last executing test programs:

3m23.690407174s ago: executing program 1 (id=638):
r0 = socket$inet6(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

3m23.611002001s ago: executing program 1 (id=641):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000180001037d80bfe8804d0b662a"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854)

3m23.61086397s ago: executing program 1 (id=642):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x5, 0x25, 0x0, &(0x7f0000000340)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3m23.443720303s ago: executing program 1 (id=644):
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x114244, 0x10000, 0xafe8, 0x4, 0x7fff, 0x724c9fd0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m23.071630819s ago: executing program 1 (id=650):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003f000000b0c4bd7f00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000002"], 0x50)

3m21.233678382s ago: executing program 1 (id=668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7a, 0x3, "fd7c400f2ffd10ac56a901205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb9553ffffffffa2bc4978b4999bf4d277bea36acb997e31ab600156796cc60303e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fb4e10be16f523f3208b6670b3bb8a5c8eda900a40"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x4040)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)

3m21.140660569s ago: executing program 32 (id=668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x7a, 0x3, "fd7c400f2ffd10ac56a901205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb9553ffffffffa2bc4978b4999bf4d277bea36acb997e31ab600156796cc60303e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452fb4e10be16f523f3208b6670b3bb8a5c8eda900a40"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x4040)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0)

1m9.282590516s ago: executing program 3 (id=2806):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000000)=[{r1, 0x4636}, {r2, 0xc198}, {r0, 0x8023}], 0x3, 0x0, 0x0, 0x0)
close(r0)

1m9.201979417s ago: executing program 3 (id=2810):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1m9.110893483s ago: executing program 3 (id=2812):
socket$rxrpc(0x21, 0x2, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x40001, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x100, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x5, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0xf9, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0xb, 0x23, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x40000005, 0x9, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}})
unshare(0xa020480)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m9.038641415s ago: executing program 3 (id=2814):
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9d9055, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)

1m9.037938932s ago: executing program 3 (id=2816):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

1m8.983522455s ago: executing program 3 (id=2820):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000cc0)=""/226, 0xe2}], 0x1}, 0xa2a}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0)

1m8.814834985s ago: executing program 33 (id=2820):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000cc0)=""/226, 0xe2}], 0x1}, 0xa2a}], 0x1, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0)

36.273944499s ago: executing program 0 (id=3140):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280)
syz_emit_ethernet(0x32, &(0x7f0000000380)={@multicast, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x38, 0x24, 0x66, 0x0, 0xa, 0x21, 0x0, @multicast2, @local}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x1, 0x6, "8dc878", 0x9, "0ed80d"}}}}}}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20044840)
syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @random="8bcacd371da6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d12033618bafeb3926975d1b201ba9ebaf9fbe96171f710c6816f8a922913313", "817ff05ca00092003daf5a835778b7d83fa94c0efbb5874251b68892848995c46f8b736ecde1e6709962e4b4600a8f9a", "7d8f4da9806440cb89f2939c57545847262620ead257b1d79ea45e63", {"5c22878c87f7d790e5d5963195b3172a", "db5701ffac0e726159a1af1eb26adef8"}}}}}}}, 0x0)

36.273739158s ago: executing program 0 (id=3141):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x2, 0x0, 0x0)

36.212871241s ago: executing program 0 (id=3142):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000580)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r2 = socket$netlink(0x10, 0x3, 0x9)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/18, 0x12}], 0x1, 0x4, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)

36.050126757s ago: executing program 0 (id=3146):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x1d1)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x988046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

35.992107527s ago: executing program 0 (id=3148):
r0 = socket(0x1, 0x5, 0x0)
getsockname$packet(r0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x1, 0x0, 0x3, 0x100}})

35.714289988s ago: executing program 0 (id=3156):
syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)

35.591158613s ago: executing program 34 (id=3156):
syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0)

21.223586452s ago: executing program 5 (id=3377):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x2b, 0x0, 0x0)

21.154438755s ago: executing program 5 (id=3378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)

21.094455047s ago: executing program 5 (id=3380):
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180))

21.094134664s ago: executing program 5 (id=3382):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)

21.024148832s ago: executing program 5 (id=3384):
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x400454d1, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x23, 0x2, 0xff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0xc, 0x5, 0x7, 0xc1}, 0x50)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a}, 0x28)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x50, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d7}, 0x0)
mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

20.905521923s ago: executing program 5 (id=3385):
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082)

5.836601673s ago: executing program 35 (id=3385):
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082)

1.031726617s ago: executing program 2 (id=3642):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16)

762.311721ms ago: executing program 2 (id=3645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4, 0x3f}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4041}, 0x2400c800)

524.066229ms ago: executing program 2 (id=3648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040040)

523.959834ms ago: executing program 6 (id=3581):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r1, @in={{0x2, 0x4e21, @empty}}, 0xfffe, 0xb92}, 0x90)

434.309792ms ago: executing program 2 (id=3650):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0)

371.232985ms ago: executing program 2 (id=3652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4, 0x4}], 0x3bc, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r4=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000340), 0x56)
sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

292.516187ms ago: executing program 4 (id=3653):
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1)

292.122049ms ago: executing program 4 (id=3654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x21, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

182.973333ms ago: executing program 4 (id=3655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

133.461451ms ago: executing program 4 (id=3656):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x3}, 0x9806, 0x0, 0x2, 0x8, 0x0, 0x76385604, 0xffff, 0x0, 0x2, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x15}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
socket$kcm(0xa, 0x1, 0x106)

83.125927ms ago: executing program 2 (id=3657):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

245.915µs ago: executing program 4 (id=3658):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc)

0s ago: executing program 4 (id=3659):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

kernel console output (not intermixed with test programs):

