T10889] bridge_slave_0: entered allmulticast mode
[  228.439597][T10889] bridge_slave_0: entered promiscuous mode
[  228.460954][T10889] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.463778][T10889] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.466980][T10889] bridge_slave_1: entered allmulticast mode
[  228.470014][T10889] bridge_slave_1: entered promiscuous mode
[  228.509156][T10889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.512564][T10894] chnl_net:caif_netlink_parms(): no params data found
[  228.520965][T10889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.586184][T10889] team0: Port device team_slave_0 added
[  228.597778][T10889] team0: Port device team_slave_1 added
[  228.659550][T10921] netlink: 'syz.4.2114': attribute type 21 has an invalid length.
[  228.682905][T10889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.686741][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.697280][T10889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.703677][T10889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.707280][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.717766][T10889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.732646][T10894] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.738390][T10894] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.741405][T10894] bridge_slave_0: entered allmulticast mode
[  228.748278][T10894] bridge_slave_0: entered promiscuous mode
[  228.752749][T10894] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.758550][T10894] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.761566][T10894] bridge_slave_1: entered allmulticast mode
[  228.765721][T10894] bridge_slave_1: entered promiscuous mode
[  228.857841][T10894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.869747][T10889] hsr_slave_0: entered promiscuous mode
[  228.872585][T10889] hsr_slave_1: entered promiscuous mode
[  228.885134][T10889] debugfs: 'hsr0' already exists in 'hsr'
[  228.887522][T10889] Cannot create hsr debugfs directory
[  228.909540][T10894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.946417][T10894] team0: Port device team_slave_0 added
[  228.969688][T10894] team0: Port device team_slave_1 added
[  229.013252][T10894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.020389][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.033110][T10894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.042194][T10894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.044492][T10894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.052643][T10894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.127772][T10894] hsr_slave_0: entered promiscuous mode
[  229.130093][T10894] hsr_slave_1: entered promiscuous mode
[  229.132584][T10894] debugfs: 'hsr0' already exists in 'hsr'
[  229.135034][T10894] Cannot create hsr debugfs directory
[  229.145375][T10937] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  229.259809][T10889] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  229.268720][T10889] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  229.290175][T10889] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  229.320405][T10889] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  229.360848][T10894] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  229.369339][T10894] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  229.377704][T10894] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  229.398448][T10894] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  229.463270][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.474990][T10889] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.492215][T10889] 8021q: adding VLAN 0 to HW filter on device team0
[  229.517706][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.519959][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.540743][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.543216][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.546659][T10955] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2125'.
[  229.563460][T10894] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.586978][T10889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.613342][T10894] 8021q: adding VLAN 0 to HW filter on device team0
[  229.636596][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.639570][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.677052][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.679858][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.723106][T10889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.743001][T10963] netlink: 'syz.4.2127': attribute type 10 has an invalid length.
[  229.939617][T10889] veth0_vlan: entered promiscuous mode
[  229.957006][T10889] veth1_vlan: entered promiscuous mode
[  229.996566][T10889] veth0_macvtap: entered promiscuous mode
[  230.003705][T10894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.015409][T10889] veth1_macvtap: entered promiscuous mode
[  230.050600][T10889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.067444][T10889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.075812][ T5239] Bluetooth: hci0: command tx timeout
[  230.085631][ T5911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.089726][ T5911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.093291][ T5911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.119463][ T5911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.183666][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2132'.
[  230.215988][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.225188][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.245773][ T5239] Bluetooth: hci1: command tx timeout
[  230.277421][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.284903][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.293654][T10894] veth0_vlan: entered promiscuous mode
[  230.310776][T10894] veth1_vlan: entered promiscuous mode
[  230.347483][T10894] veth0_macvtap: entered promiscuous mode
[  230.353620][T10894] veth1_macvtap: entered promiscuous mode
[  230.372838][T10894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.387322][T10894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.403771][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.413543][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.420599][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.427274][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.622009][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.626792][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.649483][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.652666][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.636067][T11026] netlink: 'syz.5.2147': attribute type 2 has an invalid length.
