last executing test programs:

6m40.483969144s ago: executing program 32 (id=278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x5, 0x7, 0xf, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40044)

5m50.260487766s ago: executing program 33 (id=1053):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071109c00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

5m38.680774323s ago: executing program 34 (id=1405):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2, 0xc, 0x0, 0x7, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x4000010)

5m24.603626784s ago: executing program 35 (id=1393):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)

3m53.153272831s ago: executing program 36 (id=3050):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m43.897360829s ago: executing program 37 (id=3212):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94)

3m36.03830232s ago: executing program 38 (id=3296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2000000039000100faff070004000000010000000900ec0007412b2f00000018"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

3m28.206506951s ago: executing program 39 (id=3217):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000059)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000480), 0x4)

2m37.003021673s ago: executing program 0 (id=4210):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

2m36.942386781s ago: executing program 0 (id=4212):
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7d, 0xd, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1000, 0x1941}, 0x0, 0x0, 0x7, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

2m36.841114948s ago: executing program 0 (id=4216):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x1e, 0x5, 0x0)
write$cgroup_devices(r0, 0x0, 0xfffffeff)

2m36.795295429s ago: executing program 0 (id=4218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

2m36.636294416s ago: executing program 0 (id=4222):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m35.888732543s ago: executing program 0 (id=4226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}}, 0x0)

2m20.921517869s ago: executing program 40 (id=4226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}}, 0x0)

1m51.637693214s ago: executing program 9 (id=4835):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m51.613632369s ago: executing program 9 (id=4838):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

1m51.522734371s ago: executing program 9 (id=4840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

1m51.522590261s ago: executing program 9 (id=4841):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x909846, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x897848, 0x0)

1m51.379273396s ago: executing program 9 (id=4843):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x15, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

1m51.055154777s ago: executing program 9 (id=4845):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x4, 0x4}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c3842, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x40, 0x6, 0x8}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f00000000c0), 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10005}, 0x4c8c4)

1m50.773344345s ago: executing program 41 (id=4845):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x4, 0x4}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c3842, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x40, 0x6, 0x8}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f00000000c0), 0x0}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10005}, 0x4c8c4)

1m40.695908859s ago: executing program 8 (id=5014):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008080)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m40.61522646s ago: executing program 8 (id=5017):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x6, 0x3, 0x3, 0x10000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, @void, @value, @value=r0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x16482, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(r1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x0)

1m40.510413045s ago: executing program 8 (id=5020):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818a00000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)

1m40.405212338s ago: executing program 8 (id=5021):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8008b70d, &(0x7f00000005c0))

1m40.403458248s ago: executing program 8 (id=5022):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]})

1m40.301187678s ago: executing program 8 (id=5023):
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740))

1m25.297931828s ago: executing program 42 (id=5023):
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740))

1m18.582681238s ago: executing program 2 (id=5392):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1m18.485109136s ago: executing program 2 (id=5393):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m16.090540214s ago: executing program 2 (id=5410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x40000003, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0x200, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x3, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x7f, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x5, 0x0, 0x9, 0xcbc3, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0xffffffff, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)

1m16.090033784s ago: executing program 2 (id=5412):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x4b9, 0x1ef7}, 0x11efa, 0x4, 0x8, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1e}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x20000000)

1m15.174513337s ago: executing program 2 (id=5414):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48)

1m15.171323637s ago: executing program 3 (id=5416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="01ac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m15.16995694s ago: executing program 2 (id=5417):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

1m15.095486169s ago: executing program 1 (id=5418):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x72}, 0x10)

1m15.034323559s ago: executing program 1 (id=5419):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, @perf_config_ext={0x74, 0x40000001ef7}, 0x11efa, 0x4, 0x1, 0x3, 0x5, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008055}, 0x40080)

1m14.965390063s ago: executing program 3 (id=5420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x52, 0x2, {{0xa0d8, 0xa, 0x0, 0x0, 0xd99}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)

1m14.965279402s ago: executing program 1 (id=5421):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000900000000000000000000090a010400000000000000000500000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003407a9aa37c08000440000000801400020010"], 0x74}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

1m14.965114458s ago: executing program 3 (id=5422):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94)

1m14.882895792s ago: executing program 1 (id=5423):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0xfffe)

1m14.882544188s ago: executing program 3 (id=5424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m14.880665145s ago: executing program 3 (id=5425):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x2, 0x9, 0x3, 0xffffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c00)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1m14.880314348s ago: executing program 1 (id=5426):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0))

1m14.773398831s ago: executing program 3 (id=5427):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x66}, 0xffffffffffffffff, 0x0, r1, 0x0)

1m14.773206491s ago: executing program 1 (id=5428):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, @perf_config_ext={0x74, 0x1ef7}, 0x11efa, 0x4, 0x1, 0x3, 0x5, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))

59.625388553s ago: executing program 43 (id=5427):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x66}, 0xffffffffffffffff, 0x0, r1, 0x0)

57.959101552s ago: executing program 44 (id=5417):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

57.959045379s ago: executing program 45 (id=5428):
r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, @perf_config_ext={0x74, 0x1ef7}, 0x11efa, 0x4, 0x1, 0x3, 0x5, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))

45.774987497s ago: executing program 6 (id=5503):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f0000000040), 0x102, 0x4855}, 0x24000052)

45.714135197s ago: executing program 6 (id=5506):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80)

45.66457622s ago: executing program 6 (id=5509):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005}, 0x800)

45.611888571s ago: executing program 6 (id=5510):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
close(0x4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

45.391563055s ago: executing program 6 (id=5514):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000100), 0x100f0, 0x0)

45.100978334s ago: executing program 6 (id=5522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x35, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080)

30.084594642s ago: executing program 46 (id=5522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, 0x35, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080)

17.415166745s ago: executing program 5 (id=5872):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xa)

17.331144241s ago: executing program 5 (id=5874):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0xd0)

17.254488194s ago: executing program 5 (id=5877):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.894742693s ago: executing program 7 (id=5883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1000d01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000840)={&(0x7f00000007c0), 0xc, &(0x7f0000000800)={&(0x7f0000000b80)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x7}, 0x29, 0x81, 0x1, 0x8, 0x11, 'syz1\x00', "58c4a360332cf6f2a76d66339edab1ea9dc027209c980498fccbcb78f14d2117", "af9f0e5560b95e9ce0576e86d4ba95b019795cf1984238b184ec1844148030a3", [{0x0, 0x9, {0x3, 0x1ff}}, {0xd, 0x9, {0x1}}, {0x3, 0x101, {0x0, 0x9}}, {0x80, 0xfff, {0x1, 0x7}}, {0x7f, 0x3, {0x1}}, {0x40, 0xc27, {0x1, 0x7}}, {0xfff9, 0x70, {0x2, 0x7}}, {0x0, 0x7, {0x2, 0xa}}, {0x105, 0x1, {0x0, 0x4}}, {0x8, 0x8, {0x0, 0xfff}}, {0x8, 0x7, {0x3, 0xb}}, {0xfe00, 0x8}, {0x9, 0x5, {0x2, 0x6}}, {0x0, 0x1, {0x2, 0x8001}}, {0x9, 0xfffa, {0x1, 0x9}}, {0xffff, 0x1, {0x2, 0x126f}}, {0x8000, 0xe49, {0x1, 0x1ff}}, {0xb88, 0x1000, {0x0, 0x100}}, {0x9, 0x7e17, {0x2, 0x9}}, {0x3, 0x7, {0x2, 0x1}}, {0x401, 0x1c8, {0x0, 0xfffffffe}}, {0x0, 0x5, {0x0, 0x6}}, {0xfffd, 0x9, {0x1, 0x6f446646}}, {0x3, 0x7ff, {0x1}}, {0x7ff, 0x100, {0x3}}, {0xc, 0x0, {0x1, 0x9}}, {0x1, 0xe, {0x3, 0x9747}}, {0x86, 0x9, {0x3, 0x7}}, {0x4, 0x8, {0xd2d55248ed8e32a9, 0xc}}, {0x101, 0x7, {0x1, 0x80000001}}, {0x187d, 0x8, {0x2, 0x84}}, {0x9, 0x9}, {0x8, 0x8, {0x2, 0x83d}}, {0x2, 0x81, {0x1, 0xffffffff}}, {0x400, 0x2, {0x0, 0x38da2580}}, {0x8, 0x2, {0x3, 0xfffffff7}}, {0x89a6, 0x3, {0x0, 0x8}}, {0xd, 0x7, {0x1, 0x5}}, {0x0, 0x7, {0x0, 0x7}}, {0x0, 0x3, {0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x100}, 0x5, 0x2, 0x4, 0x4, 0x1d, 'syz0\x00', "2e189fc334f6e5e879d63f65f9c92d90f4e1eb25af31a88bdb157067585cef7b", "4e146fbc75662bfa3dac1dccc5dd3ac5f1689c8f5b2710753332e0b44e9e7987", [{0x7, 0x6, {0x0, 0x8}}, {0x5, 0xfb, {0x2, 0x3}}, {0x8, 0x2, {0x2, 0x1}}, {0x8000, 0x7a08, {0x3, 0x32}}, {0x5, 0x4, {0x1, 0x6}}, {0x8, 0xb3d, {0x1, 0x4}}, {0x8, 0x473, {0x1, 0x7}}, {0x2, 0x8, {0x1, 0x3a}}, {0x8, 0xb, {0x3, 0x7}}, {0x29, 0x5, {0x3, 0x6}}, {0x290, 0x5, {0x0, 0x1f10}}, {0x7, 0xfff8, {0x0, 0x6}}, {0x0, 0x2, {0x1, 0x200}}, {0x6, 0x0, {0x0, 0x4}}, {0x3, 0xf1f, {0x3, 0x54}}, {0x1000, 0x0, {0x3, 0x3}}, {0xa6e, 0x6, {0x3, 0x8}}, {0x40, 0x200, {0x1, 0x8}}, {0x3, 0x1ff, {0x0, 0x3}}, {0x7, 0x0, {0x0, 0xc36}}, {0x6db8, 0x6}, {0x1ac7, 0x185, {0x1, 0xf58}}, {0xaa, 0x4, {0x0, 0x7c7}}, {0x0, 0x9, {0x0, 0xa}}, {0x8000, 0x3ff, {0x0, 0xc}}, {0x0, 0x6, {0x3, 0x258}}, {0x5, 0x10, {0x3}}, {0xfe5, 0x800, {0x1, 0x4}}, {0x7, 0x8, {0x2, 0x18}}, {0x5, 0x3, {0x0, 0x9}}, {0x7c7, 0x3, {0x2, 0x2}}, {0x4, 0x7f, {0x2, 0x8}}, {0x2, 0x7ff, {0x2, 0x40}}, {0xffff, 0x1, {0x3, 0x5db}}, {0x8, 0x8, {0x3, 0x4}}, {0x5, 0xa, {0x3b5b9c92069d4edd, 0x37cb}}, {0x9e3e, 0x2, {0x2, 0x5b}}, {0xd57, 0x4, {0x1}}, {0x6, 0x7, {0x0, 0x1}}, {0x9, 0x2, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0xffff8000}, 0x0, 0x9, 0x9, 0x4b, 0x2, 'syz1\x00', "ca42237f3571f54b026b6eb5f7e133d6bba4efc16440e10231ccb94059c5e431", "38f01ff6070ccf9a78e5cf4eee5e64e31be35bb71dafbb2529ecfd1996239b79", [{0x1, 0x511a, {0x0, 0x4}}, {0x9, 0x2e, {0x0, 0x7}}, {0x2, 0x1, {0x0, 0xe}}, {0x0, 0x2, {0x2, 0x4}}, {0x10, 0xe, {0x2, 0x401}}, {0x7e, 0xd0bf, {0x3, 0xbb}}, {0x401, 0x7, {0x1, 0x8}}, {0x6, 0x9, {0x3, 0x400}}, {0x800, 0x8, {0x3, 0x4da4}}, {0x4, 0xffff, {0x3, 0x7}}, {0x5, 0x8, {0x1, 0x9}}, {0x1, 0x1, {0x0, 0x7}}, {0xc, 0x5, {0x2, 0x6}}, {0x1, 0xc58, {0x3, 0x60}}, {0x44ba, 0x400, {0x1, 0x7}}, {0x7, 0x0, {0x2, 0x3}}, {0x5, 0x82b4, {0x1, 0x101}}, {0x6, 0x4, {0x3, 0x7}}, {0x2, 0x6, {0x2, 0x10000}}, {0xf, 0x6, {0x1, 0x1}}, {0x8, 0x0, {0x3, 0x4}}, {0x7ff, 0xf20c, {0x3, 0x9e60}}, {0xfff, 0x5, {0x0, 0x7}}, {0x5, 0x8001, {0x1, 0x400}}, {0x8, 0x6, {0x2, 0x7}}, {0x9, 0x40b, {0x2, 0x2}}, {0xe, 0x5, {0x3, 0x9}}, {0x3, 0xafa2, {0x1}}, {0x100, 0x577c, {0x0, 0x7}}, {0x5, 0x6, {0x3, 0xc1b}}, {0x7cd4, 0x5, {0x1, 0x401}}, {0x0, 0x6, {0x3, 0x6}}, {0x7, 0x9, {0x0, 0xfff}}, {0xffff, 0x0, {0x3, 0x10000}}, {0x3, 0x2, {0x1, 0x7fff}}, {0xfff, 0x3, {0x3, 0x9}}, {0x6, 0x8, {0x3, 0xed6b}}, {0xc, 0x2, {0x0, 0x5}}, {0x5, 0x6, {0x2, 0x8}}, {0x6, 0xe000, {0x2, 0xc1}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x40, 0x80, 0x6, 0xcaf, 0xd, 'syz1\x00', "1a67baa85ade4dd0cf82c9ed2e120a8c5192f38e823a7b7571cab9768f41f5cf", "4ef3066236c2b32ce1ebb878bc8758fe2181aaf7d0842e144cbb61ef0fa5c2bd", [{0xacf, 0xfa0e, {0x2, 0x9}}, {0x63, 0x5, {0x1}}, {0x5, 0x8000, {0x1, 0x6}}, {0x1ff, 0x9, {0x0, 0x68fc}}, {0x1000, 0x3, {0x2, 0x8000}}, {0x5, 0x80, {0x3, 0x9}}, {0x40, 0x1, {0x2, 0xcf445454}}, {0x4, 0x7, {0x1, 0x98f5}}, {0x6, 0x400, {0x3, 0x9}}, {0x10, 0xa, {0x0, 0x6}}, {0xff, 0x8, {0x2, 0xfffffffb}}, {0x8, 0xdc}, {0x8001, 0x7f, {0x0, 0x6}}, {0x8, 0x340, {0x1, 0x9}}, {0x0, 0x8, {0x3}}, {0x3, 0x4, {0x1, 0x8}}, {0x800, 0x8000, {0x3, 0x800}}, {0x2, 0x3ff, {0x2, 0x2}}, {0x401, 0x40, {0x3, 0x5}}, {0xfff9, 0x65cf, {0x1, 0x2}}, {0x33, 0x1, {0x3, 0x10}}, {0xfff, 0x97f, {0x1, 0xffff}}, {0x200, 0x200, {0x3}}, {0x80, 0x8, {0x0, 0x8}}, {0x62fb, 0x80, {0x2, 0x8000}}, {0x3, 0x82e, {0x3, 0x8}}, {0xf15e, 0x2, {0x1, 0x71d86740}}, {0x1ff, 0x3, {0x0, 0xddc}}, {0x3, 0xa40, {0x0, 0x3ff}}, {0x3, 0x9b48, {0x3, 0x262c}}, {0x8, 0x80, {0x0, 0xf12}}, {0x8000, 0x7f, {0x2, 0x1}}, {0x7, 0x75a, {0x0, 0x7f421ca2}}, {0x0, 0x5, {0x0, 0xfff}}, {0x81, 0x0, {0x2, 0xffffffff}}, {0x4, 0x7ff, {0x1, 0xfffffffa}}, {0x8f7, 0xfffd, {0x0, 0xe}}, {0x0, 0xe, {0x0, 0x5}}, {0xff01, 0x1, {0x3, 0x7ff}}, {0x8, 0x5, {0x3, 0xfff}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x11}, 0xc040)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x0}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={0xffffffffffffffff, r2}, 0xc)
r6 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0x43, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@gettaction={0x108, 0x32, 0x301, 0x70bd2c, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