0
[   96.694217][ T7296]  do_swap_page+0x3fb/0x4c10
[   96.694240][ T7296]  ? __lock_acquire+0x747/0x2de0
[   96.694252][ T7296]  ? do_swap_page+0x126/0x4c10
[   96.694264][ T7296]  ? __pfx_do_swap_page+0x10/0x10
[   96.694274][ T7296]  ? __pte_offset_map+0x1ae/0x240
[   96.694289][ T7296]  ? pte_offset_map_rw_nolock+0xea/0x160
[   96.694303][ T7296]  handle_mm_fault+0x1398/0x3750
[   96.694322][ T7296]  ? handle_mm_fault+0xf1/0x3750
[   96.694341][ T7296]  ? __pfx_handle_mm_fault+0x10/0x10
[   96.694352][ T7296]  ? lock_vma_under_rcu+0x45a/0x500
[   96.694374][ T7296]  ? perf_trace_preemptirq_template+0xb3/0x350
[   96.694396][ T7296]  do_user_addr_fault+0xa4f/0x1340
[   96.694416][ T7296]  ? trace_page_fault_user+0x84/0x1e0
[   96.694429][ T7296]  exc_page_fault+0x6a/0xc0
[   96.694444][ T7296]  asm_exc_page_fault+0x26/0x30
[   96.694456][ T7296] RIP: 0033:0x7f5b3bf596be
[   96.694471][ T7296] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24
[   96.694479][ T7296] RSP: 002b:00007ffd0ecaa460 EFLAGS: 00010246
[   96.694491][ T7296] RAX: 0000000000000000 RBX: 000055558f6e9500 RCX: 00007f5b3bf5ed8e
[   96.694499][ T7296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   96.694506][ T7296] RBP: 00007f5b3c227da0 R08: 0000000000000000 R09: 0000000000000000
[   96.694513][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000179ed
[   96.694521][ T7296] R13: 00007f5b3c225fac R14: 00000000000176df R15: 00007ffd0ecaa5e0
[   96.694543][ T7296]  </TASK>
[   96.696916][ T7296] memory: usage 307200kB, limit 307200kB, failcnt 2311
[   96.696959][ T7296] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0
[   96.696969][ T7296] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   96.696975][ T7296] Memory cgroup stats for /syz1:
[   96.697139][ T7296] cache 0
[   96.697146][ T7296] rss 0
[   96.697150][ T7296] rss_huge 0
[   96.697154][ T7296] shmem 0
[   96.697158][ T7296] mapped_file 0
[   96.697162][ T7296] dirty 0
[   96.697166][ T7296] writeback 0
[   96.697170][ T7296] workingset_refault_anon 8
[   96.697175][ T7296] workingset_refault_file 6
[   96.697179][ T7296] swap 110592
[   96.697183][ T7296] swapcached 176128
[   96.697187][ T7296] pgpgin 8710
[   96.697192][ T7296] pgpgout 8707
[   96.697195][ T7296] pgfault 19513
[   96.697200][ T7296] pgmajfault 10
[   96.697204][ T7296] inactive_anon 8192
[   96.697208][ T7296] active_anon 4096
[   96.697212][ T7296] inactive_file 0
[   96.697216][ T7296] active_file 0
[   96.697220][ T7296] unevictable 0
[   96.697224][ T7296] hierarchical_memory_limit 314572800
[   96.697229][ T7296] hierarchical_memsw_limit 9223372036854771712
[   96.697234][ T7296] total_cache 0
[   96.697238][ T7296] total_rss 0
[   96.697242][ T7296] total_rss_huge 0
[   96.697246][ T7296] total_shmem 0
[   96.697250][ T7296] total_mapped_file 0
[   96.697255][ T7296] total_dirty 0
[   96.697259][ T7296] total_writeback 0
[   96.697263][ T7296] total_workingset_refault_anon 8
[   96.697267][ T7296] total_workingset_refault_file 6
[   96.697272][ T7296] total_swap 110592
[   96.697276][ T7296] total_swapcached 176128
[   96.697280][ T7296] total_pgpgin 8710
[   96.697284][ T7296] total_pgpgout 8707
[   96.697290][ T7296] total_pgfault 19513
[   96.697294][ T7296] total_pgmajfault 10
[   96.697297][ T7296] total_inactive_anon 8192
[   96.697301][ T7296] total_active_anon 4096
[   96.697306][ T7296] total_inactive_file 0
[   96.697311][ T7296] total_active_file 0
[   96.697314][ T7296] total_unevictable 0
[   96.697318][ T7296] anon_cost 0
[   96.697322][ T7296] file_cost 0
[   96.697326][ T7296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.650,pid=7296,uid=0
[   96.697473][ T7296] Memory cgroup out of memory: Killed process 7296 (syz.1.650) total-vm:102264kB, anon-rss:1264kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   96.941808][ T5590] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   96.941835][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   96.941849][ T5590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.941856][ T5590] Call Trace:
[   96.941861][ T5590]  <TASK>
[   96.941866][ T5590]  dump_stack_lvl+0xe8/0x150
[   96.941889][ T5590]  dump_header+0xd3/0x4b0
[   96.941907][ T5590]  oom_kill_process+0x3ab/0x9e0
[   96.941923][ T5590]  out_of_memory+0x1064/0x1480
[   96.941963][ T5590]  ? try_charge_memcg+0xc32/0x15e0
[   96.941992][ T5590]  ? __pfx_out_of_memory+0x10/0x10
[   96.942008][ T5590]  ? do_raw_spin_unlock+0x4d/0x200
[   96.942027][ T5590]  try_charge_memcg+0xcdf/0x15e0
[   96.942078][ T5590]  ? __pfx_try_charge_memcg+0x10/0x10
[   96.942095][ T5590]  ? lock_acquire+0x115/0x350
[   96.942121][ T5590]  ? charge_memcg+0x47/0x310
[   96.942162][ T5590]  charge_memcg+0x1dd/0x310
[   96.942180][ T5590]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[   96.942196][ T5590]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[   96.942216][ T5590]  swap_cache_alloc_folio+0x4de/0x990
[   96.942240][ T5590]  swap_cluster_readahead+0x4f2/0x630
[   96.942258][ T5590]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   96.942288][ T5590]  swapin_readahead+0x1a3/0xc50
[   96.942311][ T5590]  ? __pfx_swapin_readahead+0x10/0x10
[   96.942329][ T5590]  ? swap_table_get+0x1e/0x260
[   96.942341][ T5590]  ? swap_table_get+0x1e/0x260
[   96.942352][ T5590]  ? swap_table_get+0x1e/0x260
[   96.942366][ T5590]  ? swap_table_get+0x216/0x260
[   96.942381][ T5590]  ? swap_cache_get_folio+0x2e7/0x2f0
[   96.942399][ T5590]  do_swap_page+0x3fb/0x4c10
[   96.942423][ T5590]  ? __lock_acquire+0x747/0x2de0
[   96.942435][ T5590]  ? do_swap_page+0x126/0x4c10
[   96.942448][ T5590]  ? __pfx_do_swap_page+0x10/0x10
[   96.942458][ T5590]  ? __pte_offset_map+0x1ae/0x240
[   96.942473][ T5590]  ? pte_offset_map_rw_nolock+0xea/0x160
[   96.942487][ T5590]  handle_mm_fault+0x1398/0x3750
[   96.942508][ T5590]  ? handle_mm_fault+0xf1/0x3750
[   96.942530][ T5590]  ? __pfx_handle_mm_fault+0x10/0x10
[   96.942541][ T5590]  ? lock_vma_under_rcu+0x45a/0x500
[   96.942565][ T5590]  ? perf_trace_preemptirq_template+0xb3/0x350
[   96.942589][ T5590]  do_user_addr_fault+0xa4f/0x1340
[   96.942610][ T5590]  ? trace_page_fault_user+0x84/0x1e0
[   96.942624][ T5590]  exc_page_fault+0x6a/0xc0
[   96.942639][ T5590]  asm_exc_page_fault+0x26/0x30
[   96.942652][ T5590] RIP: 0033:0x7f5b3bf5ed8e
[   96.942665][ T5590] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   96.942675][ T5590] RSP: 002b:00007ffd0ecaa658 EFLAGS: 00010246
[   96.942687][ T5590] RAX: 0000000000000000 RBX: 000055558f6e9500 RCX: 00007f5b3bf5ed8e
[   96.942696][ T5590] RDX: 00007ffd0ecaa6b0 RSI: 0000000000000000 RDI: 0000000000000000
[   96.942703][ T5590] RBP: 00007ffd0ecaa71c R08: 0000000000000000 R09: 0000000000000000
[   96.942710][ T5590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[   96.942717][ T5590] R13: 00000000000927c0 R14: 00000000000176a4 R15: 00007ffd0ecaa770
[   96.942737][ T5590]  </TASK>
[   96.942971][ T5590] memory: usage 307200kB, limit 307200kB, failcnt 2422
[   96.942981][ T5590] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0
[   96.942989][ T5590] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   96.942997][ T5590] Memory cgroup stats for /syz1:
[   96.964756][ T5590] cache 0
[   96.964767][ T5590] rss 0
[   96.964770][ T5590] rss_huge 0
[   96.964783][ T5590] shmem 0
[   96.964786][ T5590] mapped_file 0
[   96.964790][ T5590] dirty 0
[   96.964793][ T5590] writeback 0
[   96.964797][ T5590] workingset_refault_anon 8
[   96.964802][ T5590] workingset_refault_file 6
[   96.964806][ T5590] swap 110592
[   96.964810][ T5590] swapcached 176128
[   96.964813][ T5590] pgpgin 8710
[   96.964817][ T5590] pgpgout 8707
[   96.964820][ T5590] pgfault 19515
[   96.964824][ T5590] pgmajfault 10
[   96.964828][ T5590] inactive_anon 8192
[   96.964832][ T5590] active_anon 4096
[   96.964837][ T5590] inactive_file 0
[   96.964841][ T5590] active_file 0
[   96.964844][ T5590] unevictable 0
[   96.964847][ T5590] hierarchical_memory_limit 314572800
[   96.964851][ T5590] hierarchical_memsw_limit 9223372036854771712
[   96.964856][ T5590] total_cache 0
[   96.964861][ T5590] total_rss 0
[   96.964865][ T5590] total_rss_huge 0
[   96.964869][ T5590] total_shmem 0
[   96.964872][ T5590] total_mapped_file 0
[   96.964876][ T5590] total_dirty 0
[   96.964881][ T5590] total_writeback 0
[   96.964885][ T5590] total_workingset_refault_anon 8
[   96.964889][ T5590] total_workingset_refault_file 6
[   96.964893][ T5590] total_swap 110592
[   96.964897][ T5590] total_swapcached 176128
[   96.964900][ T5590] total_pgpgin 8710
[   96.964904][ T5590] total_pgpgout 8707
[   96.964907][ T5590] total_pgfault 19515
[   96.964911][ T5590] total_pgmajfault 10
[   96.964915][ T5590] total_inactive_anon 8192
[   96.964918][ T5590] total_active_anon 4096
[   96.964922][ T5590] total_inactive_file 0
[   96.964926][ T5590] total_active_file 0
[   96.964930][ T5590] total_unevictable 0
[   96.964962][ T5590] anon_cost 0
[   96.964966][ T5590] file_cost 0
[   96.964970][ T5590] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor,pid=5590,uid=0
[   96.965034][ T5590] Memory cgroup out of memory: Killed process 5590 (syz-executor) total-vm:98292kB, anon-rss:1296kB, file-rss:21788kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0
[   97.235319][ T7297] syz.1.650 (7297) used greatest stack depth: 19712 bytes left
[   97.460584][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'.
[   97.664399][ T7339] syzkaller0: entered promiscuous mode
[   97.664418][ T7339] syzkaller0: entered allmulticast mode
[   98.116899][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.118490][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.119738][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.121374][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.121842][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.267343][ T7366] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[   98.440357][ T7376] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   98.455832][ T7349] rxe_eth0 speed is unknown, defaulting to 1000
[   98.538842][ T7381] Bluetooth: MGMT ver 1.23
[   98.575665][ T7349] lo speed is unknown, defaulting to 1000
[   98.873242][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.873372][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.873459][ T7349] bridge_slave_0: entered allmulticast mode
[   98.877002][ T7349] bridge_slave_0: entered promiscuous mode
[   98.892473][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.892599][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.892920][ T7349] bridge_slave_1: entered allmulticast mode
[   98.903597][ T7349] bridge_slave_1: entered promiscuous mode
[   98.934857][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.938082][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.965412][ T7349] team0: Port device team_slave_0 added
[   98.967732][ T7349] team0: Port device team_slave_1 added