[  231.766098][T11033] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2151'.
[  231.769691][T11033] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2151'.
[  231.773740][T11033] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2151'.
[  232.160393][ T5239] Bluetooth: hci0: command tx timeout
[  232.314773][ T5239] Bluetooth: hci1: command tx timeout
[  232.343590][T11062] netlink: 'syz.5.2159': attribute type 12 has an invalid length.
[  232.351371][T11062] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2159'.
[  232.552006][T11073] bridge0: entered allmulticast mode
[  232.749023][T11080] netlink: 'syz.6.2171': attribute type 29 has an invalid length.
[  232.752118][T11080] netlink: 'syz.6.2171': attribute type 10 has an invalid length.
[  232.761468][T11080] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.765258][T11080] team0: Port device bond0 added
[  233.002780][T11094] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.2176'.
[  233.037148][T11098] netlink: 'syz.5.2178': attribute type 21 has an invalid length.
[  233.037165][T11098] IPv6: NLM_F_CREATE should be specified when creating new route
[  233.037210][T11098] IPv6: Can't replace route, no match found
[  233.257834][ T5239] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6
[  233.262237][T11106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2181'.
[  233.272053][T11106] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2181'.
[  233.278819][T11106] netlink: 'syz.5.2181': attribute type 4 has an invalid length.
[  234.267108][ T5239] Bluetooth: hci0: command tx timeout
[  234.375564][T11127] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2189'.
[  234.472286][ T5239] Bluetooth: hci1: command tx timeout
[  234.882469][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2192'.
[  234.935684][T11140] netlink: 'syz.6.2194': attribute type 27 has an invalid length.
[  234.938293][T11140] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2194'.
[  235.329350][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2198'.
[  235.560439][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2203'.
[  235.566142][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2203'.
[  235.584696][ T5239] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  235.672047][T11170] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2208'.
[  235.678895][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2208'.
[  235.681711][T11170] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2208'.
[  235.697605][T11168] syzkaller0: entered promiscuous mode
[  235.706428][T11168] syzkaller0: entered allmulticast mode
[  236.314393][ T5239] Bluetooth: hci0: command tx timeout
[  236.555850][ T5239] Bluetooth: hci1: command tx timeout
[  237.758662][T11196] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2220'.
[  237.940533][T11205] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  238.125713][T11218] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2229'.
[  238.349062][T11227] syzkaller0: entered promiscuous mode
[  238.351027][T11227] syzkaller0: entered allmulticast mode
[  238.354404][T11233] netlink: 'syz.4.2236': attribute type 29 has an invalid length.
[  238.360635][T11233] netlink: 'syz.4.2236': attribute type 29 has an invalid length.
[  239.673297][T11240] netlink: 'syz.4.2238': attribute type 11 has an invalid length.
[  240.092019][T11265] __nla_validate_parse: 1 callbacks suppressed
[  240.092035][T11265] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2249'.
[  240.361753][T11275] netlink: 'syz.5.2254': attribute type 46 has an invalid length.