16.814960829s ago: executing program 4 (id=5884):
bpf$MAP_CREATE(0x25, 0x0, 0x0)

16.446414915s ago: executing program 4 (id=5885):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e58200339644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)

16.392742671s ago: executing program 5 (id=5886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$isdn(0x22, 0x3, 0x2)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x3, 0x0, 0x8, 0x43fe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000), 0x8)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:2'], 0xa)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125e645d4e1bc16d1410000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)

16.368694865s ago: executing program 7 (id=5887):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10)

16.229240087s ago: executing program 4 (id=5888):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0x100, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940))

15.753701886s ago: executing program 5 (id=5889):
bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.753444331s ago: executing program 4 (id=5890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

15.694220969s ago: executing program 4 (id=5891):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$l2tp(0x2, 0x2, 0x73)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2141, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x3, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251a7c00000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x8961637cb36cbb00}, 0x8010)

15.562839133s ago: executing program 5 (id=5892):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = getpid()
r2 = socket$kcm(0x29, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r3})
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x12101)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40090)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
close(0xffffffffffffffff)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044000}, 0x4000)
close(r8)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

15.560071345s ago: executing program 4 (id=5893):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

15.31478052s ago: executing program 7 (id=5894):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e01"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

15.24471062s ago: executing program 7 (id=5895):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, 0x0, 0x64)

15.244555077s ago: executing program 7 (id=5896):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fff5142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

15.185154986s ago: executing program 7 (id=5897):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f00000006c0)=""/4111, 0x100f}], 0x3}, 0x10000)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)

89.477602ms ago: executing program 47 (id=5892):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = getpid()
r2 = socket$kcm(0x29, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r3})
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20120, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x12101)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40090)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
close(0xffffffffffffffff)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3406c096)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24044000}, 0x4000)
close(r8)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

52.77588ms ago: executing program 48 (id=5897):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f00000006c0)=""/4111, 0x100f}], 0x3}, 0x10000)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)

0s ago: executing program 49 (id=5893):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

kernel console output (not intermixed with test programs):