[   98.991263][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.991275][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.991289][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.995385][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.995397][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.995411][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.029769][ T7349] hsr_slave_0: entered promiscuous mode
[   99.030276][ T7349] hsr_slave_1: entered promiscuous mode
[   99.030711][ T7349] debugfs: 'hsr0' already exists in 'hsr'
[   99.030721][ T7349] Cannot create hsr debugfs directory
[   99.140539][ T7349] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   99.143599][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.144229][ T7349] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   99.149666][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.150403][ T7349] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   99.162052][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.163569][ T7349] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.169395][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.194908][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.194984][ T7349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.195179][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.195227][ T7349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.249200][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.265705][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.267120][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.287495][ T7349] 8021q: adding VLAN 0 to HW filter on device team0
[   99.298093][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.298168][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.309859][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.309900][ T6508] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.341489][ T7403] nbd: socks must be embedded in a SOCK_ITEM attr
[   99.586219][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.625919][ T7349] veth0_vlan: entered promiscuous mode
[   99.629546][ T7349] veth1_vlan: entered promiscuous mode
[   99.650728][ T7349] veth0_macvtap: entered promiscuous mode
[   99.654636][ T7349] veth1_macvtap: entered promiscuous mode
[   99.672497][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.679008][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.754272][ T5459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.754303][ T5459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.754325][ T5459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.754345][ T5459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.772613][ T6510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.772625][ T6510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.816736][ T6508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.816749][ T6508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.872808][ T7428] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   99.906843][ T7428] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  100.146382][ T5598] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  100.219186][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'.
[  100.223611][ T5598] Bluetooth: hci0: command tx timeout
[  100.745345][ T7459] netlink: 'syz.3.706': attribute type 2 has an invalid length.
[  100.745878][ T7459] netlink: 'syz.3.706': attribute type 2 has an invalid length.
[  101.581823][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.713'.
[  101.827964][ T7499] netlink: 'syz.2.722': attribute type 4 has an invalid length.
[  101.827975][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'.
[  102.294671][ T5598] Bluetooth: hci0: command tx timeout
[  103.029986][ T7534] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  103.181149][ T7534] bond2 (unregistering): Released all slaves
[  104.075248][ T5598] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  104.130391][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.745'.
[  104.396297][ T5598] Bluetooth: hci0: command tx timeout
[  105.265779][ T7586] netlink: 64843 bytes leftover after parsing attributes in process `syz.3.762'.
[  105.369734][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'.
[  105.677601][ T7618] hsr0: entered promiscuous mode
[  105.677616][ T7618] hsr0: entered allmulticast mode
[  105.677622][ T7618] hsr_slave_0: entered allmulticast mode
[  105.677629][ T7618] hsr_slave_1: entered allmulticast mode
[  105.742732][ T7625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.463625][ T5598] Bluetooth: hci0: command tx timeout
[  108.352262][ T7657] netlink: 244 bytes leftover after parsing attributes in process `syz.0.794'.
[  108.515870][ T7663] netlink: 'syz.3.796': attribute type 1 has an invalid length.
[  108.515893][ T7663] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.796'.
[  108.723991][ T7669] syzkaller0: entered promiscuous mode
[  108.724003][ T7669] syzkaller0: entered allmulticast mode
[  108.732842][ T7669] tipc: Started in network mode
[  108.732856][ T7669] tipc: Node identity e645f2f3a02c, cluster identity 4711
[  108.733005][ T7669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.764183][ T7669] tipc: Resetting bearer <eth:syzkaller0>
[  108.772575][ T7667] tipc: Resetting bearer <eth:syzkaller0>
[  108.795450][ T7667] tipc: Disabling bearer <eth:syzkaller0>
[  109.583533][   T37] IPVS: starting estimator thread 0...
[  109.673214][ T7696] IPVS: using max 47 ests per chain, 112800 per kthread
[  109.692975][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'.
[  109.704665][ T7703] syzkaller1: entered promiscuous mode
[  109.704680][ T7703] syzkaller1: entered allmulticast mode
[  109.818862][ T7712] netlink: 72 bytes leftover after parsing attributes in process `syz.3.818'.
[  109.871188][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'.
[  111.188320][ T7752] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available
[  111.270223][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'.
[  111.519800][ T7761] bond2: option resend_igmp: invalid value (2878)
[  111.519814][ T7761] bond2: option resend_igmp: allowed values 0 - 255
[  111.521114][ T7761] bond2 (unregistering): Released all slaves
[  111.608817][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'.
[  111.675327][ T7773] netlink: 76 bytes leftover after parsing attributes in process `syz.3.843'.
[  111.675682][ T7773] syzkaller1: entered promiscuous mode
[  111.675690][ T7773] syzkaller1: entered allmulticast mode
[  112.218631][ T7793] netlink: 'syz.2.850': attribute type 1 has an invalid length.
[  112.238729][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'.
[  112.300731][ T7797] netlink: 606 bytes leftover after parsing attributes in process `syz.2.852'.
[  112.417631][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'.
[  112.417652][ T7807] netlink: 'syz.3.857': attribute type 30 has an invalid length.
[  112.417660][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'.
[  113.536373][ T7832] netlink: 'syz.3.869': attribute type 21 has an invalid length.
[  114.207320][ T5598] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  114.348693][ T7870] netlink: 'syz.3.885': attribute type 6 has an invalid length.
[  114.604987][ T7872] netlink: 'syz.3.886': attribute type 17 has an invalid length.
[  114.605014][ T7872] bond0: option all_slaves_active: invalid value (48)
[  114.748085][ T7875] syzkaller0: entered promiscuous mode
[  114.748103][ T7875] syzkaller0: entered allmulticast mode
[  114.882838][ T7877] __nla_validate_parse: 4 callbacks suppressed
[  114.882856][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'.
[  114.882869][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'.
[  114.937163][ T7850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.044840][ T7888] Bluetooth: MGMT ver 1.23
[  115.167815][ T7896] IPv6: Can't replace route, no match found
[  115.285873][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'.
[  115.399626][ T7907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.900'.
[  115.412869][ T7908] netlink: 'syz.0.899': attribute type 16 has an invalid length.
[  115.412889][ T7908] netlink: 'syz.0.899': attribute type 17 has an invalid length.
[  115.449051][ T7908] tipc: Resetting bearer <eth:team0>
[  115.449672][ T7908] tipc: Resetting bearer <eth:team0>
[  115.590671][ T7908] 8021q: adding VLAN 0 to HW filter on device batadv1
[  115.592476][ T7908] bond1: left promiscuous mode
[  115.592487][ T7908] bridge1: left promiscuous mode
[  115.604689][ T7908] vlan2: left allmulticast mode
[  115.604706][ T7908] bond1: left allmulticast mode
[  115.604713][ T7908] bridge1: left allmulticast mode
[  115.611103][ T7908] geneve2: left promiscuous mode
[  115.936790][ T7923] syzkaller0: entered promiscuous mode
[  115.936802][ T7923] syzkaller0: entered allmulticast mode
[  116.024778][ T7925] bridge0: port 3(ip6gretap0) entered blocking state
[  116.024974][ T7925] bridge0: port 3(ip6gretap0) entered disabled state
[  116.026844][ T7925] ip6gretap0: entered allmulticast mode
[  116.027832][ T7925] ip6gretap0: entered promiscuous mode
[  116.028285][ T7925] bridge0: port 3(ip6gretap0) entered blocking state
[  116.028374][ T7925] bridge0: port 3(ip6gretap0) entered forwarding state
[  116.337542][ T7943] netlink: 4224 bytes leftover after parsing attributes in process `syz.0.915'.
[  116.462982][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.2.921'.
[  116.463000][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.2.921'.
[  116.816078][ T7982] syzkaller0: entered promiscuous mode
[  116.816097][ T7982] syzkaller0: entered allmulticast mode
[  116.906771][ T7984] nbd: must specify at least one socket
[  116.976677][ T7990] xt_LOG: level 115 >= 8
[  117.034145][ T7992] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.052536][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.052557][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.080163][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.087671][ T7992] bond2: (slave bond0): Enslaving as an active interface with a down link
[  117.151568][ T7992] bond2 (unregistering): (slave bond0): Releasing active interface
[  117.156064][ T7992] bond2 (unregistering): Released all slaves
[  117.186592][ T8006] netlink: 'syz.0.936': attribute type 2 has an invalid length.
[  117.186611][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.209608][ T8006] : entered promiscuous mode
[  117.390973][ T8020] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  118.056480][ T8046] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11
[  118.277328][ T8048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.277468][ T8048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.420309][ T8055] netlink: 'syz.3.966': attribute type 10 has an invalid length.
[  119.021671][ T8055] team0 (unregistering): Port device team_slave_0 removed
[  119.036618][ T8055] team0 (unregistering): Port device team_slave_1 removed
[  119.540331][ T8082] netlink: 'syz.3.977': attribute type 2 has an invalid length.