[  244.140051][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3344521919 wd_nsec: 3344521579
[  255.680564][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.683029][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.193002][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.198300][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.200954][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.205316][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.211637][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.268100][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.274263][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.277967][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.281487][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.285343][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.210940][   T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.216612][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.220062][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.226010][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.229857][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.315103][ T5239] Bluetooth: hci2: command tx timeout
[  258.318413][   T55] Bluetooth: hci4: command tx timeout
[  259.274240][   T55] Bluetooth: hci5: command tx timeout
[  260.402044][   T55] Bluetooth: hci4: command tx timeout
[  260.405347][   T55] Bluetooth: hci2: command tx timeout
[  261.354370][ T5239] Bluetooth: hci5: command tx timeout
[  262.474487][   T55] Bluetooth: hci4: command tx timeout
[  262.478660][ T5239] Bluetooth: hci2: command tx timeout
[  263.434448][ T5239] Bluetooth: hci5: command tx timeout
[  264.554341][   T55] Bluetooth: hci4: command tx timeout
[  264.556585][ T5239] Bluetooth: hci2: command tx timeout
[  265.519864][ T5239] Bluetooth: hci5: command tx timeout
[  276.464150][ T5862] unregister_netdevice: waiting for veth0_vlan to become free. Usage count = 2
[  276.467853][ T5862] ref_tracker: netdev@ffff8881111b0610 has 1/1 users at
[  276.467853][ T5862]      ib_device_set_netdev+0x31f/0x6d0
[  276.467853][ T5862]      rxe_register_device+0x1c7/0x310
[  276.467853][ T5862]      rxe_net_add+0x81/0x110
[  276.467853][ T5862]      rxe_newlink+0xdd/0x190
[  276.467853][ T5862]      nldev_newlink+0x4a5/0x5a0
[  276.467853][ T5862]      rdma_nl_rcv+0x6ae/0x980
[  276.467853][ T5862]      netlink_unicast+0x82f/0x9e0
[  276.467853][ T5862]      netlink_sendmsg+0x805/0xb30
[  276.467853][ T5862]      __sock_sendmsg+0x21c/0x270
[  276.467853][ T5862]      ____sys_sendmsg+0x505/0x830
[  276.467853][ T5862]      ___sys_sendmsg+0x21f/0x2a0
[  276.467853][ T5862]      __x64_sys_sendmsg+0x19b/0x260
[  276.467853][ T5862]      do_syscall_64+0xfa/0x3b0
[  276.467853][ T5862]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.467853][ T5862] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  281.914165][   T35] INFO: task kworker/u10:0:27 blocked for more than 143 seconds.
[  281.917304][   T35]       Not tainted syzkaller #0
[  281.919226][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  281.922697][   T35] task:kworker/u10:0   state:D stack:24744 pid:27    tgid:27    ppid:2      task_flags:0x4208160 flags:0x00004000
[  281.930334][   T35] Workqueue: ib-unreg-wq ib_unregister_work
[  281.932711][   T35] Call Trace:
[  281.935316][   T35]  <TASK>
[  281.936587][   T35]  __schedule+0x1798/0x4cc0
[  281.938465][   T35]  ? validate_chain+0x897/0x2140
[  281.940494][   T35]  ? __pfx___schedule+0x10/0x10
[  281.942492][   T35]  ? schedule+0x91/0x360
[  281.947105][   T35]  ? schedule+0x91/0x360
[  281.948868][   T35]  schedule+0x165/0x360
[  281.950586][   T35]  schedule_timeout+0x9a/0x270
[  281.952548][   T35]  ? __pfx_schedule_timeout+0x10/0x10
[  281.955705][   T35]  ? wait_for_completion+0x2b7/0x5d0
[  281.957798][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.959866][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.961970][   T35]  ? wait_for_completion+0x267/0x5d0
[  281.964600][   T35]  wait_for_completion+0x2bf/0x5d0
[  281.966619][   T35]  ? __pfx_wait_for_completion+0x10/0x10