: left allmulticast mode
[  282.656092][ T7141] bridge_slave_1: left promiscuous mode
[  282.790906][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.827496][ T7141] bridge_slave_0: left allmulticast mode
[  282.831632][ T7141] bridge_slave_0: left promiscuous mode
[  282.834654][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.448359][ T5892] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  283.448677][ T5892] Bluetooth: hci1: connection err: -111
[  283.665461][T14168] hsr_slave_0: entered promiscuous mode
[  283.668768][T14168] hsr_slave_1: entered promiscuous mode
[  283.671680][T14168] debugfs: 'hsr0' already exists in 'hsr'
[  283.675884][T14168] Cannot create hsr debugfs directory
[  284.008134][ T5892] Bluetooth: hci3: command tx timeout
[  284.236853][ T7141] team0: Port device wlan1 removed
[  284.372044][ T7141] hsr_slave_0: left promiscuous mode
[  284.376657][ T7141] hsr_slave_1: left promiscuous mode
[  284.384106][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.386615][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.390642][T14286] netlink: 'syz.8.3406': attribute type 6 has an invalid length.
[  284.399846][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.402754][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.422574][ T7141] veth1_macvtap: left promiscuous mode
[  284.429188][ T7141] veth0_macvtap: left promiscuous mode
[  284.685600][ T7141] team0 (unregistering): Port device team_slave_1 removed
[  284.720268][ T7141] team0 (unregistering): Port device C removed
[  285.090504][T14299] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3413'.
[  285.391561][T14314] netlink: 'syz.9.3417': attribute type 21 has an invalid length.
[  285.415177][T14168] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  285.420345][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3416'.
[  285.433421][T14168] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  285.457195][T14168] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  285.468559][T14168] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  285.619496][T14168] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.652328][T14168] 8021q: adding VLAN 0 to HW filter on device team0
[  285.670492][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.672748][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.694455][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.697052][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.904933][T14168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.020645][T14357] netlink: 'syz.9.3427': attribute type 2 has an invalid length.
[  286.030240][T14357] netlink: 'syz.9.3427': attribute type 6 has an invalid length.
[  286.032639][T14357] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3427'.
[  286.036462][T14168] veth0_vlan: entered promiscuous mode
[  286.046892][T14168] veth1_vlan: entered promiscuous mode
[  286.064961][T14168] veth0_macvtap: entered promiscuous mode
[  286.069339][T14168] veth1_macvtap: entered promiscuous mode
[  286.077971][T14168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.085040][T14168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.143198][ T5892] Bluetooth: hci3: command tx timeout
[  286.200016][ T5678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.249221][ T5678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.260065][ T5678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.266563][ T5678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.350365][T10263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.353172][T10263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.356793][T14366] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  286.371251][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.376484][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.622178][T14390] netlink: 2056 bytes leftover after parsing attributes in process `syz.8.3437'.
[  286.631013][T14390] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  287.279642][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3448'.
[  287.285164][T14422] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3448'.
[  287.288186][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3448'.
[  288.133011][T14460] dvmrp1: tun_chr_ioctl cmd 1074025677
[  288.134893][T14460] dvmrp1: linktype set to 1
[  288.138154][T14462] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  288.163312][ T5892] Bluetooth: hci3: command tx timeout
[  288.193510][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3463'.
[  288.196990][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3463'.
[  288.353469][T14479] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3467'.
[  288.420374][T14487] netlink: 'syz.8.3470': attribute type 2 has an invalid length.
[  289.037876][T14541] netlink: 'syz.8.3490': attribute type 4 has an invalid length.
[  289.069966][T14543] netlink: 'syz.8.3492': attribute type 62 has an invalid length.
[  289.236754][ T5892] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10
[  289.251473][T14557] netlink: 'syz.9.3498': attribute type 21 has an invalid length.
[  289.349059][ T5892] Bluetooth: hci2: Dropping invalid advertising data
[  289.579492][T14588] tap0: tun_chr_ioctl cmd 1074025677
[  289.581432][T14588] tap0: linktype set to 0
[  290.449019][T14625] nbd: must specify at least one socket
[  290.527453][T14634] __nla_validate_parse: 6 callbacks suppressed
[  290.527463][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3522'.
[  290.804574][T14644] netlink: 9275 bytes leftover after parsing attributes in process `syz.9.3527'.
[  291.102791][T14662] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3536'.
[  291.590253][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3549'.
[  292.596014][T14708] netlink: 'syz.8.3557': attribute type 1 has an invalid length.
[  292.660904][T14714] Bf#: renamed from hsr_slave_0 (while UP)
[  293.068378][T14722] netlink: 'syz.8.3564': attribute type 7 has an invalid length.
[  293.109553][T14726] netlink: 'syz.8.3566': attribute type 10 has an invalid length.
[  293.113148][T14726] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3566'.
[  293.262746][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3568'.
[  293.304571][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3569'.
[  293.609781][T14764] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  293.810916][T14780] syzkaller0: entered promiscuous mode
[  293.812785][T14780] syzkaller0: entered allmulticast mode
[  294.068642][T14783] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  294.072021][T14783] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  295.063066][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3596'.
[  295.984803][T14834] IPv6: NLM_F_CREATE should be specified when creating new route
[  296.097609][T14787] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3595'.
[  296.101216][T14787] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3595'.
[  296.105633][T14787] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3595'.
[  296.213682][T14841] netlink: 'syz.0.3614': attribute type 21 has an invalid length.
[  296.493441][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 150 seconds
[  297.198354][T14851] netlink: 'syz.9.3619': attribute type 19 has an invalid length.
[  297.201747][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3619'.
[  297.471494][T14860] Cannot find set identified by id 99 to match
[  298.726069][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3626'.
[  298.889936][T14887] @: renamed from hsr0 (while UP)
[  298.951130][T14892] xt_limit: Overflow, try lower: 324382443/0
[  299.018566][T14896] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3636'.
[  299.155068][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3642'.
[  299.255663][T14913] netlink: 'syz.8.3644': attribute type 39 has an invalid length.
[  299.354337][T14917] netlink: 'syz.0.3646': attribute type 22 has an invalid length.
[  299.502996][T14927] openvswitch: netlink: IPv6 tunnel dst address is zero
[  299.716406][T14948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3661'.
[  299.721720][T14946] netem: unknown loss type 0
[  299.723855][T14946] netem: change failed
[  300.220095][T14958] netlink: 'syz.9.3664': attribute type 9 has an invalid length.
[  300.235874][T14958] netlink: 212340 bytes leftover after parsing attributes in process `syz.9.3664'.
[  300.257408][T14961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3665'.
[  300.609212][T14977] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  300.982641][T14994] rdma_rxe: rxe_newlink: failed to add wg1
[  301.135728][T15011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.142652][T15009] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3683'.
[  301.296730][T15024] netlink: 'syz.0.3686': attribute type 29 has an invalid length.
[  301.300330][T15018] netlink: 'syz.0.3686': attribute type 29 has an invalid length.
[  301.310214][T15018] netlink: 'syz.0.3686': attribute type 29 has an invalid length.
[  301.574090][T15047] openvswitch: netlink: IP tunnel dst address not specified
[  301.655549][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'.
[  301.678341][T15063] netlink: 'syz.9.3705': attribute type 6 has an invalid length.
[  301.749478][ T5892] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  301.826750][T15073] lo speed is unknown, defaulting to 1000
[  301.829789][T15073] gretap0 speed is unknown, defaulting to 1000
[  301.865388][T15075] netlink: 'syz.9.3711': attribute type 4 has an invalid length.
[  301.869688][T15075] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3711'.
[  301.889892][T15075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  302.327162][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3720'.
[  302.556742][T15105] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3721'.
[  302.614958][T15109] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3723'.
[  302.622814][T15109] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3723'.
[  302.701975][T15113] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.3725'.
[  302.810488][T15124] pimreg: tun_chr_ioctl cmd 1074812118
[  302.995887][T15141] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3739'.
[  303.322080][ T5892] Bluetooth: hci1: Malformed LE Event: 0x1d
[  303.401646][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'.
[  303.435902][ T5892] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28
[  303.438221][ T5892] Bluetooth: hci3: Invalid connection link type handle 0x0000
[  303.729893][T15190] syzkaller0: tun_chr_ioctl cmd 1074025676
[  303.731839][T15190] syzkaller0: owner set to 60928
[  303.763520][ T5890] Bluetooth: hci3: command 0x2016 tx timeout
[  303.970022][ T5678] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.755651][T15242] netlink: 'syz.9.3783': attribute type 10 has an invalid length.
[  304.819994][T15242] team0: Port device wlan1 added
[  304.822725][T15244] netlink: 'syz.8.3786': attribute type 12 has an invalid length.
[  305.102087][T15264] netlink: 'syz.8.3795': attribute type 21 has an invalid length.
[  305.105409][T15264] IPv6: NLM_F_CREATE should be specified when creating new route
[  305.111452][T15264] netlink: 'syz.8.3795': attribute type 1 has an invalid length.
[  305.351359][T15286] hsr_slave_0: left promiscuous mode
[  305.366218][T15286] hsr_slave_1: left promiscuous mode
[  305.826500][T15324] netlink: 'syz.0.3823': attribute type 29 has an invalid length.
[  305.833736][T15323] netlink: 'syz.9.3824': attribute type 13 has an invalid length.
[  305.841675][T15321] netlink: 'syz.0.3823': attribute type 29 has an invalid length.
[  305.843437][ T5890] Bluetooth: hci3: command 0x2016 tx timeout
[  305.938027][T15327] nbd: must specify at least one socket
[  306.903321][T15351] __nla_validate_parse: 7 callbacks suppressed
[  306.903335][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'.
[  307.090942][T15367] netlink: 'syz.0.3844': attribute type 1 has an invalid length.
[  307.094388][T15367] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3844'.
[  307.098040][T15367] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3844'.
[  307.101848][T15367] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3844'.
[  307.261234][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3849'.
[  307.451718][T15393] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3853'.
[  307.455892][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3853'.
[  307.492574][T15399] netlink: 'syz.8.3859': attribute type 8 has an invalid length.
[  307.510712][T15399] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3859'.
[  307.639074][T15411] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  307.680221][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3867'.
[  308.275267][T15471] delete_channel: no stack
[  308.277075][T15471] delete_channel: no stack
[  309.726193][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'.
[  313.020262][T15516] netlink: 'syz.0.3914': attribute type 32 has an invalid length.
[  313.225153][T15536] netlink: 'syz.9.3924': attribute type 64 has an invalid length.
[  313.406375][T15556] netlink: 'syz.0.3935': attribute type 21 has an invalid length.
[  314.555023][T15586] IPv6: NLM_F_CREATE should be specified when creating new route
[  314.558303][T15586] IPv6: NLM_F_REPLACE set, but no existing node found!
[  314.633139][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3950'.
[  314.637541][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3950'.
[  314.641435][T15589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3950'.
[  315.977755][T15624] : entered promiscuous mode
[  316.017702][T15628] netlink: 'syz.9.3967': attribute type 28 has an invalid length.
[  316.021034][T15628] netlink: 'syz.9.3967': attribute type 29 has an invalid length.
[  316.024470][T15628] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3967'.
[  316.953216][T15651] netlink: 40227 bytes leftover after parsing attributes in process `syz.9.3977'.
[  317.133100][   T33] audit: type=1107 audit(1775224548.246:5): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  317.346596][T15683] netlink: 'syz.9.3991': attribute type 5 has an invalid length.
[  317.349640][T15683] netlink: 'syz.9.3991': attribute type 5 has an invalid length.
[  317.547939][T15694] netlink: 'syz.9.3997': attribute type 6 has an invalid length.
[  317.551059][T15694] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3997'.
[  317.649728][T15698] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  317.697936][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4000'.
[  317.701675][T15700] netlink: 'syz.0.4000': attribute type 1 has an invalid length.
[  320.610436][T15710] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.4004'.
[  320.677374][T15716] netlink: 'syz.9.4006': attribute type 1 has an invalid length.
[  320.927232][T15729] netlink: 'syz.9.4013': attribute type 4 has an invalid length.
[  320.930569][T15729] IPv6: NLM_F_CREATE should be specified when creating new route
[  321.040652][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4018'.
[  321.180579][T15744] netlink: 'syz.9.4019': attribute type 29 has an invalid length.
[  321.184891][T15744] netlink: 'syz.9.4019': attribute type 29 has an invalid length.
[  321.189997][T15744] netlink: 'syz.9.4019': attribute type 29 has an invalid length.
[  321.619246][T15765] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4031'.
[  321.885378][T15782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.959691][T15791] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4042'.
[  322.316837][T15808] netlink: 6032 bytes leftover after parsing attributes in process `syz.9.4051'.
[  322.373749][T15809] xt_HMARK: spi-set and port-set can't be combined
[  322.650826][T15817] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.4055'.
[  322.729927][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  322.732645][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  322.789174][T15822] openvswitch: netlink: Flow key attr not present in new flow.
[  322.943457][T15832] netlink: 'syz.8.4062': attribute type 27 has an invalid length.
[  323.728878][T15860] netlink: 'syz.9.4074': attribute type 11 has an invalid length.
[  323.731316][T15860] netlink: 140 bytes leftover after parsing attributes in process `syz.9.4074'.
[  324.225113][T15875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.258880][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4078'.
[  324.389396][T15868] delete_channel: no stack
[  324.747913][T15891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4088'.
[  324.760862][T15891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4088'.
[  324.945710][T15913] netlink: 'syz.0.4096': attribute type 12 has an invalid length.
[  325.134908][T15924] vcan0: entered allmulticast mode
[  325.177504][T15929] netlink: 'syz.9.4105': attribute type 10 has an invalid length.
[  325.180529][T15929] syz_tun: entered promiscuous mode
[  325.197507][T15929] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  325.254041][T15934] can: request_module (can-proto-5) failed.
[  325.274968][T15937] macsec0: entered promiscuous mode
[  325.277757][T15937] macsec0: entered allmulticast mode
[  325.279478][T15937] veth1_macvtap: entered allmulticast mode
[  325.398593][T15949] netlink: 'syz.8.4113': attribute type 21 has an invalid length.
[  326.510877][T15981] validate_nla: 3 callbacks suppressed
[  326.510919][T15981] netlink: 'syz.0.4129': attribute type 21 has an invalid length.
[  326.536156][T15984] __nla_validate_parse: 4 callbacks suppressed
[  326.536167][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4130'.
[  326.568490][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 180 seconds
[  326.619427][T15988] syzkaller0: entered promiscuous mode
[  326.621195][T15988] syzkaller0: entered allmulticast mode
[  326.846573][T15997] delete_channel: no stack
[  327.303163][ T5892] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  327.994220][T16022] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4148'.
[  328.202167][T16030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4153'.
[  328.482790][T16030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.508276][T16030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.538578][T16030] bond0 (unregistering): Released all slaves
[  328.960298][T16059] netlink: 'syz.9.4165': attribute type 4 has an invalid length.
[  329.161912][T16071] netlink: 'syz.8.4170': attribute type 29 has an invalid length.
[  329.165108][T16071] netlink: 'syz.8.4170': attribute type 29 has an invalid length.
[  329.407530][T16082] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4175'.
[  329.659836][T16106] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4186'.
[  329.916653][T16115] nbd: couldn't find a device at index 0
[  330.243679][T16129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4197'.
[  330.322595][T16133] netlink: 'syz.0.4199': attribute type 2 has an invalid length.
[  330.329976][T16133] netlink: 'syz.0.4199': attribute type 5 has an invalid length.
[  330.333775][T16133] netlink: 'syz.0.4199': attribute type 2 has an invalid length.
[  330.336720][T16133] netlink: 'syz.0.4199': attribute type 5 has an invalid length.
[  330.670451][T16147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4205'.
[  330.705929][T16149] netlink: 'syz.0.4207': attribute type 10 has an invalid length.
[  330.730915][T16149] team0: Port device netdevsim0 added
[  330.739234][T16149] netlink: 'syz.0.4207': attribute type 10 has an invalid length.
[  330.751937][T16149] team0: Port device netdevsim0 removed
[  330.867490][T16158] hsr_slave_1 (unregistering): left promiscuous mode
[  331.099425][T16176] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.101579][T16175] @;: entered promiscuous mode
[  331.102004][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'.
[  331.461178][T16187] lo speed is unknown, defaulting to 1000
[  331.464179][T16187] lo speed is unknown, defaulting to 1000
[  331.479572][T16187] lo speed is unknown, defaulting to 1000
[  332.245515][T16187] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  332.271687][T16187] lo speed is unknown, defaulting to 1000
[  332.278087][T16187] lo speed is unknown, defaulting to 1000
[  332.282657][T16187] lo speed is unknown, defaulting to 1000
[  332.286931][T16187] lo speed is unknown, defaulting to 1000
[  332.291295][T16187] lo speed is unknown, defaulting to 1000
[  332.703702][T16215] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4238'.
[  332.714446][T16215] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4238'.
[  333.010684][T16224] validate_nla: 3 callbacks suppressed
[  333.010699][T16224] netlink: 'syz.9.4241': attribute type 29 has an invalid length.
[  333.411144][T16232] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4245'.
[  333.529636][T16238] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  333.876056][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4255'.
[  333.980244][T16259] netlink: 'syz.8.4258': attribute type 9 has an invalid length.
[  333.986770][T16259] netlink: 'syz.8.4258': attribute type 11 has an invalid length.
[  333.989961][T16259] netlink: 'syz.8.4258': attribute type 12 has an invalid length.