[  120.662297][ T8114] __nla_validate_parse: 5 callbacks suppressed
[  120.662311][ T8114] netlink: 71 bytes leftover after parsing attributes in process `syz.3.988'.
[  120.687534][ T8116] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  121.000268][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.069446][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'.
[  121.235379][ T8138] xt_hashlimit: size too large, truncated to 1048576
[  121.235412][ T8138] xt_hashlimit: max too large, truncated to 1048576
[  121.304659][ T8141] tipc: Enabling of bearer <!{:\> rejected, media not registered
[  121.404862][ T8151] netlink: 'syz.0.1005': attribute type 2 has an invalid length.
[  121.404880][ T8151] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1005'.
[  121.802178][ T8173] netlink: 'syz.2.1015': attribute type 10 has an invalid length.
[  121.931163][   T13] syzkaller0: tun_net_xmit 76
[  121.931354][   T13] syzkaller0: tun_net_xmit 48
[  121.933747][ T8178] syzkaller0: create flow: hash 4065287944 index 2
[  121.963263][ T5642] syzkaller0: tun_net_xmit 76
[  122.004458][ T8183] syzkaller0: delete flow: hash 4065287944 index 2
[  122.038027][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'.
[  123.139923][ T8187] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1020'.
[  123.308691][ T8203] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  123.308691][ T8203] Please contact the netfilter-devel mailing list or update your nftables rules.
[  123.350049][ T8198] netlink: 'syz.0.1025': attribute type 29 has an invalid length.
[  123.551629][ T8204] netlink: 'syz.0.1025': attribute type 29 has an invalid length.
[  123.691324][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  123.691343][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  123.691391][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  124.183249][ T8231] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  124.231993][ T8229] netlink: Unknown conntrack attr (0)
[  124.259983][ T8229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.819852][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'.
[  124.997699][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.098649][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  125.098681][ T8276] netlink: 'syz.2.1060': attribute type 11 has an invalid length.
[  125.472887][ T8285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.621158][ T8296] netlink: 'syz.0.1070': attribute type 2 has an invalid length.
[  125.621255][ T8296] netlink: 'syz.0.1070': attribute type 8 has an invalid length.
[  125.737735][ T8304] __nla_validate_parse: 2 callbacks suppressed
[  125.737746][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'.
[  127.225522][ T8326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.356498][ T8334] IPVS: Unknown mcast interface: lo
[  127.498431][ T6508] IPVS: starting estimator thread 0...
[  127.583296][ T8345] IPVS: using max 48 ests per chain, 115200 per kthread
[  127.669725][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  127.748538][ T8367] sctp: [Deprecated]: syz.2.1102 (pid 8367) Use of int in maxseg socket option.
[  127.748538][ T8367] Use struct sctp_assoc_value instead
[  127.825594][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1105'.
[  127.873904][ T8373] netlink: 'syz.3.1103': attribute type 10 has an invalid length.
[  127.874095][ T8373] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1103'.
[  128.005376][ T8389] sctp: [Deprecated]: syz.0.1112 (pid 8389) Use of int in maxseg socket option.
[  128.005376][ T8389] Use struct sctp_assoc_value instead
[  128.146273][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'.
[  129.296467][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'.
[  129.296550][ T8447] openvswitch: netlink: Message has 4 unknown bytes.
[  129.761655][ T8469] bridge0: port 3(ip6gretap0) entered disabled state
[  129.762034][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.763226][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.826226][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.830788][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.963282][ T5459] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.963319][ T5459] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.963339][ T5459] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.963360][ T5459] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.120548][ T8487] netlink: 'syz.2.1154': attribute type 10 has an invalid length.
[  130.448721][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1167'.
[  130.565234][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'.
[  130.602641][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  130.657169][ T8533] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8
[  130.808084][ T8537] netlink: 'syz.3.1178': attribute type 11 has an invalid length.
[  130.907037][ T8543] netlink: 'syz.0.1181': attribute type 1 has an invalid length.
[  130.979127][ T8543] bond2: (slave geneve3): making interface the new active one
[  130.980006][ T8543] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  130.982610][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1184'.
[  131.004817][ T5459] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  131.004848][ T5459] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  131.004868][ T5459] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  131.004887][ T5459] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  131.005456][ T8543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1181'.
[  131.008181][ T8543] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.041449][ T8554] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[  131.102775][ T8559] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1186'.
[  131.197398][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  131.458039][ T8590] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1204'.
[  131.458205][ T8590] netlink: 'syz.0.1204': attribute type 9 has an invalid length.
[  131.458216][ T8590] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1204'.
[  131.458224][ T8590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1204'.
[  131.639182][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'.
[  131.769374][ T8617] openvswitch: netlink: IPv6 tunnel dst address is zero
[  131.990180][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'.
[  132.619185][ T8645] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  132.939462][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'.
[  132.952169][ T8671] netlink: 'syz.2.1238': attribute type 1 has an invalid length.
[  133.096608][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  133.096654][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  133.721766][ T8705] bond3: option packets_per_slave: invalid value (134217728)
[  133.721786][ T8705] bond3: option packets_per_slave: allowed values 0 - 65535
[  133.725674][ T8705] bond3 (unregistering): Released all slaves
[  137.395186][ T5598] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  137.541964][ T5598] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  137.798406][ T8811] netlink: 'syz.2.1274': attribute type 2 has an invalid length.
[  137.798419][ T8811] __nla_validate_parse: 2 callbacks suppressed
[  137.798424][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'.
[  138.601294][ T8828] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1280'.
[  138.862136][ T8839] x_tables: unsorted entry at hook 2
[  142.788575][ T8885] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  143.579786][ T8907] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  143.581081][ T8907] bond1 (unregistering): Released all slaves
[  144.985299][ T8944] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  144.985406][ T8944] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  144.985569][ T8944] veth0_virt_wifi: entered allmulticast mode
[  144.987100][ T8944] veth0_virt_wifi: entered promiscuous mode
[  144.987579][ T8944] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  144.987657][ T8944] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  145.797643][ T8960] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  145.852011][ T8893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.329875][ T9004] netlink: 976 bytes leftover after parsing attributes in process `syz.3.1343'.
[  146.329890][ T9004] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  146.470873][ T9007] netlink: 'syz.2.1344': attribute type 4 has an invalid length.
[  146.470885][ T9007] netlink: 'syz.2.1344': attribute type 10 has an invalid length.
[  146.470890][ T9007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1344'.
[  146.486863][ T9007] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.565624][ T9009] netlink: 'syz.2.1345': attribute type 1 has an invalid length.
[  147.371578][ T9024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1348'.
[  149.429900][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'.
[  149.429916][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'.
[  149.444415][ T9041] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) !
[  151.034116][ T9054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.168350][ T9061] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1367'.
[  151.171607][ T9066] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1369'.
[  151.541369][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  151.547406][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  151.737617][ T9083] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1376'.
[  151.913793][ T9084] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1367'.
[  151.915624][ T9084] netlink: 'syz.2.1367': attribute type 21 has an invalid length.
[  151.915633][ T9084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1367'.
[  151.915666][ T9084] netlink: 'syz.2.1367': attribute type 4 has an invalid length.
[  151.915671][ T9084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1367'.
[  152.569853][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1380'.
[  152.571793][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1380'.
[  152.578298][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1380'.
[  152.904244][   T34] audit: type=1107 audit(1792445548.974:2): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j>	'
[  153.326731][ T9138] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1400'.
[  153.341691][ T9138] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  153.473488][ T9148] ipt_rpfilter: unknown options
[  153.628877][ T9159] ip_tables: iptables: counters copy to user failed while replacing table
[  153.708639][ T9166] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  153.716962][ T9166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  154.143003][ T9208] netlink: 'syz.0.1435': attribute type 10 has an invalid length.
[  154.148222][ T9208] tipc: Resetting bearer <eth:team0>