[  281.968813][   T35]  ? remove_client_context+0x19c/0x1e0
[  281.970985][   T35]  disable_device+0x1c6/0x320
[  281.972909][   T35]  ? __pfx_disable_device+0x10/0x10
[  281.976206][   T35]  __ib_unregister_device+0x2cb/0x3f0
[  281.978386][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.980459][   T35]  ib_unregister_work+0x19/0x30
[  281.982420][   T35]  ? process_scheduled_works+0x9ef/0x17b0
[  281.985120][   T35]  process_scheduled_works+0xae1/0x17b0
[  281.987325][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  281.989693][   T35]  worker_thread+0x8a0/0xda0
[  281.991600][   T35]  kthread+0x711/0x8a0
[  281.993242][   T35]  ? __pfx_worker_thread+0x10/0x10
[  281.995639][   T35]  ? __pfx_kthread+0x10/0x10
[  281.997413][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  281.999433][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.001457][   T35]  ? __pfx_kthread+0x10/0x10
[  282.003342][   T35]  ret_from_fork+0x439/0x7d0
[  282.006148][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  282.008222][   T35]  ? __switch_to_asm+0x39/0x70
[  282.010154][   T35]  ? __switch_to_asm+0x33/0x70
[  282.012172][   T35]  ? __pfx_kthread+0x10/0x10
[  282.014368][   T35]  ret_from_fork_asm+0x1a/0x30
[  282.016327][   T35]  </TASK>
[  282.017753][   T35] 
[  282.017753][   T35] Showing all locks held in the system:
[  282.020798][   T35] 3 locks held by kworker/u10:0/27:
[  282.022898][   T35]  #0: ffff88810537a948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  282.027942][   T35]  #1: ffffc9000060fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  282.033174][   T35]  #2: ffff888011e98700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  282.038241][   T35] 1 lock held by khungtaskd/35:
[  282.040274][   T35]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  282.044902][   T35] 2 locks held by getty/5677:
[  282.046788][   T35]  #0: ffff8880293d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  282.050698][   T35]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  282.054954][   T35] 3 locks held by kworker/u8:2/5862:
[  282.057172][   T35]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  282.061531][   T35]  #1: ffffc900033bfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  282.065885][   T35]  #2: ffffffff8f52d350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  282.069610][   T35] 
[  282.070577][   T35] =============================================
[  282.070577][   T35] 
[  282.073887][   T35] NMI backtrace for cpu 1
[  282.073920][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  282.073936][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.073943][   T35] Call Trace:
[  282.073970][   T35]  <TASK>
[  282.073978][   T35]  dump_stack_lvl+0x189/0x250
[  282.074001][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.074017][   T35]  ? __pfx__printk+0x10/0x10
[  282.074051][   T35]  nmi_cpu_backtrace+0x39e/0x3d0
[  282.074073][   T35]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  282.074091][   T35]  ? __pfx__printk+0x10/0x10
[  282.074110][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  282.074131][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  282.074161][   T35]  watchdog+0xf93/0xfe0
[  282.074181][   T35]  ? watchdog+0x1de/0xfe0
[  282.074201][   T35]  kthread+0x711/0x8a0
[  282.074218][   T35]  ? __pfx_watchdog+0x10/0x10
[  282.074235][   T35]  ? __pfx_kthread+0x10/0x10
[  282.074258][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.074270][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.074282][   T35]  ? __pfx_kthread+0x10/0x10
[  282.074298][   T35]  ret_from_fork+0x439/0x7d0
[  282.074313][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  282.074329][   T35]  ? __switch_to_asm+0x39/0x70
[  282.074345][   T35]  ? __switch_to_asm+0x33/0x70
[  282.074361][   T35]  ? __pfx_kthread+0x10/0x10
[  282.074381][   T35]  ret_from_fork_asm+0x1a/0x30
[  282.074410][   T35]  </TASK>
[  282.129562][   T35] Sending NMI from CPU 1 to CPUs 0:
[  282.131745][    C0] NMI backtrace for cpu 0