[  333.996731][T16259] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.4258'.
[  334.000676][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4258'.
[  334.097381][T16262] netlink: 'syz.8.4259': attribute type 1 has an invalid length.
[  335.046533][T16297] netlink: 'syz.9.4276': attribute type 1 has an invalid length.
[  335.218060][T16305] netlink: 'syz.9.4280': attribute type 1 has an invalid length.
[  335.220816][T16305] netlink: 'syz.9.4280': attribute type 4 has an invalid length.
[  335.235007][T16305] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4280'.
[  335.516447][T16317] netlink: 'syz.8.4285': attribute type 41 has an invalid length.
[  335.531570][T16317] bridge_slave_1: left allmulticast mode
[  335.536420][T16317] bridge_slave_1: left promiscuous mode
[  335.539324][T16317] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.579033][T16317] bridge_slave_0: left allmulticast mode
[  335.581300][T16317] bridge_slave_0: left promiscuous mode
[  335.586719][T16317] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.429010][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4288'.
[  336.431757][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4288'.
[  336.504762][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4289'.
[  337.011467][T16349] netlink: 'syz.8.4302': attribute type 9 has an invalid length.
[  337.867829][T16398] __nla_validate_parse: 2 callbacks suppressed
[  337.867845][T16398] netlink: 220 bytes leftover after parsing attributes in process `syz.9.4325'.
[  337.911199][T16400] team0: Device bridge0 is up. Set it down before adding it as a team port
[  338.083033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.326304][T16418] validate_nla: 3 callbacks suppressed
[  338.326344][T16418] netlink: 'syz.9.4335': attribute type 1 has an invalid length.
[  338.331969][T16418] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4335'.
[  338.335997][T16418] netlink: 658 bytes leftover after parsing attributes in process `syz.9.4335'.
[  338.340110][T16418] netlink: 'syz.9.4335': attribute type 1 has an invalid length.
[  338.496822][T16422] : renamed from sit0 (while UP)
[  339.037775][T16447] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4349'.
[  340.336403][T16507] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4377'.
[  340.339698][T16507] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4377'.
[  340.727134][T16517] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4382'.
[  340.789560][T16519] netlink: 'syz.8.4383': attribute type 1 has an invalid length.
[  340.791988][T16519] netlink: 64399 bytes leftover after parsing attributes in process `syz.8.4383'.
[  340.971062][T16525] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4386'.
[  342.831702][ T5256] udevd[5256]: worker [8798] /devices/virtual/block/nbd1 timeout; kill it
[  342.835248][ T5256] udevd[5256]: seq 12979 '/devices/virtual/block/nbd1' killed
[  342.947746][T16572] netlink: 200 bytes leftover after parsing attributes in process `syz.8.4408'.
[  344.376494][T16614] netlink: 8908 bytes leftover after parsing attributes in process `syz.9.4428'.
[  344.380228][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4428'.
[  344.617645][T16623] netlink: 'syz.9.4432': attribute type 10 has an invalid length.
[  344.624071][T16623] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4432'.
[  344.640348][T16623] batman_adv: batadv0: Adding interface: veth0_vlan
[  344.643936][T16623] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.654626][T16623] batman_adv: batadv0: Interface activated: veth0_vlan
[  344.705519][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4434'.
[  345.307970][T16633] netlink: 'syz.8.4436': attribute type 1 has an invalid length.
[  345.311051][T16633] netlink: 2704 bytes leftover after parsing attributes in process `syz.8.4436'.
[  345.924612][T16667] openvswitch: netlink: IP tunnel dst address not specified
[  346.724733][T16684] syzkaller0: entered promiscuous mode
[  346.726758][T16684] syzkaller0: entered allmulticast mode
[  347.139401][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.143282][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.154349][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.173729][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.185365][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  347.927024][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4465'.
[  347.930517][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4465'.
[  347.933951][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4465'.
[  348.001065][T16695] lo speed is unknown, defaulting to 1000
[  348.006060][T16695] gretap0 speed is unknown, defaulting to 1000
[  348.012084][T16695] lo speed is unknown, defaulting to 1000
[  348.193054][T16695] chnl_net:caif_netlink_parms(): no params data found
[  348.286991][T16695] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.290026][T16695] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.293635][T16695] bridge_slave_0: entered allmulticast mode
[  348.297782][T16695] bridge_slave_0: entered promiscuous mode
[  348.304616][T16695] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.310040][T16695] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.315477][T16695] bridge_slave_1: entered allmulticast mode
[  348.322706][T16695] bridge_slave_1: entered promiscuous mode
[  348.376601][T16695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.382069][T16695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  348.420146][T16695] team0: Port device team_slave_0 added
[  348.426835][T16695] team0: Port device team_slave_1 added
[  348.457212][T16695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.460268][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.475890][T16695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.483209][T16695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.486181][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  348.497070][T16695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  348.547466][T16695] hsr_slave_0: entered promiscuous mode
[  348.551431][T16695] hsr_slave_1: entered promiscuous mode
[  348.924447][T16734] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4478'.
[  349.284208][ T5892] Bluetooth: hci0: command tx timeout
[  349.311958][T16758] netlink: 'syz.8.4485': attribute type 2 has an invalid length.
[  349.317601][T16758] netlink: 'syz.8.4485': attribute type 8 has an invalid length.
[  349.321270][T16758] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4485'.
[  349.328185][T16695] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  349.345584][T16695] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  349.352801][T16695] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  349.373530][T16695] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  349.482025][T16695] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.502271][T16695] 8021q: adding VLAN 0 to HW filter on device team0
[  349.511901][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.514873][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.547891][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.550851][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.810713][T16695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.884251][T16695] veth0_vlan: entered promiscuous mode
[  349.891319][T16695] veth1_vlan: entered promiscuous mode
[  349.936098][T16695] veth0_macvtap: entered promiscuous mode
[  349.942504][T16695] veth1_macvtap: entered promiscuous mode
[  350.005785][T16695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.017748][T16695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.031347][ T5678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.037679][ T5678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.040533][ T5678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.049708][ T5678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.100863][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.112613][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.128544][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.130927][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.140304][T16805] Cannot find add_set index 46338 as target
[  350.255320][ T7141] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.316612][ T7141] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.414524][ T7141] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.547905][ T5890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.551756][ T5890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.557302][ T5890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.561360][ T5890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.567430][ T5890] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.659927][T16827] lo speed is unknown, defaulting to 1000
[  350.662588][T16827] gretap0 speed is unknown, defaulting to 1000
[  350.673693][T16827] lo speed is unknown, defaulting to 1000
[  351.057958][ T7141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.059850][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4513'.
[  351.066511][ T7141] bond_slave_0: left promiscuous mode
[  351.068412][ T7141] bond_slave_0: left allmulticast mode
[  351.074029][ T7141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.079357][ T7141] bond_slave_1: left promiscuous mode
[  351.081116][ T7141] bond_slave_1: left allmulticast mode
[  351.084154][ T7141] bond0 (unregistering): Released all slaves
[  351.173307][ T7141] : left promiscuous mode
[  351.217151][T16827] chnl_net:caif_netlink_parms(): no params data found
[  351.312291][T16827] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.326050][T16827] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.334740][T16827] bridge_slave_0: entered allmulticast mode
[  351.338002][T16827] bridge_slave_0: entered promiscuous mode
[  351.349082][T16827] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.351600][T16827] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.358297][T16827] bridge_slave_1: entered allmulticast mode
[  351.361141][T16827] bridge_slave_1: entered promiscuous mode
[  351.365002][ T5892] Bluetooth: hci0: command tx timeout
[  351.425825][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.430641][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.445274][T16887] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4518'.
[  351.482405][T16827] team0: Port device team_slave_0 added
[  351.492297][T16827] team0: Port device team_slave_1 added
[  351.529006][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.531681][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.545097][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.557238][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.559408][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  351.568612][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.646114][T16827] hsr_slave_0: entered promiscuous mode
[  351.648792][T16827] hsr_slave_1: entered promiscuous mode
[  351.651350][T16827] debugfs: 'hsr0' already exists in 'hsr'
[  351.663025][T16827] Cannot create hsr debugfs directory
[  351.687839][ T7141] Bf#: left promiscuous mode
[  351.694126][ T7141] hsr_slave_1: left promiscuous mode
[  351.696848][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.699881][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.705899][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.708238][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.721055][ T7141] veth0_macvtap: left promiscuous mode
[  351.900985][ T7141] team_slave_1 (unregistering): left promiscuous mode
[  351.909089][ T7141] team_slave_1 (unregistering): left allmulticast mode
[  351.919659][ T7141] team0 (unregistering): Port device team_slave_1 removed
[  351.955865][ T7141] team_slave_0 (unregistering): left promiscuous mode
[  351.958151][ T7141] team_slave_0 (unregistering): left allmulticast mode
[  351.961539][ T7141] team0 (unregistering): Port device team_slave_0 removed
[  352.022347][ T5949] lo speed is unknown, defaulting to 1000
[  352.024862][ T5949] syz1: Port: 1 Link DOWN
[  352.039707][T16913] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4527'.
[  352.104438][T16917] netlink: 23 bytes leftover after parsing attributes in process `syz.9.4529'.
[  352.643353][ T5892] Bluetooth: hci1: command tx timeout
[  353.443956][ T5892] Bluetooth: hci0: command tx timeout
[  354.321785][T16938] openvswitch: netlink: Duplicate or invalid key (type 0).
[  354.324665][T16938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.773046][ T5892] Bluetooth: hci1: command tx timeout
[  355.065664][T16960] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4541'.
[  355.351351][T16827] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  355.366842][T16827] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  355.372770][T16827] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  355.390433][T16827] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  355.477899][T16827] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.489977][T16827] 8021q: adding VLAN 0 to HW filter on device team0
[  355.496930][T10259] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.499219][T10259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.516421][T10259] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.518734][T10259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.533119][ T5890] Bluetooth: hci0: command tx timeout
[  355.615928][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.772736][T16827] veth0_vlan: entered promiscuous mode
[  355.795386][T16827] veth1_vlan: entered promiscuous mode
[  355.813590][T16827] veth0_macvtap: entered promiscuous mode
[  355.825401][T16827] veth1_macvtap: entered promiscuous mode
[  355.835993][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.861556][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.871166][ T7141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.875546][ T7141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.878262][ T7141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.880908][ T7141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.940960][T10251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.946999][T10251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.969460][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.975845][T17026] netlink: 703 bytes leftover after parsing attributes in process `syz.9.4560'.
[  355.979856][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.120106][T17040] openvswitch: netlink: Message has 8 unknown bytes.
[  356.146658][T17042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.344188][T17057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4574'.
[  356.510824][T17066] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.4577'.
[  356.643767][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 210 seconds
[  356.716541][T17070] netlink: 'syz.3.4579': attribute type 1 has an invalid length.
[  356.803262][ T5890] Bluetooth: hci1: command tx timeout
[  357.334115][T17119] netlink: 'syz.9.4602': attribute type 10 has an invalid length.
[  357.393015][T17119] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4602'.
[  357.444495][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4606'.
[  357.448095][T17128] netlink: 'syz.8.4606': attribute type 2 has an invalid length.
[  357.450547][T17128] netlink: 'syz.8.4606': attribute type 1 has an invalid length.
[  357.453682][T17128] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4606'.
[  358.444490][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4616'.
[  358.451302][T17150] netlink: 200 bytes leftover after parsing attributes in process `syz.8.4616'.
[  358.645397][T17165] netlink: 'syz.9.4621': attribute type 29 has an invalid length.
[  358.648230][T17160] netlink: 'syz.9.4621': attribute type 29 has an invalid length.
[  358.662625][T17165] netlink: 'syz.9.4621': attribute type 29 has an invalid length.
[  358.883077][ T5890] Bluetooth: hci1: command tx timeout
[  359.386418][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.390647][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.394775][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.398532][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.402223][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.406459][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4630'.
[  359.410095][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.421110][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.433738][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.437631][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  359.441111][T17175] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  361.235815][T17242] netlink: 'syz.8.4661': attribute type 4 has an invalid length.
[  361.239454][T17242] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4661'.
[  361.846600][T17242] .`: renamed from bond0 (while UP)
[  361.950632][T17267] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4671'.
[  362.295668][T17280] delete_channel: no stack
[  363.254733][T17322] netlink: 61967 bytes leftover after parsing attributes in process `syz.8.4695'.
[  363.475323][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'.
[  363.553723][T17343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4703'.
[  364.365715][T17370] netlink: 'syz.9.4714': attribute type 2 has an invalid length.
[  364.584865][T17390] netlink: 'syz.3.4724': attribute type 21 has an invalid length.
[  364.587781][T17390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4724'.
[  364.863203][T17415] proc: Bad value for 'gid'
[  364.864957][T17415] netlink: 'syz.3.4735': attribute type 10 has an invalid length.
[  364.911830][T17415] bond0: (slave bond_slave_0): Releasing backup interface
[  365.135875][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4742'.
[  365.277880][ T7141] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.527597][ T7141] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.598130][ T5892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.603391][ T5892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.606922][ T5892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.611515][ T5892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.625280][ T5892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.689975][T17432] lo speed is unknown, defaulting to 1000
[  365.698742][T17435] netlink: 'syz.3.4746': attribute type 2 has an invalid length.
[  365.716697][ T7141] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.730298][T17432] gretap0 speed is unknown, defaulting to 1000
[  365.772444][T17435] netlink: 'syz.3.4746': attribute type 1 has an invalid length.
[  365.776845][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4746'.
[  365.804231][ T7141] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.020212][ T7141] bridge_slave_1: left allmulticast mode
[  366.022163][ T7141] bridge_slave_1: left promiscuous mode
[  366.024988][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.040901][ T7141] bridge_slave_0: left allmulticast mode
[  366.042665][ T7141] bridge_slave_0: left promiscuous mode
[  366.045399][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.308709][ T7141] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.324213][ T7141] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.330946][ T7141] .` (unregistering): Released all slaves
[  366.380999][T17432] chnl_net:caif_netlink_parms(): no params data found
[  366.483329][T17432] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.485520][T17432] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.487731][T17432] bridge_slave_0: entered allmulticast mode
[  366.494793][T17432] bridge_slave_0: entered promiscuous mode
[  366.498078][T17432] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.500475][T17432] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.504712][T17432] bridge_slave_1: entered allmulticast mode
[  366.508002][T17432] bridge_slave_1: entered promiscuous mode
[  366.565777][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.661496][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.820801][T17432] team0: Port device team_slave_0 added
[  366.826143][T17432] team0: Port device team_slave_1 added
[  366.849531][ T7141] hsr_slave_0: left promiscuous mode
[  366.852420][ T7141] hsr_slave_1: left promiscuous mode
[  366.855426][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.858413][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.862143][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.866124][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.876941][ T7141] veth1_macvtap: left promiscuous mode
[  366.880704][ T7141] veth0_macvtap: left promiscuous mode
[  366.888536][ T7141] veth1_vlan: left promiscuous mode
[  366.890970][ T7141] veth0_vlan: left promiscuous mode
[  367.102575][ T7141] team0 (unregistering): Port device team_slave_1 removed
[  367.114957][ T7141] team0 (unregistering): Port device team_slave_0 removed