[  154.164385][ T9208] tipc: Disabling bearer <eth:team0>
[  154.193689][ T9217] netlink: Invalid conntrack timeout
[  154.193704][ T9217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.486537][ T9229] vlan0: entered promiscuous mode
[  154.486551][ T9229] gretap0: entered promiscuous mode
[  154.743254][ T9241] netlink: 'syz.2.1449': attribute type 3 has an invalid length.
[  155.710885][ T9285] netlink: Conntrack attr has 8 unknown bytes
[  155.711061][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.810455][ T5598] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  156.178720][ T9309] netlink: zone id is out of range
[  156.178729][ T9309] netlink: zone id is out of range
[  156.178732][ T9309] netlink: zone id is out of range
[  156.178735][ T9309] netlink: zone id is out of range
[  156.178738][ T9309] netlink: zone id is out of range
[  156.178741][ T9309] netlink: zone id is out of range
[  156.178878][ T9309] netlink: zone id is out of range
[  156.178882][ T9309] netlink: zone id is out of range
[  156.178884][ T9309] netlink: zone id is out of range
[  156.178887][ T9309] netlink: zone id is out of range
[  156.986344][ T9304] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  157.143327][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.143354][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.143372][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  157.165177][ T5459] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.165202][ T5459] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.165216][ T5459] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  157.165253][ T5459] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.165268][ T5459] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.165283][ T5459] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  157.165305][ T5459] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.165319][ T5459] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.165334][ T5459] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  157.246712][ T9320] __nla_validate_parse: 3 callbacks suppressed
[  157.246729][ T9320] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1485'.
[  158.858721][ T9360] netlink: 'syz.3.1504': attribute type 19 has an invalid length.
[  158.858740][ T9360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1504'.
[  159.000427][ T9372] netlink: 'syz.0.1510': attribute type 5 has an invalid length.
[  159.447030][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1524'.
[  159.971338][ T9426] netlink: 'syz.2.1532': attribute type 10 has an invalid length.
[  159.994374][ T9426] bond0: (slave bond_slave_0): Releasing backup interface
[  160.175856][ T9430] raw_sendmsg: syz.3.1534 forgot to set AF_INET. Fix it!
[  161.408536][ T9479] net_ratelimit: 496 callbacks suppressed
[  161.408770][ T9479] Set syz1 is full, maxelem 237 reached
[  161.417380][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'.
[  161.754319][ T9491] netlink: 'syz.2.1560': attribute type 2 has an invalid length.
[  161.754332][ T9491] netlink: 151 bytes leftover after parsing attributes in process `syz.2.1560'.
[  162.396156][ T9518] Bluetooth: hci0: unsupported parameter 5135
[  162.396169][ T9518] Bluetooth: hci0: unsupported parameter 8192
[  162.396174][ T9518] Bluetooth: hci0: unsupported parameter 5135
[  162.396178][ T9518] Bluetooth: hci0: unsupported parameter 8192
[  162.449579][ T9516] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1572'.
[  162.458104][ T9520] ip_tables: iptables: counters copy to user failed while replacing table
[  162.490826][ T9520] syzkaller1: entered promiscuous mode
[  162.490845][ T9520] syzkaller1: entered allmulticast mode
[  162.631675][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'.
[  162.641229][ T9536] veth0_macvtap: left promiscuous mode
[  162.781784][ T9544] bond0: invalid NS target ff00:0:0:f9:: specified for addition
[  162.781799][ T9544] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  162.810639][ T9546] netlink: 'syz.0.1586': attribute type 3 has an invalid length.
[  162.866073][ T9551] netlink: 'syz.0.1588': attribute type 1 has an invalid length.
[  162.866092][ T9551] netlink: 'syz.0.1588': attribute type 1 has an invalid length.
[  164.137483][ T9589] netlink: 'syz.3.1605': attribute type 63 has an invalid length.
[  164.137532][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1605'.
[  165.307295][ T9616] netlink: 'syz.2.1613': attribute type 1 has an invalid length.
[  165.797578][ T9630] ip6erspan0: entered allmulticast mode
[  165.926498][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1624'.
[  165.926510][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'.
[  166.073920][ T9643] netlink: 'syz.3.1627': attribute type 22 has an invalid length.
[  166.073962][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'.
[  166.094627][ T9645] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1628'.
[  166.118238][ T9645] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  166.291331][ T9665] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1635'.
[  166.396507][ T9667] mac80211_hwsim hwsim5 ..c: renamed from wlan1
[  167.718328][ T9719] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1660'.
[  167.752147][ T9721] netlink: 'syz.0.1661': attribute type 6 has an invalid length.
[  169.088062][ T9733] ip_tables: iptables: counters copy to user failed while replacing table
[  169.638302][ T9735] netlink: 296 bytes leftover after parsing attributes in process `syz.3.1666'.
[  169.667478][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'.
[  169.864769][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'.
[  169.888492][ T9745] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.888636][ T9745] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  170.071109][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.071322][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.071382][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.524860][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.525015][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.525060][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1682'.
[  170.934817][ T9792] netlink: 'syz.2.1691': attribute type 10 has an invalid length.
[  173.907185][ T9813] ip6tnl1: entered promiscuous mode
[  174.082189][ T9832] netlink: 'syz.0.1709': attribute type 9 has an invalid length.
[  174.212072][ T9844] SET target dimension over the limit!
[  174.255825][ T9850] netlink: 'syz.3.1717': attribute type 2 has an invalid length.
[  175.505608][ T9889] netlink: 'syz.3.1728': attribute type 39 has an invalid length.
[  175.792586][ T9892] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  176.135053][ T5591] Bluetooth: hci2: command 0x0406 tx timeout
[  176.283587][ T9898] __nla_validate_parse: 4 callbacks suppressed
[  176.283755][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'.
[  176.380108][ T9942] veth11: entered promiscuous mode
[  176.419221][ T9945] syzkaller0: entered promiscuous mode
[  176.419248][ T9945] syzkaller0: entered allmulticast mode
[  176.800598][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'.
[  176.818277][ T9959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1757'.
[  176.904042][ T9963] tipc: New replicast peer: 255.255.255.255
[  176.907493][ T9963] tipc: Enabled bearer <udp:syz2>, priority 10
[  177.548908][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'.
[  177.642807][ T9995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.858512][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1779'.
[  177.858532][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1779'.
[  177.858541][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1779'.
[  177.914250][ T5741] tipc: Node number set to 3000178729
[  177.917063][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'.
[  177.920983][T10009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  178.184928][T10016] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2
[  178.185032][T10016] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1
[  178.270645][T10020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.626421][ T5338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.627494][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'.
[  178.654295][T10045] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  178.715764][T10051] netlink: 'syz.2.1796': attribute type 1 has an invalid length.
[  179.138028][T10078] openvswitch: netlink: Duplicate or invalid key (type 0).
[  179.138064][T10078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.152914][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'.
[  179.280187][T10091] netlink: 'syz.3.1815': attribute type 10 has an invalid length.
[  179.282181][T10091] netlink: 'syz.3.1815': attribute type 10 has an invalid length.
[  179.282921][T10091] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  179.292389][T10091] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  179.348209][T10095] netlink: 'syz.3.1818': attribute type 2 has an invalid length.
[  179.385187][T10095] : entered promiscuous mode
[  179.523783][ T5598] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  179.544025][T10109] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  179.617497][T10117] macsec0: entered promiscuous mode
[  179.617867][T10117] macsec0: entered allmulticast mode
[  179.617879][T10117] veth1_macvtap: entered allmulticast mode
[  180.285990][T10106] syz.0.1824 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  180.286011][T10106] CPU: 1 UID: 0 PID: 10106 Comm: syz.0.1824 Not tainted syzkaller #0 PREEMPT(full) 
[  180.286020][T10106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.286024][T10106] Call Trace:
[  180.286027][T10106]  <TASK>
[  180.286031][T10106]  dump_stack_lvl+0xe8/0x150
[  180.286045][T10106]  dump_header+0xd3/0x4b0
[  180.286056][T10106]  oom_kill_process+0x3ab/0x9e0
[  180.286066][T10106]  out_of_memory+0x1064/0x1480
[  180.286072][T10106]  ? try_charge_memcg+0xc32/0x15e0
[  180.286089][T10106]  ? __pfx_out_of_memory+0x10/0x10
[  180.286099][T10106]  ? do_raw_spin_unlock+0x4d/0x200
[  180.286110][T10106]  try_charge_memcg+0xcdf/0x15e0
[  180.286127][T10106]  ? __pfx_try_charge_memcg+0x10/0x10
[  180.286164][T10106]  ? charge_memcg+0x47/0x310
[  180.286175][T10106]  charge_memcg+0x1dd/0x310
[  180.286186][T10106]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[  180.286195][T10106]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[  180.286207][T10106]  swap_cache_alloc_folio+0x4de/0x990
[  180.286224][T10106]  swap_cache_read_folio+0x44/0x120
[  180.286238][T10106]  swap_cluster_readahead+0x392/0x630
[  180.286248][T10106]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  180.286265][T10106]  swapin_readahead+0x1a3/0xc50
[  180.286278][T10106]  ? __pfx_swapin_readahead+0x10/0x10
[  180.286288][T10106]  ? swap_table_get+0x1e/0x260
[  180.286295][T10106]  ? swap_table_get+0x1e/0x260