[  282.131759][    C0] CPU: 0 UID: 0 PID: 5287 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) 
[  282.131774][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.131782][    C0] RIP: 0033:0x7fc4bcfa74e7
[  282.131796][    C0] Code: ea 4c 89 d7 e8 e6 ec ff ff eb 07 89 d1 4c 89 d7 f3 a4 4c 01 d5 4d 01 cc 49 89 ef 4c 89 fd eb 05 45 31 e4 eb 2d 48 ff 44 24 20 <e9> 40 ed ff ff 48 85 ed 74 1e 48 83 7c 24 18 00 74 16 c6 45 00 00
[  282.131807][    C0] RSP: 002b:00007fff3baa38a0 EFLAGS: 00000206
[  282.131821][    C0] RAX: 00007fc4bd067520 RBX: 00000000fffffffc RCX: 0000000000000000
[  282.131830][    C0] RDX: 0000000000001ffa RSI: 00007fc4bd063093 RDI: 00005611e8db8596
[  282.131839][    C0] RBP: 00005611e8db8597 R08: 0000000000000000 R09: 0000000000000003
[  282.131847][    C0] R10: 00005611e8db8593 R11: 0000000000000003 R12: 0000000000000004
[  282.131856][    C0] R13: 00007fff3baa3a28 R14: 00007fc4bd09ec40 R15: 00005611e8db8596
[  282.131865][    C0] FS:  00007fc4bce72380 GS:  0000000000000000
[  282.132721][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  282.173220][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  282.176739][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.180651][   T35] Call Trace:
[  282.181996][   T35]  <TASK>
[  282.183147][   T35]  dump_stack_lvl+0x99/0x250
[  282.184940][   T35]  ? __asan_memcpy+0x40/0x70
[  282.186698][   T35]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.188678][   T35]  ? __pfx__printk+0x10/0x10
[  282.190465][   T35]  vpanic+0x281/0x750
[  282.192088][   T35]  ? __pfx_vpanic+0x10/0x10
[  282.193898][   T35]  ? tick_nohz_tick_stopped+0x86/0xb0
[  282.196032][   T35]  ? __irq_work_queue_local+0x1de/0x550
[  282.198271][   T35]  panic+0xb9/0xc0
[  282.199794][   T35]  ? __pfx_panic+0x10/0x10
[  282.201530][   T35]  ? irq_work_queue+0xbc/0x140
[  282.203432][   T35]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  282.205795][   T35]  watchdog+0xfd2/0xfe0
[  282.207352][   T35]  ? watchdog+0x1de/0xfe0
[  282.209797][   T35]  kthread+0x711/0x8a0
[  282.211407][   T35]  ? __pfx_watchdog+0x10/0x10
[  282.213254][   T35]  ? __pfx_kthread+0x10/0x10
[  282.215064][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.217092][   T35]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.219588][   T35]  ? __pfx_kthread+0x10/0x10
[  282.221366][   T35]  ret_from_fork+0x439/0x7d0
[  282.223181][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  282.225225][   T35]  ? __switch_to_asm+0x39/0x70
[  282.227147][   T35]  ? __switch_to_asm+0x33/0x70
[  282.229047][   T35]  ? __pfx_kthread+0x10/0x10
[  282.230918][   T35]  ret_from_fork_asm+0x1a/0x30
[  282.232865][   T35]  </TASK>
[  282.234838][   T35] Kernel Offset: disabled
[  282.236562][   T35] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:12:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033beeb0
R8 =ffff888020ae0237 R9 =1ffff1100415c046 R10=dffffc0000000000 R11=ffffffff854f9f00
R12=dffffc0000000000 R13=ffffffff99b028f5 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff6f83ad28 CR3=0000000026e50000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000000000000000 00007fbaba412e53
XMM06=0000000000000000 00007fbaba412e4d XMM07=0000000000000000 00007fbaba412e61
XMM08=0000000000000000 00007fbaba412ee7 XMM09=0000000000000000 00007fbaba412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000c RBX=1ffff920005a1ed4 RCX=4cd6ba931246d300 RDX=0000000000000000
RSI=ffffffff8dba9832 RDI=ffff888107fc9cc0 RBP=ffffc90002d0f730 RSP=ffffc90002d0f6a0
R8 =0000000000000000 R9 =ffffffff81ceb566 R10=ffffc90002d0f658 R11=ffffffff81ac4d00
R12=dffffc0000000000 R13=1ffff920005a1eec R14=dffffc0000000000 R15=1ffff11020ff944a
RIP=ffffffff81ac4cb0 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555798ef500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3fa67efc18 CR3=0000000011b7c000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=0000000000000000 00007f8630e12e53
XMM06=0000000000000000 00007f8630e12e4d XMM07=0000000000000000 00007f8630e12e61
XMM08=0000000000000000 00007f8630e12ee7 XMM09=0000000000000000 00007f8630e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