[  367.303888][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.306576][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.318401][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.325056][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.337839][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.358019][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.426721][T17432] hsr_slave_0: entered promiscuous mode
[  367.430497][T17432] hsr_slave_1: entered promiscuous mode
[  367.440702][T17432] debugfs: 'hsr0' already exists in 'hsr'
[  367.444605][T17432] Cannot create hsr debugfs directory
[  367.693157][ T5892] Bluetooth: hci1: command tx timeout
[  367.897395][T17525] netlink: 'syz.3.4772': attribute type 266 has an invalid length.
[  368.034763][T17432] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  368.048547][T17432] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  368.064647][T17432] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  368.077580][T17432] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  368.130378][T17432] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.141511][T17432] 8021q: adding VLAN 0 to HW filter on device team0
[  368.160226][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.162410][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.177945][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.180112][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.371366][T17432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.014900][T17432] veth0_vlan: entered promiscuous mode
[  369.033421][T17432] veth1_vlan: entered promiscuous mode
[  369.101534][T17432] veth0_macvtap: entered promiscuous mode
[  369.116187][T17432] veth1_macvtap: entered promiscuous mode
[  369.168189][T17432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.179125][T17432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.190232][ T7141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.193396][ T7141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.205592][ T7141] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.208783][ T7141] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.297459][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.300593][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.331283][T10259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.341199][T10259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.422478][T17592] netlink: 'syz.8.4744': attribute type 1 has an invalid length.
[  369.433393][T17592] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4744'.
[  369.763668][ T5892] Bluetooth: hci1: command tx timeout
[  369.786481][T17606] netlink: 'syz.3.4794': attribute type 2 has an invalid length.
[  370.596905][T17606] v: entered promiscuous mode
[  371.842978][ T5892] Bluetooth: hci1: command tx timeout
[  372.759444][T17629] sock: sock_timestamping_bind_phc: sock not bind to device
[  372.761931][T17631] netlink: 'syz.9.4805': attribute type 64 has an invalid length.
[  373.022112][T17658] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4819'.
[  373.036103][T17659] IPv6: Can't replace route, no match found
[  373.849537][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4830'.
[  373.924180][ T5892] Bluetooth: hci1: command tx timeout
[  376.288126][T17698] delete_channel: no stack
[  376.566283][T13921] bond0: (slave syz_tun): Releasing backup interface
[  376.902036][T17717] net_ratelimit: 1506 callbacks suppressed
[  376.902054][T17717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.228831][ T7141] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.270082][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4850'.
[  377.274476][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4850'.
[  377.291166][ T5890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.295596][ T5890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.298686][ T5890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.302122][ T5890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.313638][ T5890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.366483][T17726] netlink: 'syz.8.4851': attribute type 10 has an invalid length.
[  377.369504][T17726] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4851'.
[  377.376449][ T7141] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.386830][T17726] hsr0: entered promiscuous mode
[  377.391761][T17726] bridge0: port 3(hsr0) entered blocking state
[  377.398616][T17726] bridge0: port 3(hsr0) entered disabled state
[  377.402563][T17726] hsr0: entered allmulticast mode
[  377.406644][T17726] hsr_slave_0: entered allmulticast mode
[  377.408789][T17726] hsr_slave_1: entered allmulticast mode
[  377.472184][T17726] bridge0: port 3(hsr0) entered blocking state
[  377.476337][T17726] bridge0: port 3(hsr0) entered forwarding state
[  377.540631][ T7141] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.571078][T17723] lo speed is unknown, defaulting to 1000
[  377.576729][T17723] gretap0 speed is unknown, defaulting to 1000
[  377.607131][ T7141] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.611281][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4859'.
[  377.722173][T17748] netlink: 'syz.8.4861': attribute type 21 has an invalid length.
[  377.753456][ T7141] bridge_slave_1: left allmulticast mode
[  377.755638][ T7141] bridge_slave_1: left promiscuous mode
[  377.760305][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.776978][ T7141] bridge_slave_0: left allmulticast mode
[  377.778708][ T7141] bridge_slave_0: left promiscuous mode
[  377.780533][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.919291][ T7141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.929962][ T7141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.934673][ T7141] bond0 (unregistering): Released all slaves
[  377.973474][T17723] chnl_net:caif_netlink_parms(): no params data found
[  377.978211][T17753] lo speed is unknown, defaulting to 1000
[  377.991619][ T7141] @;: left promiscuous mode
[  378.028555][T17753] gretap0 speed is unknown, defaulting to 1000
[  378.055146][T17768] bpf: Bad value for 'mode'
[  378.169488][T17723] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.178809][T17723] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.188164][T17723] bridge_slave_0: entered allmulticast mode
[  378.201107][T17723] bridge_slave_0: entered promiscuous mode
[  378.237628][T17723] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.240513][T17723] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.246166][T17723] bridge_slave_1: entered allmulticast mode
[  378.260124][T17723] bridge_slave_1: entered promiscuous mode
[  378.340022][T17723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  378.410514][T17723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.445112][T17789] netlink: 126588 bytes leftover after parsing attributes in process `syz.8.4872'.
[  378.461662][T17723] team0: Port device team_slave_0 added
[  378.495067][T17723] team0: Port device team_slave_1 added
[  378.560106][ T7141] team0: Port device wlan1 removed
[  378.601880][T17723] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.610747][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.635772][T17723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.641988][T17801] netlink: 'syz.8.4876': attribute type 2 has an invalid length.
[  378.647784][T17723] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.650719][T17801] netlink: 'syz.8.4876': attribute type 2 has an invalid length.
[  378.655166][T17723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  378.665707][T17801] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4876'.
[  378.675821][T17723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.773747][T17723] hsr_slave_0: entered promiscuous mode
[  378.783238][T17723] hsr_slave_1: entered promiscuous mode
[  378.785987][T17723] debugfs: 'hsr0' already exists in 'hsr'
[  378.787939][T17723] Cannot create hsr debugfs directory
[  378.877408][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  378.880234][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  378.897811][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  378.900868][ T7141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  378.916233][ T7141] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  378.927485][ T7141] batman_adv: batadv0: Removing interface: veth0_vlan
[  378.974540][ T7141] veth1_macvtap: left promiscuous mode
[  378.976427][ T7141] veth0_macvtap: left promiscuous mode
[  378.978243][ T7141] veth1_vlan: left promiscuous mode
[  378.985890][ T7141] veth0_vlan: left promiscuous mode
[  379.363669][ T5892] Bluetooth: hci2: command tx timeout
[  379.750234][ T7141] team0 (unregistering): Port device team_slave_1 removed
[  379.762555][ T7141] team0 (unregistering): Port device team_slave_0 removed
[  379.851707][T17819] netlink: 'syz.8.4882': attribute type 12 has an invalid length.
[  379.856130][T17819] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4882'.
[  380.544257][T17860] netlink: 'syz.8.4895': attribute type 39 has an invalid length.
[  381.038386][T17882] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4899'.
[  381.042045][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4899'.
[  381.067693][T17884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.158063][T17723] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  381.170113][T17723] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  381.177926][T17723] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  381.185940][T17888] netlink: 'syz.8.4902': attribute type 29 has an invalid length.
[  381.190574][T17723] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  381.199258][T17888] netlink: 'syz.8.4902': attribute type 29 has an invalid length.
[  381.233966][T17888] netlink: 'syz.8.4902': attribute type 29 has an invalid length.
[  381.240846][T17888] netlink: 'syz.8.4902': attribute type 29 has an invalid length.
[  381.386091][T17723] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.395077][T17907] tun0: tun_chr_ioctl cmd 1074025681
[  381.417319][T17723] 8021q: adding VLAN 0 to HW filter on device team0
[  381.425509][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.427872][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.445313][ T5892] Bluetooth: hci2: command tx timeout
[  381.466299][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.469274][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.521457][T17723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  381.657268][T17723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.705781][T17723] veth0_vlan: entered promiscuous mode
[  381.718273][T17723] veth1_vlan: entered promiscuous mode
[  382.127257][T17723] veth0_macvtap: entered promiscuous mode
[  382.130859][T17723] veth1_macvtap: entered promiscuous mode
[  382.146623][T17723] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.155235][T17723] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.457926][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.493539][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.507159][ T5678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.531793][ T5678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.556864][T10753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.565100][T10753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.589334][T10753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.591789][T10753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.678220][ T5892] Bluetooth: hci2: command tx timeout
[  383.797317][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4930'.
[  383.950052][T18027] IPv6: NLM_F_CREATE should be specified when creating new route
[  383.956356][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4938'.
[  383.959674][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4938'.
[  384.175587][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  384.177744][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  384.415358][T18048] xt_bpf: check failed: parse error
[  384.468233][T18051] validate_nla: 1 callbacks suppressed
[  384.468249][T18051] netlink: 'syz.1.4949': attribute type 7 has an invalid length.
[  384.474512][T18051] netlink: 'syz.1.4949': attribute type 6 has an invalid length.
[  384.477909][T18051] netlink: 'syz.1.4949': attribute type 7 has an invalid length.
[  384.481094][T18051] netlink: 'syz.1.4949': attribute type 6 has an invalid length.
[  384.652545][T18064] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.4955'.
[  384.691106][T18069] netlink: 'syz.8.4958': attribute type 2 has an invalid length.
[  384.694567][T18069] netlink: 151 bytes leftover after parsing attributes in process `syz.8.4958'.
[  384.764311][T18075] netlink: 'syz.3.4961': attribute type 3 has an invalid length.
[  384.821450][T18081] bridge0: port 4(veth1_to_hsr) entered blocking state
[  384.823932][T18081] bridge0: port 4(veth1_to_hsr) entered disabled state
[  384.826672][T18081] veth1_to_hsr: entered allmulticast mode
[  384.829289][T18081] veth1_to_hsr: entered promiscuous mode
[  384.831411][T18081] bridge0: port 4(veth1_to_hsr) entered blocking state
[  384.833605][T18081] bridge0: port 4(veth1_to_hsr) entered forwarding state
[  385.026075][T18091] syz.8.4969: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  385.030966][T18091] CPU: 1 UID: 0 PID: 18091 Comm: syz.8.4969 Not tainted syzkaller #0 PREEMPT(full) 
[  385.030978][T18091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.030983][T18091] Call Trace:
[  385.030990][T18091]  <TASK>
[  385.030995][T18091]  dump_stack_lvl+0xe8/0x150
[  385.031016][T18091]  warn_alloc+0x249/0x340
[  385.031032][T18091]  ? stack_trace_save+0xa9/0x100
[  385.031049][T18091]  ? __pfx_warn_alloc+0x10/0x10
[  385.031076][T18091]  ? kasan_save_track+0x4f/0x80
[  385.031086][T18091]  ? kasan_save_track+0x3e/0x80
[  385.031094][T18091]  ? __kasan_kmalloc+0x93/0xb0
[  385.031104][T18091]  ? __kmalloc_cache_noprof+0x31c/0x660
[  385.031113][T18091]  ? xskq_create+0x56/0x170
[  385.031124][T18091]  ? xsk_setsockopt+0x603/0x990
[  385.031131][T18091]  ? do_sock_setsockopt+0x17c/0x1b0
[  385.031141][T18091]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  385.031150][T18091]  ? do_syscall_64+0x14d/0xf80
[  385.031168][T18091]  __vmalloc_node_range_noprof+0x132/0x1730
[  385.031236][T18091]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  385.031261][T18091]  ? __kasan_kmalloc+0x93/0xb0
[  385.031285][T18091]  vmalloc_user_noprof+0xad/0xe0
[  385.031298][T18091]  ? xskq_create+0xbf/0x170
[  385.031312][T18091]  xskq_create+0xbf/0x170
[  385.031330][T18091]  xsk_init_queue+0x8a/0xe0
[  385.031348][T18091]  xsk_setsockopt+0x603/0x990
[  385.031365][T18091]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.031377][T18091]  ? __pfx_aa_sk_perm+0x10/0x10
[  385.031397][T18091]  ? __fget_files+0x2a/0x420
[  385.031405][T18091]  ? aa_sock_opt_perm+0xff/0x1a0
[  385.031426][T18091]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  385.031435][T18091]  ? __pfx_xsk_setsockopt+0x10/0x10
[  385.031450][T18091]  do_sock_setsockopt+0x17c/0x1b0
[  385.031471][T18091]  __x64_sys_setsockopt+0x13d/0x1b0
[  385.031492][T18091]  do_syscall_64+0x14d/0xf80
[  385.031502][T18091]  ? trace_irq_disable+0x3b/0x150
[  385.031514][T18091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.031533][T18091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.031542][T18091] RIP: 0033:0x7fb423f9c819
[  385.031554][T18091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.031561][T18091] RSP: 002b:00007fb424e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  385.031570][T18091] RAX: ffffffffffffffda RBX: 00007fb424215fa0 RCX: 00007fb423f9c819
[  385.031576][T18091] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  385.031580][T18091] RBP: 00007fb424032c91 R08: 0000000000000004 R09: 0000000000000000
[  385.031585][T18091] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  385.031589][T18091] R13: 00007fb424216038 R14: 00007fb424215fa0 R15: 00007ffe0ad7dd18
[  385.031632][T18091]  </TASK>
[  385.031635][T18091] Mem-Info:
[  385.150156][T18091] active_anon:9059 inactive_anon:0 isolated_anon:0
[  385.150156][T18091]  active_file:20490 inactive_file:38501 isolated_file:0
[  385.150156][T18091]  unevictable:1768 dirty:90 writeback:0
[  385.150156][T18091]  slab_reclaimable:6966 slab_unreclaimable:93622
[  385.150156][T18091]  mapped:18203 shmem:2442 pagetables:3709
[  385.150156][T18091]  sec_pagetables:0 bounce:0
[  385.150156][T18091]  kernel_misc_reclaimable:0
[  385.150156][T18091]  free:1100695 free_pcp:26391 free_cma:0
[  385.163590][T18091] Node 0 active_anon:16536kB inactive_anon:0kB active_file:32816kB inactive_file:18760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57180kB dirty:332kB writeback:0kB shmem:4444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6824kB pagetables:3324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.175677][T18091] Node 1 active_anon:19700kB inactive_anon:0kB active_file:49144kB inactive_file:135244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:15632kB dirty:28kB writeback:0kB shmem:5324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6988kB pagetables:11512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.191985][T18091] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  385.205222][T18091] lowmem_reserve[]: 0 1587 2117 2117 2117
[  385.216188][T18091] Node 0 DMA32 free:1500052kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:252kB inactive_anon:0kB active_file:2504kB inactive_file:8kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1625384kB mlocked:0kB bounce:0kB free_pcp:23280kB local_pcp:13112kB free_cma:0kB
[  385.229035][T18091] lowmem_reserve[]: 0 0 530 530 530
[  385.231173][T18091] Node 0 Normal free:37312kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16292kB inactive_anon:0kB active_file:30312kB inactive_file:18752kB unevictable:3536kB writepending:296kB zspages:0kB present:1572868kB managed:543364kB mlocked:0kB bounce:0kB free_pcp:18168kB local_pcp:64kB free_cma:0kB
[  385.244624][T18091] lowmem_reserve[]: 0 0 0 0 0
[  385.246616][T18091] Node 1 Normal free:2849428kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19700kB inactive_anon:0kB active_file:49144kB inactive_file:135244kB unevictable:3536kB writepending:28kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:64380kB local_pcp:29924kB free_cma:0kB
[  385.262178][T18091] lowmem_reserve[]: 0 0 0 0 0
[  385.265226][T18091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  385.270629][T18091] Node 0 DMA32: 79*4kB (UM) 43*8kB (UME) 38*16kB (ME) 31*32kB (UME) 93*64kB (UME) 97*128kB (UME) 83*256kB (UME) 54*512kB (UME) 31*1024kB (UM) 13*2048kB (UME) 335*4096kB (UM) = 1500052kB
[  385.301553][T18091] Node 0 Normal: 25*4kB (UME) 196*8kB (UME) 210*16kB (UME) 386*32kB (UME) 115*64kB (UME) 25*128kB (UME) 12*256kB (UE) 6*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 37156kB
[  385.308773][T18091] Node 1 Normal: 2169*4kB (UM) 1302*8kB (UME) 1634*16kB (UME) 210*32kB (UME) 852*64kB (UME) 396*128kB (UME) 268*256kB (UME) 199*512kB (UME) 182*1024kB (UME) 26*2048kB (UME) 557*4096kB (UM) = 2848756kB
[  385.318537][T18091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.322319][T18091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.328705][T18091] 61433 total pagecache pages
[  385.330646][T18091] 0 pages in swap cache
[  385.332333][T18091] Free swap  = 124996kB
[  385.354866][T18091] Total swap = 124996kB
[  385.357447][T18091] 1834877 pages RAM
[  385.359408][T18091] 0 pages HighMem/MovableOnly
[  385.381615][T18091] 390178 pages reserved
[  385.388246][T18091] 0 pages cma reserved
[  385.409091][T18103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4974'.
[  385.452737][T18107] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4975'.
[  385.611329][T18115] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4977'.
[  385.683471][ T5892] Bluetooth: hci2: command tx timeout
[  386.445183][T18155] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4998'.
[  386.452667][T18155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4998'.
[  386.727384][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 240 seconds
[  386.945342][T18172] xt_socket: unknown flags 0x30
[  387.384487][T18203] netlink: 'syz.3.5019': attribute type 17 has an invalid length.
[  387.405607][T18203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.408694][T18203] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.412798][T18203] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.415648][T18203] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.521174][T18210] sysfs: Unknown parameter 'obj_type'
[  387.598525][T18212] netlink: 'syz.3.5024': attribute type 1 has an invalid length.
[  387.601102][T18212] netlink: 'syz.3.5024': attribute type 1 has an invalid length.
[  387.607046][T18212] netlink: 'syz.3.5024': attribute type 8 has an invalid length.
[  389.156239][T18254] __nla_validate_parse: 10 callbacks suppressed
[  389.156250][T18254] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5041'.
[  389.211311][T18260] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  391.429511][T18305] netlink: 'syz.1.5064': attribute type 10 has an invalid length.
[  391.432357][T18305] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5064'.