[  180.286301][T10106]  ? swap_table_get+0x1e/0x260
[  180.286309][T10106]  ? swap_table_get+0x216/0x260
[  180.286317][T10106]  ? swap_cache_get_folio+0x2e7/0x2f0
[  180.286327][T10106]  do_swap_page+0x3fb/0x4c10
[  180.286341][T10106]  ? __lock_acquire+0x747/0x2de0
[  180.286348][T10106]  ? do_swap_page+0x126/0x4c10
[  180.286355][T10106]  ? __pfx_do_swap_page+0x10/0x10
[  180.286362][T10106]  ? __pte_offset_map+0x1ae/0x240
[  180.286370][T10106]  ? pte_offset_map_rw_nolock+0xea/0x160
[  180.286379][T10106]  handle_mm_fault+0x1398/0x3750
[  180.286390][T10106]  ? handle_mm_fault+0xf1/0x3750
[  180.286402][T10106]  ? __pfx_handle_mm_fault+0x10/0x10
[  180.286408][T10106]  ? lock_vma_under_rcu+0x45a/0x500
[  180.286421][T10106]  ? perf_trace_preemptirq_template+0xb3/0x350
[  180.286435][T10106]  do_user_addr_fault+0xa4f/0x1340
[  180.286447][T10106]  ? trace_page_fault_user+0x84/0x1e0
[  180.286455][T10106]  exc_page_fault+0x6a/0xc0
[  180.286464][T10106]  asm_exc_page_fault+0x26/0x30
[  180.286471][T10106] RIP: 0033:0x7f7184a6bdac
[  180.286480][T10106] Code: 0e 99 ee 00 e8 03 00 00 48 8d 1d 0f a2 3b 00 e8 da 32 13 00 eb 14 0f 1f 84 00 00 00 00 00 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  180.286486][T10106] RSP: 002b:00007ffc99c50f10 EFLAGS: 00010202
[  180.286494][T10106] RAX: 0000000000000000 RBX: 00007f7184e25fa0 RCX: 0000555592a64808
[  180.286499][T10106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  180.286503][T10106] RBP: 00007f7184e27da0 R08: 0000000000000000 R09: 0000000000000000
[  180.286507][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002bfd8
[  180.286511][T10106] R13: 00007f7184e2609c R14: 000000000002bd0d R15: 00007f7184e26090
[  180.286524][T10106]  </TASK>
[  180.289835][T10106] memory: usage 307200kB, limit 307200kB, failcnt 2220
[  180.289845][T10106] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0
[  180.289851][T10106] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  180.289855][T10106] Memory cgroup stats for /syz0:
[  180.289909][T10106] cache 4096
[  180.289912][T10106] rss 0
[  180.289915][T10106] rss_huge 0
[  180.289917][T10106] shmem 0
[  180.289919][T10106] mapped_file 0
[  180.289922][T10106] dirty 0
[  180.289924][T10106] writeback 0
[  180.289926][T10106] workingset_refault_anon 0
[  180.289929][T10106] workingset_refault_file 0
[  180.289932][T10106] swap 225280
[  180.289958][T10106] swapcached 225280
[  180.289963][T10106] pgpgin 51090
[  180.289966][T10106] pgpgout 51089
[  180.289970][T10106] pgfault 100265
[  180.289973][T10106] pgmajfault 1
[  180.289977][T10106] inactive_anon 0
[  180.289981][T10106] active_anon 0
[  180.289984][T10106] inactive_file 0
[  180.289988][T10106] active_file 4096
[  180.289990][T10106] unevictable 0
[  180.289993][T10106] hierarchical_memory_limit 314572800
[  180.289996][T10106] hierarchical_memsw_limit 9223372036854771712
[  180.289998][T10106] total_cache 4096
[  180.290001][T10106] total_rss 0
[  180.290003][T10106] total_rss_huge 0
[  180.290005][T10106] total_shmem 0
[  180.290008][T10106] total_mapped_file 0
[  180.290010][T10106] total_dirty 0
[  180.290013][T10106] total_writeback 0
[  180.290015][T10106] total_workingset_refault_anon 0
[  180.290018][T10106] total_workingset_refault_file 0
[  180.290020][T10106] total_swap 225280
[  180.290022][T10106] total_swapcached 225280
[  180.290025][T10106] total_pgpgin 51090
[  180.290027][T10106] total_pgpgout 51089
[  180.290030][T10106] total_pgfault 100273
[  180.290032][T10106] total_pgmajfault 1
[  180.290035][T10106] total_inactive_anon 0
[  180.290037][T10106] total_active_anon 0
[  180.290040][T10106] total_inactive_file 0
[  180.290042][T10106] total_active_file 4096
[  180.290044][T10106] total_unevictable 0
[  180.290047][T10106] anon_cost 0
[  180.290049][T10106] file_cost 0
[  180.290052][T10106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1824,pid=10106,uid=0
[  180.290894][T10106] Memory cgroup out of memory: Killed process 10106 (syz.0.1824) total-vm:102396kB, anon-rss:1260kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  182.521332][T10173] __nla_validate_parse: 5 callbacks suppressed
[  182.521350][T10173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1845'.
[  182.818086][T10190] lo speed is unknown, defaulting to 1000
[  183.379414][T10207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'.
[  183.639887][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'.
[  183.702615][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'.
[  183.780957][T10223] netlink: 'syz.3.1867': attribute type 4 has an invalid length.
[  183.781079][T10223] netlink: 'syz.3.1867': attribute type 10 has an invalid length.
[  183.781152][T10223] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1867'.
[  183.948784][T10223] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  183.950019][T10221] geneve1: entered promiscuous mode
[  183.950037][T10221] geneve1: entered allmulticast mode
[  183.984376][ T5459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.984411][ T5459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.984432][ T5459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.984452][ T5459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.245684][T10242] ip_tables: iptables: counters copy to user failed while replacing table
[  184.629832][T10260] netlink: 'syz.0.1880': attribute type 15 has an invalid length.
[  184.745180][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1887'.
[  184.802621][T10278] netlink: 'syz.0.1888': attribute type 58 has an invalid length.
[  184.802637][T10278] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1888'.
[  185.110801][T10295] netlink: 'syz.2.1895': attribute type 6 has an invalid length.
[  185.110813][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'.
[  185.241393][T10307] netlink: NAT attribute has 5 unknown bytes
[  185.241420][T10307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.275560][T10309] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1902'.
[  185.399537][T10318] netlink: 'syz.2.1905': attribute type 13 has an invalid length.
[  186.533460][T10349] netlink: 'syz.0.1918': attribute type 3 has an invalid length.
[  186.614588][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'.
[  188.056750][T10413] : port 1(vlan1) entered blocking state
[  188.056849][T10413] : port 1(vlan1) entered disabled state
[  188.057014][T10413] vlan1: entered allmulticast mode
[  188.057025][T10413] veth0_vlan: entered allmulticast mode
[  188.057963][T10413] vlan1: entered promiscuous mode
[  188.129929][T10417] __nla_validate_parse: 1 callbacks suppressed
[  188.129975][T10417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1945'.
[  188.163319][T10419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1946'.
[  188.270717][T10431] netlink: 'syz.2.1952': attribute type 1 has an invalid length.
[  188.284774][T10431] 8021q: adding VLAN 0 to HW filter on device bond2
[  188.312000][T10431] bond2: (slave veth13): Enslaving as an active interface with a down link
[  188.337784][T10431] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.350085][T10431] hsr0: left promiscuous mode
[  188.350097][T10431] hsr0: left allmulticast mode
[  188.350102][T10431] hsr_slave_0: left allmulticast mode
[  188.350107][T10431] hsr_slave_1: left allmulticast mode
[  188.359302][T10431] ip6gretap1: left allmulticast mode
[  188.362152][T10431] macvlan2: left promiscuous mode
[  188.362163][T10431] bond1: left promiscuous mode
[  188.362335][T10431] macvlan2: left allmulticast mode
[  188.362341][T10431] bond1: left allmulticast mode
[  188.362345][T10431] ip6gretap2: left allmulticast mode
[  188.377997][T10431] veth11: left promiscuous mode
[  188.385369][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.385392][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.385406][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.388671][ T5676] lo speed is unknown, defaulting to 1000
[  188.410735][T10436] 8021q: adding VLAN 0 to HW filter on device batadv1
[  188.416956][T10436] bond2: (slave batadv1): making interface the new active one
[  188.417755][T10436] batadv1: entered promiscuous mode
[  188.431332][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'.
[  188.446702][T10436] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  188.477102][   T13] bond2: (slave veth13): link status definitely up, 10000 Mbps full duplex
[  188.628265][T10452] netlink: 'syz.0.1960': attribute type 10 has an invalid length.
[  188.628379][T10452] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  188.628496][T10452] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  188.628504][T10452] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  188.728686][T10448] openvswitch: netlink: IPv6 tunnel dst address is zero
[  188.779302][T10459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1964'.
[  188.950308][T10470] netlink: 'syz.3.1969': attribute type 1 has an invalid length.
[  188.950409][T10470] netlink: 'syz.3.1969': attribute type 4 has an invalid length.
[  188.950466][T10470] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1969'.
[  189.018898][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'.
[  189.099091][T10490] netlink: 'syz.0.1977': attribute type 1 has an invalid length.
[  189.099104][T10490] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1977'.
[  189.436403][T10520] netlink: 'syz.3.1989': attribute type 10 has an invalid length.
[  189.442429][T10520] bond0: (slave bond_slave_0): Releasing backup interface
[  189.663265][T10536] netlink: Conntrack attr type has unexpected length (type=0, length=1, expected=0)
[  189.663293][T10536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.858429][ T5663] tipc: Subscription rejected, illegal request
[  190.152486][T10560] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2009'.
[  190.235017][T10570] ip6gretap1: entered promiscuous mode
[  190.235029][T10570] ip6gretap1: entered allmulticast mode
[  190.238815][T10572] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2013'.
[  190.476432][T10598] netlink: 'syz.3.2026': attribute type 2 has an invalid length.
[  190.476455][T10598] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2026'.
[  190.706004][T10612] netlink: 'syz.3.2032': attribute type 1 has an invalid length.
[  190.866612][T10613] bond2: (slave geneve2): making interface the new active one
[  190.870463][T10613] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  190.886229][T10614] bond2: entered promiscuous mode
[  190.886250][T10614] geneve2: entered promiscuous mode
[  190.891004][T10614] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.895472][ T5663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  190.895505][ T5663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  190.895529][ T5663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  190.915720][T10613] syz.3.2032 (10613) used greatest stack depth: 17920 bytes left
[  191.058637][T10625] netlink: 'syz.2.2034': attribute type 1 has an invalid length.
[  191.163662][T10633] netlink: 'syz.3.2037': attribute type 20 has an invalid length.
[  192.068019][T10677] netlink: 'syz.2.2051': attribute type 16 has an invalid length.
[  192.068035][T10677] netlink: 'syz.2.2051': attribute type 17 has an invalid length.
[  192.651854][T10701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.146900][T10729] bond3: (slave geneve3): making interface the new active one
[  193.148041][T10729] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  193.163365][ T5459] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  193.163387][ T5459] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  193.163399][ T5459] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  193.249549][T10745] __nla_validate_parse: 4 callbacks suppressed
[  193.249559][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'.
[  193.249605][T10745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2079'.
[  193.414385][T10762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2087'.
[  193.476838][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'.
[  193.727382][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2099'.
[  193.797087][T10795] 0: renamed from bond_slave_1 (while UP)
[  193.901481][T10807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2108'.
[  193.931010][T10805] netlink: zone id is out of range
[  193.931028][T10805] netlink: zone id is out of range
[  194.309634][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'.
[  194.461009][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'.
[  194.461022][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'.
[  194.519130][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'.
[  194.520745][T10850] ip_tables: iptables: counters copy to user failed while replacing table
[  194.536932][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  196.957223][T10988] Bluetooth: MGMT ver 1.23
[  197.251756][T11015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.252312][T11015] syzkaller0: entered promiscuous mode
[  197.252432][T11015] syzkaller0: entered allmulticast mode
[  197.273815][T11015] tipc: Resetting bearer <eth:syzkaller0>
[  197.291852][T11013] tipc: Resetting bearer <eth:syzkaller0>
[  197.321214][T11013] tipc: Disabling bearer <eth:syzkaller0>
[  197.448922][T11022] validate_nla: 1 callbacks suppressed
[  197.448933][T11022] netlink: 'syz.0.2205': attribute type 10 has an invalid length.
[  197.460257][T11022] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  197.927466][   T57] block nbd0: Receive control failed (result -1)
[  198.269700][T11091] blkio.reset_stats is deprecated
[  198.928039][T11123] netlink: 'syz.3.2247': attribute type 1 has an invalid length.
[  199.525166][T11150] __nla_validate_parse: 6 callbacks suppressed
[  199.525176][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'.
[  199.805000][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2263'.
[  199.873338][ T5663] batadv1: left promiscuous mode
[  200.030427][T11166] IPv6: NLM_F_CREATE should be specified when creating new route
[  200.058313][T11169] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  200.058331][T11169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.368404][T11205] netlink: 13566 bytes leftover after parsing attributes in process `syz.0.2285'.
[  200.527447][T11226] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  201.576573][T11252] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  201.689471][T11261] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes.
[  201.723843][T11264] netlink: 'syz.3.2312': attribute type 1 has an invalid length.
[  202.112844][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2319'.
[  202.340093][T11292] netlink: 'syz.3.2324': attribute type 10 has an invalid length.
[  202.340116][T11292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.341722][T11292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.542391][T11294] netlink: 'syz.3.2325': attribute type 4 has an invalid length.
[  202.822308][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'.
[  202.962461][T11318] xt_bpf: check failed: parse error
[  202.998580][T11323] netlink: 'syz.2.2336': attribute type 10 has an invalid length.
[  203.140366][T11327] netlink: 'syz.0.2339': attribute type 10 has an invalid length.
[  203.166650][T11323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  203.271368][T11327] bond0: (slave bridge0): Releasing backup interface
[  203.589214][T11352] openvswitch: netlink: VXLAN extension 248 out of range max 1
[  203.872573][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2356'.
[  204.616118][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2369'.
[  204.721608][T11406] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  204.721625][T11406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.921169][T11414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2375'.
[  204.921184][T11414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2375'.
[  205.058197][T11421] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  205.342229][T11441] netlink: 'syz.2.2388': attribute type 10 has an invalid length.
[  205.342240][T11441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2388'.
[  205.345587][T11441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.489797][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'.
[  205.639528][T11455] netlink: 'syz.3.2395': attribute type 3 has an invalid length.
[  205.639541][T11455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2395'.
[  205.686817][T11461] netlink: 'syz.2.2398': attribute type 1 has an invalid length.
[  205.686831][T11461] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2398'.
[  205.946577][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'.
[  209.062083][T11513] netlink: 'syz.0.2420': attribute type 9 has an invalid length.
[  209.113027][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2424'.
[  209.115244][T11520] sch_tbf: burst 4 is lower than device bridge_slave_0 mtu (1514) !
[  209.197464][T11528] C: entered allmulticast mode
[  209.209493][T11527] C: left allmulticast mode
[  209.307870][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'.
[  209.624368][T11573] __nla_validate_parse: 1 callbacks suppressed
[  209.624385][T11573] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2450'.
[  209.768512][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'.
[  209.768531][T11582] openvswitch: netlink: Flow actions attr not present in new flow.
[  210.198184][T11587] netlink: 'syz.0.2455': attribute type 62 has an invalid length.
[  210.959092][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2470'.
[  210.959742][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2470'.
[  210.987394][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'.
[  211.690205][T11671] netlink: 'syz.3.2482': attribute type 10 has an invalid length.
[  214.708778][T11709] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2495'.
[  214.778451][T11712] netlink: 'syz.0.2496': attribute type 29 has an invalid length.
[  215.000762][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  215.000780][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  215.014045][T11736] gretap1: entered allmulticast mode
[  215.054847][T11742] block nbd1: server does not support multiple connections per device.
[  215.056802][T11742] block nbd1: shutting down sockets
[  216.017338][T11742] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  216.017352][T11742] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  216.107436][T11742] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  216.107449][T11742] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  216.196780][T11778] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2516'.
[  216.260063][T11784] sctp: [Deprecated]: syz.0.2517 (pid 11784) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.260063][T11784] Use struct sctp_sack_info instead
[  217.152697][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'.
[  217.472311][T11834] syzkaller0: entered promiscuous mode
[  217.472331][T11834] syzkaller0: entered allmulticast mode
[  217.740976][T11855] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2540'.
[  217.741009][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  217.741014][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2540'.
[  217.741019][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  217.777286][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2543'.
[  218.088447][T11892] No such timeout policy "s"
[  218.088490][T11892] netlink: Failed to associated timeout policy 's'
[  219.503024][T11959] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  219.642693][T11974] netlink: 'syz.3.2596': attribute type 10 has an invalid length.
[  219.645613][T11974] team_slave_1: entered promiscuous mode
[  219.645732][T11974] team_slave_1: entered allmulticast mode
[  219.648606][T11974] bridge0: port 4(team_slave_1) entered blocking state
[  219.649250][T11974] bridge0: port 4(team_slave_1) entered disabled state
[  219.686899][T11974] netlink: 'syz.3.2596': attribute type 10 has an invalid length.
[  220.151745][T12017] netlink: 'syz.2.2617': attribute type 21 has an invalid length.
[  220.151784][T12017] netlink: 'syz.2.2617': attribute type 1 has an invalid length.
[  220.448332][T12038] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  221.017322][T12095] netlink: 'syz.0.2653': attribute type 3 has an invalid length.
[  221.017340][T12095] __nla_validate_parse: 5 callbacks suppressed
[  221.017407][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'.
[  221.017529][T12095] netlink: 'syz.0.2653': attribute type 3 has an invalid length.
[  221.017538][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'.
[  221.017558][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'.
[  221.271445][T12110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2660'.
[  221.466108][T12121] syzkaller0: entered promiscuous mode
[  221.466129][T12121] syzkaller0: entered allmulticast mode
[  223.559831][T12139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.559845][T12139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.671107][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[  225.219694][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'.
[  225.219712][T12194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2697'.
[  225.264563][T12197] netlink: 'syz.0.2698': attribute type 1 has an invalid length.
[  225.321098][T12197] 8021q: adding VLAN 0 to HW filter on device bond3
[  225.339255][T12203] bond3: (slave gretap2): making interface the new active one
[  225.340451][T12203] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  225.686136][T12219] openvswitch: netlink: Duplicate key (type 3).
[  225.736860][T12224] netlink: 'syz.2.2710': attribute type 1 has an invalid length.
[  225.842351][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'.
[  226.070391][T12252] netlink: 'syz.0.2724': attribute type 2 has an invalid length.