[  392.448413][T18324] netlink: 'syz.3.5069': attribute type 2 has an invalid length.
[  392.882399][T18362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5082'.
[  392.885876][T18362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5082'.
[  393.096450][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'.
[  393.185258][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5089'.
[  393.232599][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5090'.
[  393.930437][T18421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5107'.
[  393.954386][T18421] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  394.051425][ T5892] Bluetooth: hci2: unexpected event 0x01 length: 151 > 1
[  394.084328][T18428] netlink: 'syz.3.5110': attribute type 1 has an invalid length.
[  395.379928][T18469] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  395.505996][T18471] netlink: 'syz.1.5126': attribute type 2 has an invalid length.
[  395.510678][T18471] netlink: 'syz.1.5126': attribute type 8 has an invalid length.
[  395.519811][T18471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5126'.
[  395.645832][T18479] netlink: 'syz.1.5129': attribute type 2 has an invalid length.
[  395.648299][T18479] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5129'.
[  395.697550][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5131'.
[  396.290952][T18505] netlink: 'syz.1.5142': attribute type 2 has an invalid length.
[  396.295696][T18505] tipc: Started in network mode
[  396.297736][T18505] tipc: Node identity 1340008, cluster identity 4711
[  396.300523][T18505] tipc: Node number set to 20185096
[  396.457649][T18515] netlink: 63 bytes leftover after parsing attributes in process `syz.1.5146'.
[  396.545150][T18519] : renamed from dummy0 (while UP)
[  398.328647][T18569] netlink: 'syz.3.5172': attribute type 29 has an invalid length.
[  398.332407][T18569] netlink: 'syz.3.5172': attribute type 29 has an invalid length.
[  398.339470][T18569] netlink: 'syz.3.5172': attribute type 32 has an invalid length.
[  398.342602][T18569] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5172'.
[  398.829005][T18598] netlink: 'syz.1.5185': attribute type 33 has an invalid length.
[  398.843124][T18598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5185'.
[  399.050940][T18611] netlink: 'syz.1.5191': attribute type 27 has an invalid length.
[  399.267062][T18622] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  400.395956][ T5892] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[  400.441562][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'.
[  401.494734][T18689] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5227'.
[  401.578606][T18694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.670339][T18696] netlink: 'syz.3.5230': attribute type 7 has an invalid length.
[  402.118998][T18720] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  402.293085][T18737] tun0: tun_chr_ioctl cmd 1074025677
[  402.294995][T18737] tun0: linktype set to 774
[  402.412920][ T5892] Bluetooth: hci0: command tx timeout
[  402.479900][T18743] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5253'.
[  402.682518][ T5890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  402.686619][ T5890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  402.689340][ T5890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  402.692714][ T5890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  402.695845][ T5890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  402.722127][T18760] lo speed is unknown, defaulting to 1000
[  402.725570][T18760] gretap0 speed is unknown, defaulting to 1000
[  402.892756][T18760] chnl_net:caif_netlink_parms(): no params data found
[  402.988507][T18790] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5271'.
[  402.989080][T18760] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.995237][T18760] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.998241][T18760] bridge_slave_0: entered allmulticast mode
[  403.001983][T18760] bridge_slave_0: entered promiscuous mode
[  403.009197][T18760] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.012477][T18760] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.015689][T18760] bridge_slave_1: entered allmulticast mode
[  403.019402][T18760] bridge_slave_1: entered promiscuous mode
[  403.088327][ T5901] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.101702][T18760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.107469][T18794] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5274'.
[  403.118585][T18760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.137628][ T5901] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.187555][T18760] team0: Port device team_slave_0 added
[  403.209119][ T5901] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.516907][T18760] team0: Port device team_slave_1 added
[  403.544548][T18760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.546854][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.556118][T18760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.560726][T18760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.563108][T18760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.571614][T18760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.604921][T18760] hsr_slave_0: entered promiscuous mode
[  403.607370][T18760] hsr_slave_1: entered promiscuous mode
[  403.609798][T18760] debugfs: 'hsr0' already exists in 'hsr'
[  403.611775][T18760] Cannot create hsr debugfs directory
[  403.727935][T18806] netlink: 'syz.3.5279': attribute type 2 has an invalid length.
[  403.736118][ T5901] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.929491][T18760] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.941920][T18810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5281'.
[  403.992692][T18810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5281'.
[  404.102488][ T5901] veth1_to_hsr: left allmulticast mode
[  404.105007][ T5901] veth1_to_hsr: left promiscuous mode
[  404.107330][ T5901] bridge0: port 4(veth1_to_hsr) entered disabled state
[  404.124126][ T5901] hsr0: left allmulticast mode
[  404.126068][ T5901] hsr_slave_0: left allmulticast mode
[  404.128225][ T5901] hsr_slave_1: left allmulticast mode
[  404.130574][ T5901] bridge0: port 3(hsr0) entered disabled state
[  404.145664][ T5901] bridge_slave_1: left allmulticast mode
[  404.153536][ T5901] bridge_slave_1: left promiscuous mode
[  404.155510][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.160304][ T5901] bridge_slave_0: left allmulticast mode
[  404.162416][ T5901] bridge_slave_0: left promiscuous mode
[  404.164963][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.343597][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.349557][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.354620][ T5901] bond0 (unregistering): Released all slaves
[  404.382336][T18760] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.443404][T18760] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.504992][T18825] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5288'.
[  404.508034][T18825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5288'.
[  404.511261][T18825] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5288'.
[  404.513874][T18760] netdevsim netdevsim2 5@ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.521080][T18825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5288'.
[  404.557777][T18830] netlink: 'syz.3.5290': attribute type 6 has an invalid length.
[  404.701619][ T5901] hsr_slave_0: left promiscuous mode
[  404.708298][ T5901] hsr_slave_1: left promiscuous mode
[  404.715295][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.718687][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.722021][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.724401][ T5890] Bluetooth: hci3: command tx timeout
[  404.727122][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.737962][ T5901] veth1_macvtap: left promiscuous mode
[  404.740774][ T5901] veth0_macvtap: left promiscuous mode
[  404.743019][ T5901] veth1_vlan: left promiscuous mode
[  404.746417][ T5901] veth0_vlan: left promiscuous mode
[  404.791582][T18844] netlink: 'syz.1.5293': attribute type 1 has an invalid length.
[  405.734467][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  405.760621][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  405.825175][T18856] netlink: 'syz.1.5297': attribute type 13 has an invalid length.
[  405.827892][T18856] netlink: 'syz.1.5297': attribute type 58 has an invalid length.
[  405.975329][T18760] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  405.999179][T18760] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  406.028697][T18760] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  406.066767][T18760] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  406.282832][T18760] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.293691][T18760] 8021q: adding VLAN 0 to HW filter on device team0
[  406.300519][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.303319][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.316445][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.319005][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.540721][T18760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.564618][T18912] __nla_validate_parse: 6 callbacks suppressed
[  406.564628][T18912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5311'.
[  406.571358][ T5890] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  406.577823][T18904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5311'.
[  406.596523][T18760] veth0_vlan: entered promiscuous mode
[  406.602105][T18760] veth1_vlan: entered promiscuous mode
[  406.664200][T18760] veth0_macvtap: entered promiscuous mode
[  406.675070][T18917] netlink: 'syz.3.5315': attribute type 97 has an invalid length.
[  406.675265][T18760] veth1_macvtap: entered promiscuous mode
[  406.678219][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'.
[  406.697748][T18760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.698591][T18917] netlink: 'syz.3.5315': attribute type 97 has an invalid length.
[  406.706955][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'.
[  406.717132][T18760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.725726][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.738493][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.746944][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'.
[  406.751828][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.755957][T18917] openvswitch: netlink: Flow actions attr not present in new flow.
[  406.762132][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.803462][ T5890] Bluetooth: hci3: command tx timeout
[  406.839502][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.842311][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.107674][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.110767][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.522243][T18972] syzkaller0: entered allmulticast mode
[  407.714697][T18983] netlink: 'syz.1.5342': attribute type 22 has an invalid length.
[  407.816258][T18989] netlink: 'syz.1.5344': attribute type 21 has an invalid length.
[  407.824804][T18989] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5344'.
[  408.465375][T19022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5359'.
[  408.469813][T19022] bond0: (slave bond_slave_0): Releasing backup interface
[  408.473664][T19022] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  408.555828][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5362'.
[  408.707632][T19046] netlink: 'syz.1.5371': attribute type 33 has an invalid length.
[  408.710320][T19046] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5371'.
[  408.883988][ T5890] Bluetooth: hci3: command tx timeout
[  408.904654][T19056] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5376'.
[  409.011347][T19064] netlink: 'syz.1.5380': attribute type 21 has an invalid length.
[  409.031686][T19064] netlink: 'syz.1.5380': attribute type 4 has an invalid length.
[  409.102686][T19071] netlink: 'syz.1.5383': attribute type 21 has an invalid length.
[  409.285332][T19082] syzkaller0: entered promiscuous mode
[  409.287578][T19082] syzkaller0: entered allmulticast mode
[  410.973063][ T5890] Bluetooth: hci3: command tx timeout
[  411.343510][T19090] lo speed is unknown, defaulting to 1000
[  411.346424][T19090] gretap0 speed is unknown, defaulting to 1000
[  412.745359][T19145] syzkaller0: entered promiscuous mode
[  412.748688][T19145] syzkaller0: entered allmulticast mode
[  412.903907][T19154] __nla_validate_parse: 5 callbacks suppressed
[  412.903916][T19154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5420'.
[  412.904393][T19155] netlink: 'syz.1.5421': attribute type 2 has an invalid length.
[  412.912597][T19155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5421'.
[  419.867760][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 4402456525 wd_nsec: 4402456573
[  428.525368][ T5892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  428.529641][ T5892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  428.533129][ T5892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  428.536686][ T5892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  428.539926][ T5892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  428.577764][ T5890] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  428.581934][ T5890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  428.585398][ T5890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  428.588882][ T5890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  428.592200][ T5890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  428.636879][ T5890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  428.641172][ T5890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  428.646086][ T5890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  428.649579][ T5890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  428.652962][ T5890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  428.689884][T19200] lo speed is unknown, defaulting to 1000
[  428.719176][T19200] gretap0 speed is unknown, defaulting to 1000
[  428.732244][T19201] lo speed is unknown, defaulting to 1000
[  428.736656][T19201] gretap0 speed is unknown, defaulting to 1000
[  428.746237][T19203] lo speed is unknown, defaulting to 1000
[  428.748700][T19203] gretap0 speed is unknown, defaulting to 1000
[  428.920347][T19200] chnl_net:caif_netlink_parms(): no params data found
[  429.016129][T19201] chnl_net:caif_netlink_parms(): no params data found
[  429.052320][T19203] chnl_net:caif_netlink_parms(): no params data found
[  429.189351][T19200] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.192295][T19200] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.195960][T19200] bridge_slave_0: entered allmulticast mode
[  429.199580][T19200] bridge_slave_0: entered promiscuous mode
[  429.220552][T19200] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.230966][T19200] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.234381][T19200] bridge_slave_1: entered allmulticast mode
[  429.238173][T19200] bridge_slave_1: entered promiscuous mode
[  429.253906][T19201] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.256852][T19201] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.259798][T19201] bridge_slave_0: entered allmulticast mode
[  429.264060][T19201] bridge_slave_0: entered promiscuous mode
[  429.289836][T19203] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.292735][T19203] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.296049][T19203] bridge_slave_0: entered allmulticast mode
[  429.299827][T19203] bridge_slave_0: entered promiscuous mode
[  429.304001][T19201] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.306742][T19201] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.309477][T19201] bridge_slave_1: entered allmulticast mode
[  429.314359][T19201] bridge_slave_1: entered promiscuous mode
[  429.327783][T19203] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.330586][T19203] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.342991][T19203] bridge_slave_1: entered allmulticast mode
[  429.347132][T19203] bridge_slave_1: entered promiscuous mode
[  429.364110][T19200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.390056][T19200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.398735][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.425648][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.432649][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.469063][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.475149][T19200] team0: Port device team_slave_0 added
[  429.479523][T19200] team0: Port device team_slave_1 added
[  429.525411][T19201] team0: Port device team_slave_0 added
[  429.539224][T19200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.542027][T19200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.562052][T19200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.569424][T19201] team0: Port device team_slave_1 added
[  429.573934][T19203] team0: Port device team_slave_0 added
[  429.576741][T19200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.579410][T19200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.590913][T19200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.597771][T19203] team0: Port device team_slave_1 added
[  429.639512][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.642323][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.654808][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.690385][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.693365][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.704016][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.709143][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.711923][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.722825][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.747858][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.750693][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.764501][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.791302][T19200] hsr_slave_0: entered promiscuous mode
[  429.794918][T19200] hsr_slave_1: entered promiscuous mode
[  429.797775][T19200] debugfs: 'hsr0' already exists in 'hsr'
[  429.800116][T19200] Cannot create hsr debugfs directory
[  429.849972][T19201] hsr_slave_0: entered promiscuous mode
[  429.854933][T19201] hsr_slave_1: entered promiscuous mode
[  429.857854][T19201] debugfs: 'hsr0' already exists in 'hsr'
[  429.860186][T19201] Cannot create hsr debugfs directory
[  429.923180][T19203] hsr_slave_0: entered promiscuous mode
[  429.926810][T19203] hsr_slave_1: entered promiscuous mode
[  429.929318][T19203] debugfs: 'hsr0' already exists in 'hsr'
[  429.932040][T19203] Cannot create hsr debugfs directory
[  429.939064][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 270 seconds
[  430.572970][ T5890] Bluetooth: hci1: command tx timeout
[  430.653059][ T5890] Bluetooth: hci4: command tx timeout
[  430.733008][ T5890] Bluetooth: hci5: command tx timeout
[  431.251406][ T5678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.292628][ T5678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.716725][ T5890] Bluetooth: hci1: command tx timeout
[  432.723144][ T5890] Bluetooth: hci4: command tx timeout
[  432.735046][ T5678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.805128][ T5892] Bluetooth: hci5: command tx timeout
[  433.247724][ T5678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.394922][T19203] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.411003][T19201] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  433.468755][T19201] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  433.484422][T19201] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  433.524973][T19203] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.590846][T19201] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  433.620031][T19203] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.644657][ T5678] bridge_slave_1: left allmulticast mode
[  433.646682][ T5678] bridge_slave_1: left promiscuous mode
[  433.648472][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.663957][ T5678] bridge_slave_0: left allmulticast mode
[  433.666114][ T5678] bridge_slave_0: left promiscuous mode
[  433.668002][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.804304][T19203] bond0: (slave netdevsim0): Releasing backup interface
[  433.807451][T19203] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[  433.812078][T19203] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.885168][T19201] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.904180][T19201] 8021q: adding VLAN 0 to HW filter on device team0
[  433.934613][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.937345][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.948768][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.951031][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.998468][ T5678] hsr_slave_0: left promiscuous mode
[  434.000887][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  434.009328][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  434.017118][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  434.019886][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  434.027177][ T5678] veth1_macvtap: left allmulticast mode
[  434.029259][ T5678] veth1_macvtap: left promiscuous mode
[  434.031012][ T5678] veth0_macvtap: left promiscuous mode
[  434.032738][ T5678] veth1_vlan: left promiscuous mode
[  434.035734][ T5678] veth0_vlan: left promiscuous mode
[  434.150629][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  434.162324][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  434.299559][T19203] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  434.305063][T19203] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  434.314432][T19203] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  434.319301][T19203] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  434.344885][T19201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.448937][T19203] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.467955][T19203] 8021q: adding VLAN 0 to HW filter on device team0
[  434.474023][T19201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.485436][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.487714][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.521486][T19203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.526250][T19203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.534113][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.536557][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.646556][T19201] veth0_vlan: entered promiscuous mode
[  434.652031][T19201] veth1_vlan: entered promiscuous mode
[  434.686459][T19201] veth0_macvtap: entered promiscuous mode
[  434.692364][T19201] veth1_macvtap: entered promiscuous mode
[  434.708646][T19203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.723662][ T5890] Bluetooth: hci1: command tx timeout
[  434.734451][T19201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.764711][ T5678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.785894][T19201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.795730][ T7141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.803747][ T5890] Bluetooth: hci4: command tx timeout
[  434.807535][ T7141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.810525][ T7141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.828645][ T7141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.862415][ T5678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.883373][ T5890] Bluetooth: hci5: command tx timeout
[  434.910725][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.921402][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.943412][ T5678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.982225][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.989270][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.011127][ T5678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.019400][T19203] veth0_vlan: entered promiscuous mode
[  435.043069][T19203] veth1_vlan: entered promiscuous mode
[  435.077916][T19203] veth0_macvtap: entered promiscuous mode
[  435.088304][T19203] veth1_macvtap: entered promiscuous mode
[  435.166240][T19203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.198945][T19203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.278099][ T5678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.318829][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.379936][ T5678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.444425][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.447165][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.449881][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.546642][ T5678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.579757][T19200] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  435.601105][T19200] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  435.616803][T19200] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  435.638029][ T5678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.655955][T19200] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  435.658866][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.661470][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.692729][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.696301][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.828441][ T5678] bridge_slave_1: left allmulticast mode
[  435.833224][ T5678] bridge_slave_1: left promiscuous mode
[  435.835808][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.852056][ T5678] bridge_slave_0: left allmulticast mode
[  435.859987][ T5678] bridge_slave_0: left promiscuous mode
[  435.865067][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.875915][ T5678] bridge_slave_1: left allmulticast mode
[  435.885057][ T5678] bridge_slave_1: left promiscuous mode
[  435.887408][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.897847][ T5678] bridge_slave_0: left allmulticast mode
[  435.900180][ T5678] bridge_slave_0: left promiscuous mode
[  435.902548][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.199804][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.207144][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.211817][ T5678] bond0 (unregistering): Released all slaves
[  436.348264][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.352268][ T5678] bond0 (unregistering): Released all slaves
[  436.457810][ T5678] tipc: Left network mode
[  436.471725][T19200] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.479772][T19200] 8021q: adding VLAN 0 to HW filter on device team0
[  436.537353][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.539846][T10251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.562803][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.565059][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.803157][ T5890] Bluetooth: hci1: command tx timeout
[  436.883072][ T5890] Bluetooth: hci4: command tx timeout
[  436.964632][ T5890] Bluetooth: hci5: command tx timeout
[  437.451450][T19200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.631176][T19460] netlink: 'syz.7.5455': attribute type 10 has an invalid length.
[  437.637860][ T5678] hsr_slave_0: left promiscuous mode
[  437.640192][T19460] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5455'.
[  437.648153][ T5678] hsr_slave_1: left promiscuous mode
[  437.650649][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.653460][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.664688][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.666990][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.685942][ T5678] hsr_slave_0: left promiscuous mode
[  437.688034][ T5678] hsr_slave_1: left promiscuous mode
[  437.690015][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.694593][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.708902][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.716176][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.736383][ T5678] veth1_macvtap: left promiscuous mode
[  437.740524][ T5678] veth0_macvtap: left promiscuous mode
[  437.746133][ T5678] veth1_macvtap: left promiscuous mode
[  437.749743][ T5678] veth0_macvtap: left promiscuous mode
[  437.753513][ T5678] veth1_vlan: left promiscuous mode
[  437.757491][ T5678] veth0_vlan: left promiscuous mode
[  439.799826][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  439.813764][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  439.971152][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  439.977412][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  440.212401][T19200] veth0_vlan: entered promiscuous mode
[  440.217739][T19200] veth1_vlan: entered promiscuous mode
[  440.239012][T19200] veth0_macvtap: entered promiscuous mode
[  440.247063][T19200] veth1_macvtap: entered promiscuous mode
[  440.281611][T19200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.287492][T19200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.328617][ T7141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.337800][ T7141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.340668][ T7141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.369565][ T7141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.390562][T19496] lo speed is unknown, defaulting to 1000
[  440.414562][T19496] gretap0 speed is unknown, defaulting to 1000
[  440.548742][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.551288][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.580461][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.583391][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.660849][T19526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.775587][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5429'.
[  440.863393][T19536] netlink: 'syz.6.5473': attribute type 16 has an invalid length.
[  440.877858][T19536] netlink: 'syz.6.5473': attribute type 17 has an invalid length.
[  441.089449][T19536] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.092106][T19536] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.236158][T19536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.241181][T19536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.312764][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.317199][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.321881][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.337189][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  441.767027][T19594] netlink: 'syz.7.5488': attribute type 21 has an invalid length.
[  441.770344][T19594] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5488'.
[  441.816812][T19597] netlink: 1195 bytes leftover after parsing attributes in process `syz.5.5489'.
[  441.892569][T19606] netlink: 'syz.5.5493': attribute type 1 has an invalid length.
[  441.903049][T19606] netlink: 'syz.5.5493': attribute type 1 has an invalid length.
[  441.905552][T19606] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.5493'.
[  441.909319][T19609] netlink: 703 bytes leftover after parsing attributes in process `syz.6.5494'.
[  442.035546][T19620] netlink: 'syz.6.5500': attribute type 2 has an invalid length.
[  442.262590][T19647] netlink: 'syz.7.5508': attribute type 13 has an invalid length.
[  442.765408][T19693] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5521'.
[  442.779972][T19693] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5521'.
[  442.895792][T19701] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode
[  443.438577][T19730] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5529'.
[  443.441578][T19728] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5529'.
[  443.538372][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5532'.
[  443.541190][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5532'.
[  443.570860][T19740] netlink: 'syz.7.5534': attribute type 2 has an invalid length.
[  443.745126][T19750] netlink: 'syz.5.5538': attribute type 21 has an invalid length.
[  443.748235][T19750] IPv6: NLM_F_CREATE should be specified when creating new route
[  443.750724][T19750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  443.753018][T19750] IPv6: NLM_F_CREATE should be set when creating new route
[  443.755257][T19750] IPv6: NLM_F_CREATE should be set when creating new route
[  443.757565][T19750] IPv6: NLM_F_CREATE should be set when creating new route
[  443.761821][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5538'.
[  443.818152][T19756] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  444.515765][T19804] netlink: 'syz.5.5548': attribute type 12 has an invalid length.
[  444.518975][T19804] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5548'.
[  444.540119][T19806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5549'.
[  445.211405][T19829] syzkaller0: entered promiscuous mode
[  445.215106][T19829] syzkaller0: entered allmulticast mode
[  445.615117][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  445.617108][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  451.374077][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5564'.
[  451.377883][T19853] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5564'.
[  451.392998][T19853] netlink: 'syz.7.5564': attribute type 1 has an invalid length.
[  451.876538][T19866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5570'.
[  453.004418][T19881] netlink: 'syz.5.5577': attribute type 27 has an invalid length.
[  453.006995][T19881] netlink: 2418 bytes leftover after parsing attributes in process `syz.5.5577'.
[  454.083545][T13103] page_pool_release_retry() stalled pool shutdown: id 214, 1 inflight 60 sec
[  455.536734][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5584'.
[  456.714597][T19965] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5593'.
[  457.054611][T19997] netlink: 'syz.5.5601': attribute type 8 has an invalid length.
[  457.276969][ T5890] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  457.665562][T20029] netlink: 'syz.7.5612': attribute type 10 has an invalid length.
[  457.675250][T20029] team0: Device vxcan1 is of different type
[  457.703127][T20031] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5613'.
[  457.896687][ T5892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.900322][ T5892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.906888][ T5892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.912445][ T5892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.918760][ T5892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  457.941004][T20040] lo speed is unknown, defaulting to 1000
[  457.943878][T20040] gretap0 speed is unknown, defaulting to 1000
[  458.078489][T20040] chnl_net:caif_netlink_parms(): no params data found
[  458.152245][T20040] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.160051][T20040] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.162294][T20040] bridge_slave_0: entered allmulticast mode
[  458.167504][T20040] bridge_slave_0: entered promiscuous mode
[  458.189227][T20040] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.191378][T20040] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.206558][T20040] bridge_slave_1: entered allmulticast mode
[  458.209449][T20040] bridge_slave_1: entered promiscuous mode
[  458.245980][T20040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.248841][T20062] netlink: 762 bytes leftover after parsing attributes in process `syz.5.5623'.
[  458.252418][T20062] bridge: RTM_NEWNEIGH with unconfigured vlan 168 on bridge0
[  458.263407][T20040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.278706][T20040] team0: Port device team_slave_0 added
[  458.281854][T20040] team0: Port device team_slave_1 added
[  458.298243][T20040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.300455][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.310123][T20040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.317549][T20040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.321773][T20040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.330731][T20040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.356681][T20040] hsr_slave_0: entered promiscuous mode
[  458.359235][T20040] hsr_slave_1: entered promiscuous mode
[  458.380988][T20040] debugfs: 'hsr0' already exists in 'hsr'
[  458.383132][T20040] Cannot create hsr debugfs directory
[  458.530232][ T5901] bridge_slave_1: left allmulticast mode
[  458.532542][ T5901] bridge_slave_1: left promiscuous mode
[  458.539184][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.546002][ T5901] bridge_slave_0: left allmulticast mode
[  458.548318][ T5901] bridge_slave_0: left promiscuous mode
[  458.550628][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.587224][T20073] netlink: 'syz.5.5628': attribute type 21 has an invalid length.
[  458.590587][T20073] netlink: 'syz.5.5628': attribute type 6 has an invalid length.
[  458.689405][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.694212][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  458.698043][ T5901] bond0 (unregistering): Released all slaves
[  458.837598][T20076] C: renamed from team_slave_0 (while UP)
[  458.842361][T20076] netlink: 'syz.7.5629': attribute type 2 has an invalid length.
[  458.846430][T20076] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5629'.
[  458.850070][T20076] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  459.033100][ T5901] hsr_slave_0: left promiscuous mode
[  459.035786][ T5901] hsr_slave_1: left promiscuous mode
[  459.043764][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.051086][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.112179][T20100] netlink: 'syz.7.5638': attribute type 6 has an invalid length.
[  459.114801][T20100] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5638'.
[  459.211780][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  459.214841][ T5892] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  459.218028][T20103] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.5638'.
[  459.234334][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  460.002992][ T5892] Bluetooth: hci0: command tx timeout
[  460.327282][   T75] block nbd1: Possible stuck request ffff88810ada8000: control (read@0,4096B). Runtime 300 seconds
[  461.131219][T20040] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  461.158463][T20040] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  461.170787][T20040] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  461.178238][T20040] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  461.266316][T20040] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.292008][T20040] 8021q: adding VLAN 0 to HW filter on device team0
[  461.306705][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.309020][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.321122][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.323443][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.448255][T20040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.739395][T20040] veth0_vlan: entered promiscuous mode
[  461.754272][T20040] veth1_vlan: entered promiscuous mode
[  461.791431][T20289] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.5689'.
[  461.794384][T20040] veth0_macvtap: entered promiscuous mode
[  461.801007][T20040] veth1_macvtap: entered promiscuous mode
[  461.881986][T20040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.907062][T20040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.917318][ T5901] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.920162][ T5901] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.938041][ T5901] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.940767][ T5901] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.030700][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.035832][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.067033][ T4878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  462.069469][ T4878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.083277][ T5892] Bluetooth: hci0: command tx timeout
[  462.514118][T20360] netlink: 'syz.4.5710': attribute type 27 has an invalid length.
[  462.519206][T20360] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5710'.
[  462.640675][T20373] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.5717'.
[  462.649891][T20376] netlink: 'syz.4.5718': attribute type 29 has an invalid length.
[  462.654732][T20376] netlink: 'syz.4.5718': attribute type 29 has an invalid length.
[  462.667082][T20376] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5718'.
[  462.669941][T20376] unsupported nla_type 58
[  462.686228][T20376] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5718'.
[  462.786171][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5723'.
[  462.789754][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5723'.
[  462.793836][T20385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5723'.
[  462.942404][T20397] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5729'.
[  462.987812][T20403] netlink: 'syz.5.5732': attribute type 10 has an invalid length.
[  462.990964][T20403] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.5732'.
[  463.052726][T20405] netlink: 'syz.7.5733': attribute type 3 has an invalid length.
[  463.496468][T20444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  463.872382][T20466] bridge0: port 3(gretap0) entered blocking state
[  463.875154][T20466] bridge0: port 3(gretap0) entered disabled state
[  463.877844][T20466] gretap0: entered allmulticast mode
[  463.881049][T20466] gretap0: entered promiscuous mode
[  463.884303][T20466] bridge0: port 3(gretap0) entered blocking state
[  463.886595][T20466] bridge0: port 3(gretap0) entered forwarding state
[  464.012547][T20472] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  464.061592][T20474] netlink: 'syz.5.5766': attribute type 2 has an invalid length.
[  464.139235][T20478] netlink: 'syz.5.5768': attribute type 10 has an invalid length.
[  464.174188][ T5892] Bluetooth: hci0: command tx timeout
[  464.229930][T20482] netlink: 'syz.5.5770': attribute type 15 has an invalid length.
[  464.794927][T20513] netlink: 'syz.7.5783': attribute type 6 has an invalid length.
[  465.250715][T20532] netlink: 'syz.5.5792': attribute type 5 has an invalid length.
[  465.430316][T20550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.431867][T20549] hmac(sha2: entered promiscuous mode
[  465.637102][T20564] lo speed is unknown, defaulting to 1000
[  465.641835][T20564] gretap0 speed is unknown, defaulting to 1000
[  466.253013][ T5892] Bluetooth: hci0: command tx timeout
[  466.729854][T20658] syzkaller0: entered promiscuous mode
[  466.733364][T20658] syzkaller0: entered allmulticast mode
[  467.329869][T20698] __nla_validate_parse: 20 callbacks suppressed
[  467.329880][T20698] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.5868'.
[  467.362270][T20697] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5867'.
[  467.380958][ T5892] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11
[  467.444269][T20706] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5871'.
[  471.508211][T20740] validate_nla: 5 callbacks suppressed
[  471.508227][T20740] netlink: 'syz.4.5885': attribute type 9 has an invalid length.
[  471.512827][T20740] netlink: 'syz.4.5885': attribute type 11 has an invalid length.
[  471.521955][T20740] netlink: 'syz.4.5885': attribute type 12 has an invalid length.
[  471.526535][T20740] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5885'.
[  471.529633][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'.
[  472.555977][T20776] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5894'.
[  472.560004][T20776] unsupported nlmsg_type 40
[  472.646422][T20780] netlink: 'syz.7.5896': attribute type 3 has an invalid length.
[  472.648984][T20780] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5896'.
[  485.451252][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 10020863924 wd_nsec: 10020864135
[  488.094645][ T5890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  488.099178][ T5890] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  488.157261][T18762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  488.161862][T18762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  488.170769][T18762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  488.175185][T20795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  488.179535][T20795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  488.194207][T20795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  488.197610][T20795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  488.201043][T20795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  488.205582][T20795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  488.218111][T20795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  488.231185][T20795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  488.234755][T20795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  488.237962][T20795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  490.243594][T20793] Bluetooth: hci2: command tx timeout
[  490.246618][T20795] Bluetooth: hci3: command tx timeout
[  490.323248][T20795] Bluetooth: hci5: command tx timeout
[  492.324488][T20793] Bluetooth: hci2: command tx timeout
[  492.327481][T20795] Bluetooth: hci3: command tx timeout
[  492.403103][T20795] Bluetooth: hci5: command tx timeout
[  494.403513][T20795] Bluetooth: hci3: command tx timeout
[  494.405750][T20795] Bluetooth: hci2: command tx timeout
[  494.482968][T20793] Bluetooth: hci5: command tx timeout
[  496.483520][T20793] Bluetooth: hci2: command tx timeout
[  496.485819][T20793] Bluetooth: hci3: command tx timeout
[  496.563022][T20795] Bluetooth: hci5: command tx timeout
[  506.403208][   T34] INFO: task udevd:8798 blocked for more than 150 seconds.
[  506.406100][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  506.413535][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  506.416953][   T34] task:udevd           state:D stack:21976 pid:8798  tgid:8798  ppid:5256   task_flags:0x400140 flags:0x00080002
[  506.421528][   T34] Call Trace:
[  506.422831][   T34]  <TASK>
[  506.442962][   T34]  __schedule+0x15dd/0x52d0
[  506.444862][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  506.446894][   T34]  ? __pfx___schedule+0x10/0x10
[  506.502946][   T34]  ? schedule+0x90/0x360
[  506.504740][   T34]  schedule+0x164/0x360
[  506.506436][   T34]  io_schedule+0x7f/0xd0
[  506.508159][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  506.510314][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  506.512618][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  506.543294][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  506.545563][   T34]  do_read_cache_folio+0x1ad/0x590
[  506.547968][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  506.550188][   T34]  read_part_sector+0xb6/0x2b0
[  506.593274][   T34]  adfspart_check_POWERTEC+0x92/0xef0
[  506.595488][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  506.597709][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  506.600068][   T34]  bdev_disk_changed+0x7ba/0x1550
[  506.602099][   T34]  ? bdev_open+0xe0/0xd30
[  506.643545][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  506.645821][   T34]  blkdev_get_whole+0x380/0x510
[  506.647799][   T34]  bdev_open+0x31e/0xd30
[  506.649537][   T34]  blkdev_open+0x470/0x610
[  506.651364][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  506.662920][   T34]  do_dentry_open+0x785/0x14e0
[  506.664816][   T34]  vfs_open+0x3b/0x340
[  506.666430][   T34]  ? path_openat+0x2df0/0x3860
[  506.668282][   T34]  path_openat+0x2e08/0x3860
[  506.670089][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  506.672183][   T34]  ? stack_depot_save_flags+0x33/0x810
[  506.692995][   T34]  ? __pfx_path_openat+0x10/0x10
[  506.695062][   T34]  ? __x64_sys_openat+0x138/0x170
[  506.697065][   T34]  ? do_syscall_64+0x14d/0xf80
[  506.699028][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.701463][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  506.708861][   T34]  do_file_open+0x23e/0x4a0
[  506.710740][   T34]  ? __pfx_do_file_open+0x10/0x10
[  506.712812][   T34]  ? _raw_spin_unlock+0x28/0x50
[  506.722907][   T34]  ? alloc_fd+0x64b/0x6c0
[  506.724688][   T34]  do_sys_openat2+0x113/0x200
[  506.726586][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  506.728803][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  506.730905][   T34]  ? rcu_is_watching+0x15/0xb0
[  506.750949][   T34]  __x64_sys_openat+0x138/0x170
[  506.753583][   T34]  do_syscall_64+0x14d/0xf80
[  506.755418][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.758856][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.761261][   T34] RIP: 0033:0x7f46d65169a4
[  506.764314][   T34] RSP: 002b:00007ffc70c16ab0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  506.767641][   T34] RAX: ffffffffffffffda RBX: 000055d0d57d4220 RCX: 00007f46d65169a4
[  506.770804][   T34] RDX: 00000000000a0800 RSI: 000055d0d57cb530 RDI: 00000000ffffff9c
[  506.774439][   T34] RBP: 000055d0d57cb530 R08: 0000000000000001 R09: 3fffffffffffffff
[  506.777634][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  506.780773][   T34] R13: 000055d0d57c4aa0 R14: 0000000000000001 R15: 000055d0d57b3910
[  506.784391][   T34]  </TASK>
[  506.785717][   T34] 
[  506.785717][   T34] Showing all locks held in the system:
[  506.788781][   T34] 1 lock held by khungtaskd/34:
[  506.790743][   T34]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  506.795388][   T34] 3 locks held by kworker/0:3/5275:
[  506.797506][   T34]  #0: ffff888100692d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  506.801837][   T34]  #1: ffffc900029b7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  506.807473][   T34]  #2: ffffffff8e75f4b8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220
[  506.811582][   T34] 2 locks held by getty/5631:
[  506.813841][   T34]  #0: ffff8881147230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  506.817717][   T34]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  506.821680][   T34] 1 lock held by udevd/8798:
[  506.824304][   T34]  #0: ffff88816a1cb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  506.827970][   T34] 3 locks held by kworker/u9:9/10257:
[  506.830393][   T34]  #0: ffff8881000ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  506.835668][   T34]  #1: ffffc900041a7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  506.840363][   T34]  #2: ffff8881a9008788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x4a0
[  506.851751][   T34] 4 locks held by kworker/0:8/20338:
[  506.854407][   T34]  #0: ffff888100692d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  506.859774][   T34]  #1: ffffc90007877c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  506.865359][   T34]  #2: ffffffff8e7bd6b8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220
[  506.869547][   T34]  #3: ffffffff8e764878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  506.875342][   T34] 1 lock held by syz.5.5892/20768:
[  506.877426][   T34]  #0: ffffffff8e7ceb68 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  506.881209][   T34] 1 lock held by syz.5.5892/20770:
[  506.886104][   T34]  #0: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  506.889710][   T34] 1 lock held by syz.4.5893/20769:
[  506.891791][   T34]  #0: ffffffff8e764740 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  506.896203][   T34] 3 locks held by syz.4.5893/20771:
[  506.898301][   T34] 2 locks held by syz-executor/20787:
[  506.900460][   T34]  #0: ffffffff8fbc03d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.904638][   T34]  #1: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290
[  506.908658][   T34] 2 locks held by syz-executor/20789:
[  506.910824][   T34]  #0: ffffffff8fbc03d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.915122][   T34]  #1: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  506.919316][   T34] 2 locks held by syz-executor/20791:
[  506.921462][   T34]  #0: ffffffff8fbc03d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  506.925551][   T34]  #1: ffffffff8fbceb48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  506.929698][   T34] 1 lock held by dhcpcd/20803:
[  506.931603][   T34]  #0: ffff888020e38260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.936072][   T34] 1 lock held by dhcpcd/20804:
[  506.937973][   T34]  #0: ffff888020e46260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.941792][   T34] 1 lock held by dhcpcd/20805:
[  506.944218][   T34]  #0: ffff888020e44260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.948035][   T34] 1 lock held by dhcpcd/20806:
[  506.949953][   T34]  #0: ffff888020e42260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.962583][   T34] 1 lock held by dhcpcd/20807:
[  506.965487][   T34]  #0: ffff888020e40260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.968494][   T34] 1 lock held by dhcpcd/20808:
[  506.970195][   T34]  #0: ffff888020e4e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  506.974305][   T34] 
[  506.975266][   T34] =============================================
[  506.975266][   T34] 
[  506.978590][   T34] NMI backtrace for cpu 0
[  506.978602][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  506.978611][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  506.978615][   T34] Call Trace:
[  506.978619][   T34]  <TASK>
[  506.978623][   T34]  dump_stack_lvl+0xe8/0x150
[  506.978638][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  506.978649][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  506.978661][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  506.978673][   T34]  sys_info+0x135/0x170
[  506.978682][   T34]  watchdog+0xfd9/0x1030
[  506.978695][   T34]  ? watchdog+0x21a/0x1030
[  506.978710][   T34]  kthread+0x388/0x470
[  506.978718][   T34]  ? __pfx_watchdog+0x10/0x10
[  506.978728][   T34]  ? __pfx_kthread+0x10/0x10
[  506.978736][   T34]  ret_from_fork+0x51e/0xb90
[  506.978750][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  506.978764][   T34]  ? __switch_to+0xc7d/0x1450
[  506.978775][   T34]  ? __pfx_kthread+0x10/0x10
[  506.978782][   T34]  ret_from_fork_asm+0x1a/0x30
[  506.978798][   T34]  </TASK>
[  506.978800][   T34] Sending NMI from CPU 0 to CPUs 1:
[  507.023761][    C1] NMI backtrace for cpu 1
[  507.023773][    C1] CPU: 1 UID: 0 PID: 20771 Comm: syz.4.5893 Not tainted syzkaller #0 PREEMPT(full) 
[  507.023782][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  507.023786][    C1] RIP: 0010:native_apic_msr_write+0x39/0x50
[  507.023798][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 86 61 77 03 66 0f 1f 44 00
[  507.023804][    C1] RSP: 0018:ffffc90000a08650 EFLAGS: 00000046
[  507.023811][    C1] RAX: 00000000000000a3 RBX: ffff88823c623e40 RCX: 0000000000000838
[  507.023815][    C1] RDX: 0000000000000000 RSI: 00000000000000a3 RDI: 0000000000000838
[  507.023819][    C1] RBP: 0000000000000000 R08: ffffffff81b2ce75 R09: ffffffff9a2c0508
[  507.023824][    C1] R10: 0000000000000003 R11: ffffffff8173caf0 R12: 0000000010000000
[  507.023828][    C1] R13: dffffc0000000000 R14: 00000000000000a3 R15: 0000000000000020
[  507.023832][    C1] FS:  00007fd902b966c0(0000) GS:ffff8882a945a000(0000) knlGS:0000000000000000
[  507.023838][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  507.023843][    C1] CR2: 0000000100000000 CR3: 00000001859ec000 CR4: 00000000000006f0
[  507.023870][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  507.023876][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  507.023880][    C1] Call Trace:
[  507.023883][    C1]  <IRQ>
[  507.023885][    C1]  lapic_next_event+0x11/0x20
[  507.023895][    C1]  clockevents_program_event+0x1c9/0x350
[  507.023905][    C1]  hrtimer_interrupt+0xb08/0x1010
[  507.023920][    C1]  __sysvec_apic_timer_interrupt+0x102/0x460
[  507.023930][    C1]  sysvec_apic_timer_interrupt+0x52/0xc0
[  507.023938][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.023944][    C1] RIP: 0010:lock_release+0x2d7/0x3d0
[  507.023953][    C1] Code: e7 7a 11 00 00 00 00 eb b5 e8 05 14 0d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 85 a1 7a 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 32 4d 73
[  507.023959][    C1] RSP: 0018:ffffc90000a088c8 EFLAGS: 00000282
[  507.023965][    C1] RAX: 9b9faebc9306d700 RBX: 0000000000000202 RCX: 0000000000000101
[  507.023969][    C1] RDX: 0000000000000001 RSI: ffffffff8e169ed2 RDI: ffffffff8c27ca00
[  507.023973][    C1] RBP: ffff8881033b6340 R08: ffffffff81af384d R09: ffffffff8e75e5e0
[  507.023978][    C1] R10: ffffc90000a089d8 R11: ffffffff81b0c390 R12: 0000000000000001
[  507.023982][    C1] R13: 0000000000000001 R14: ffffffff8e75e5e0 R15: ffff8881033b57c0
[  507.023988][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  507.023995][    C1]  ? is_module_text_address+0x1d/0x1e0
[  507.024033][    C1]  ? is_module_text_address+0x1d/0x1e0
[  507.024043][    C1]  is_module_text_address+0x18b/0x1e0
[  507.024050][    C1]  kernel_text_address+0x94/0xe0
[  507.024058][    C1]  __kernel_text_address+0xd/0x30
[  507.024064][    C1]  unwind_get_return_address+0x4d/0x90
[  507.024074][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  507.024080][    C1]  arch_stack_walk+0xfb/0x150
[  507.024092][    C1]  stack_trace_save+0xa9/0x100
[  507.024098][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  507.024105][    C1]  ? ktime_get+0x45/0x200
[  507.024112][    C1]  kasan_save_track+0x3e/0x80
[  507.024119][    C1]  ? kasan_save_track+0x3e/0x80
[  507.024126][    C1]  ? kasan_save_free_info+0x46/0x50
[  507.024131][    C1]  ? __kasan_slab_free+0x5c/0x80
[  507.024138][    C1]  ? kmem_cache_free+0x187/0x630
[  507.024146][    C1]  ? dst_destroy+0x235/0x350
[  507.024154][    C1]  ? rcu_core+0x7cd/0x1070
[  507.024162][    C1]  ? handle_softirqs+0x22a/0x870
[  507.024170][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  507.024178][    C1]  ? irq_exit_rcu+0x9/0x30
[  507.024184][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  507.024191][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.024197][    C1]  ? __pfx___schedule+0x10/0x10
[  507.024204][    C1]  ? preempt_schedule_irq+0x4d/0xa0
[  507.024211][    C1]  ? irqentry_exit+0x599/0x620
[  507.024217][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.024223][    C1]  ? x64_sys_call+0x5a3/0x2240
[  507.024233][    C1]  ? do_syscall_64+0x14d/0xf80
[  507.024240][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.024254][    C1]  kasan_save_free_info+0x46/0x50
[  507.024259][    C1]  __kasan_slab_free+0x5c/0x80
[  507.024267][    C1]  kmem_cache_free+0x187/0x630
[  507.024274][    C1]  ? dst_destroy+0x235/0x350
[  507.024282][    C1]  dst_destroy+0x235/0x350
[  507.024290][    C1]  ? rcu_core+0x751/0x1070
[  507.024297][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  507.024306][    C1]  rcu_core+0x7cd/0x1070
[  507.024316][    C1]  ? __pfx_rcu_core+0x10/0x10
[  507.024326][    C1]  handle_softirqs+0x22a/0x870
[  507.024334][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  507.024343][    C1]  __irq_exit_rcu+0x5f/0x150
[  507.024351][    C1]  irq_exit_rcu+0x9/0x30
[  507.024358][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  507.024365][    C1]  </IRQ>
[  507.024367][    C1]  <TASK>
[  507.024370][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.024376][    C1] RIP: 0010:__schedule+0x0/0x52d0
[  507.024383][    C1] Code: 80 f6 45 89 f8 89 d9 48 8b 5c 24 08 e9 ee fe ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  507.024388][    C1] RSP: 0018:ffffc9000288fdb8 EFLAGS: 00000206
[  507.024394][    C1] RAX: 00000000001421a9 RBX: ffff8881033b57c0 RCX: 0000000000000001
[  507.024398][    C1] RDX: 0000000000000000 RSI: ffffffff8def9047 RDI: 0000000000000001
[  507.024402][    C1] RBP: 0000000000000000 R08: ffffffff9011b4b7 R09: 1ffffffff2023696
[  507.024406][    C1] R10: dffffc0000000000 R11: fffffbfff2023697 R12: 0000000000000000
[  507.024410][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  507.024417][    C1]  preempt_schedule_irq+0x4d/0xa0
[  507.024424][    C1]  irqentry_exit+0x599/0x620
[  507.024431][    C1]  ? trace_irq_disable+0x3b/0x150
[  507.024442][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  507.024448][    C1] RIP: 0010:x64_sys_call+0x5a3/0x2240
[  507.024457][    C1] Code: 00 81 fe 5b 01 00 00 0f 8f f4 19 00 00 81 fe 5a 01 00 00 0f 84 1e 4b 38 00 81 fe 5b 01 00 00 0f 84 12 4b 38 00 e9 38 1c 00 00 <81> fe c6 00 00 00 0f 8e 10 08 00 00 81 fe ca 00 00 00 0f 8f b1 0b
[  507.024462][    C1] RSP: 0018:ffffc9000288fee8 EFLAGS: 00000212
[  507.024467][    C1] RAX: 0000000000001385 RBX: ffffc9000288fef0 RCX: 0000000000000046
[  507.024472][    C1] RDX: 0000000000000000 RSI: 00000000000000ca RDI: ffffc9000288ff48
[  507.024475][    C1] RBP: ffffc9000288ff38 R08: ffffffff9011b4b7 R09: 1ffffffff2023696
[  507.024480][    C1] R10: dffffc0000000000 R11: fffffbfff2023697 R12: 00000000000000ca
[  507.024484][    C1] R13: 0000000000000000 R14: ffffc9000288ff48 R15: ffff8881033b57c0
[  507.024492][    C1]  do_syscall_64+0x14d/0xf80
[  507.024499][    C1]  ? trace_irq_disable+0x3b/0x150
[  507.024507][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.024514][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.024520][    C1] RIP: 0033:0x7fd901d9c819
[  507.024527][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.024532][    C1] RSP: 002b:00007fd902b960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  507.024538][    C1] RAX: ffffffffffffffda RBX: 00007fd902015fa8 RCX: 00007fd901d9c819
[  507.024542][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd902015fac
[  507.024546][    C1] RBP: 00007fd902015fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  507.024550][    C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  507.024554][    C1] R13: 00007fd902016038 R14: 00007ffe4593bd10 R15: 00007ffe4593bdf8
[  507.024561][    C1]  </TASK>
[  507.341887][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  507.344489][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  507.509976][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  507.512247][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  507.515203][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  507.518565][   T34] Call Trace:
[  507.519781][   T34]  <TASK>
[  507.520872][   T34]  vpanic+0x56c/0xa60
[  507.522399][   T34]  ? __pfx___schedule+0x10/0x10
[  507.523955][   T34]  ? __pfx_vpanic+0x10/0x10
[  507.525460][   T34]  ? __pfx_console_unlock+0x10/0x10
[  507.527181][   T34]  panic+0xc5/0xd0
[  507.528392][   T34]  ? __pfx_panic+0x10/0x10
[  507.529827][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  507.531892][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  507.534117][   T34]  watchdog+0x1023/0x1030
[  507.535542][   T34]  ? watchdog+0x21a/0x1030
[  507.536980][   T34]  kthread+0x388/0x470
[  507.538331][   T34]  ? __pfx_watchdog+0x10/0x10
[  507.539910][   T34]  ? __pfx_kthread+0x10/0x10
[  507.541427][   T34]  ret_from_fork+0x51e/0xb90
[  507.542931][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  507.544754][   T34]  ? __switch_to+0xc7d/0x1450
[  507.546682][   T34]  ? __pfx_kthread+0x10/0x10
[  507.548495][   T34]  ret_from_fork_asm+0x1a/0x30
[  507.550463][   T34]  </TASK>
[  507.552596][   T34] Kernel Offset: disabled
[  507.554399][   T34] Rebooting in 86400 seconds..