[  226.071334][T12252] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2724'.
[  226.088344][T12259] netlink: 'syz.0.2724': attribute type 2 has an invalid length.
[  226.088357][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2724'.
[  226.179587][T12265] ip_tables: iptables: counters copy to user failed while replacing table
[  226.291526][T12272] syzkaller1: entered promiscuous mode
[  226.291545][T12272] syzkaller1: entered allmulticast mode
[  226.625849][T12288] netlink: 'syz.3.2738': attribute type 1 has an invalid length.
[  226.681436][T12292] netlink: 'syz.2.2740': attribute type 61 has an invalid length.
[  226.844798][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'.
[  226.844811][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'.
[  227.225162][T12323] netlink: 'syz.0.2754': attribute type 5 has an invalid length.
[  227.225491][T12323] netlink: 'syz.0.2754': attribute type 5 has an invalid length.
[  227.300008][T12327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2755'.
[  227.624032][T12331] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2757'.
[  227.949329][T12346] netlink: 'syz.2.2764': attribute type 32 has an invalid length.
[  228.125635][T12354] netlink: 'syz.3.2768': attribute type 4 has an invalid length.
[  228.125652][T12354] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2768'.
[  228.391001][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2777'.
[  228.407241][T12377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2779'.
[  228.445278][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2777'.
[  229.759856][ T5459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  229.899201][   T34] audit: type=1107 audit(1792445625.984:3): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%x.%N6zTuRSm.@Z[9~ā?~>U?Z6t\%T"ӧ_T90bvmI''g+vMJ_/Gr_#zva2)F"	\'
[  230.017057][T12457] ip_tables: iptables: counters copy to user failed while replacing table
[  230.176892][ T5459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  230.176918][ T5459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  230.289420][ T5459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  230.289446][ T5459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  230.436265][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.441576][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.442286][ T5591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.443032][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.446490][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.472835][ T5459] bond0: (slave netdevsim1): Releasing backup interface
[  230.485808][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.488152][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.490074][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.490742][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.491133][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.510371][ T5459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  230.510395][ T5459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  231.710541][ T5459] bridge0: port 4(team_slave_1) entered disabled state
[  231.722997][ T5459] ip6gretap0: left allmulticast mode
[  231.723031][ T5459] ip6gretap0: left promiscuous mode
[  231.724919][ T5459] bridge0: port 3(ip6gretap0) entered disabled state
[  231.739237][ T5459] bridge_slave_1: left allmulticast mode
[  231.739266][ T5459] bridge_slave_1: left promiscuous mode
[  231.739368][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.745976][ T5459] bridge_slave_0: left allmulticast mode
[  231.745996][ T5459] bridge_slave_0: left promiscuous mode
[  231.746134][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.928700][ T5459] bond3 (unregistering): (slave geneve3): Releasing active interface
[  231.945509][ T5459] bond2 (unregistering): (slave geneve2): Releasing active interface
[  231.945530][ T5459] geneve2 (unregistering): left promiscuous mode
[  231.998845][ T5459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.999582][ T5459] bond0 (unregistering): Released all slaves
[  232.014450][ T5459] bond1 (unregistering): Released all slaves
[  232.029147][ T5459] bond2 (unregistering): Released all slaves
[  232.051258][ T5459] bond3 (unregistering): Released all slaves
[  232.068037][ T5338] 8021q: adding VLAN 0 to HW filter on device eth2
[  232.088688][T12469] rxe_eth0 speed is unknown, defaulting to 1000
[  232.211569][ T5459] : left promiscuous mode
[  232.322486][ T5459] tipc: Left network mode
[  232.499856][ T5338] 8021q: adding VLAN 0 to HW filter on device eth3
[  232.502303][T12469] lo speed is unknown, defaulting to 1000
[  232.533282][ T5591] Bluetooth: hci0: command tx timeout
[  233.030573][ T5338] 8021q: adding VLAN 0 to HW filter on device eth4
[  233.049680][T12524] validate_nla: 2 callbacks suppressed
[  233.049696][T12524] netlink: 'syz.2.2833': attribute type 21 has an invalid length.
[  233.049706][T12524] __nla_validate_parse: 9 callbacks suppressed
[  233.049711][T12524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2833'.
[  233.050400][T12524] netlink: 'syz.2.2833': attribute type 4 has an invalid length.
[  233.050412][T12524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2833'.
[  233.138221][T12539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2834'.
[  233.505433][T12469] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.505512][T12469] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.505627][T12469] bridge_slave_0: entered allmulticast mode
[  233.543368][T12469] bridge_slave_0: entered promiscuous mode
[  233.549649][T12469] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.549773][T12469] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.549844][T12469] bridge_slave_1: entered allmulticast mode
[  233.560491][T12469] bridge_slave_1: entered promiscuous mode
[  234.064241][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  234.613286][ T5591] Bluetooth: hci0: command tx timeout
[  236.271905][ T5459] hsr_slave_0: left promiscuous mode
[  236.277092][ T5459] hsr_slave_1: left promiscuous mode
[  236.402994][ T5459] veth1_macvtap (unregistering): left allmulticast mode
[  236.416437][T12562] netlink: Unknown nat attribute (0)
[  236.416455][T12562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.589687][T12469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.590541][ T5338] 8021q: adding VLAN 0 to HW filter on device eth5
[  236.609422][T12469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.642909][T12469] team0: Port device team_slave_0 added
[  236.647312][T12469] team0: Port device team_slave_1 added
[  236.670398][T12469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.670409][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.670418][T12469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.671417][T12469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.671424][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  236.671433][T12469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.703290][ T5591] Bluetooth: hci0: command tx timeout
[  236.740689][T12469] hsr_slave_0: entered promiscuous mode
[  236.741191][T12469] hsr_slave_1: entered promiscuous mode
[  236.741582][T12469] debugfs: 'hsr0' already exists in 'hsr'
[  236.741592][T12469] Cannot create hsr debugfs directory
[  236.970442][T12469] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  236.989224][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  236.991343][T12469] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  237.001900][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  237.006910][T12469] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  237.023722][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  237.024204][T12469] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  237.026520][T12469] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  237.098002][ T5459] IPVS: stop unused estimator thread 0...
[  237.149914][T12469] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.181718][T12469] 8021q: adding VLAN 0 to HW filter on device team0
[  237.190225][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.190269][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.197016][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.197058][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.592963][T12469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.696297][T12632] netlink: 'syz.0.2849': attribute type 29 has an invalid length.
[  237.696437][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'.
[  237.696510][T12632] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2849'.
[  237.746825][T12469] veth0_vlan: entered promiscuous mode
[  237.765249][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2851'.
[  237.770387][T12469] veth1_vlan: entered promiscuous mode
[  237.798933][T12469] veth0_macvtap: entered promiscuous mode
[  237.802151][T12469] veth1_macvtap: entered promiscuous mode
[  237.811240][T12469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.818346][T12469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.923336][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.944206][ T5663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.944369][ T5663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.944397][ T5663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.950789][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.950801][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.027836][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.027855][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.225605][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2859'.
[  238.640390][T12692] netlink: 'syz.0.2877': attribute type 21 has an invalid length.
[  238.640442][T12692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2877'.
[  238.783540][ T5591] Bluetooth: hci0: command tx timeout
[  238.808514][T12706] netlink: 'syz.2.2882': attribute type 219 has an invalid length.
[  238.929787][T12719] netlink: 'syz.0.2887': attribute type 11 has an invalid length.
[  239.031449][T12716] bridge_slave_1: left allmulticast mode
[  239.031688][T12716] bridge_slave_1: left promiscuous mode
[  239.032593][T12716] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.068629][T12716] bridge_slave_0: left allmulticast mode
[  239.069365][T12716] bridge_slave_0: left promiscuous mode
[  239.071677][T12716] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.378019][T12725] bond4: option primary_reselect: invalid value (6)
[  239.379560][T12725] bond4 (unregistering): Released all slaves
[  239.470250][T12739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'.
[  239.502180][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'.
[  239.737313][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2899'.
[  239.875612][T12754] sock: sock_timestamping_bind_phc: sock not bind to device
[  240.279761][T12773] netlink: 'syz.4.2906': attribute type 10 has an invalid length.
[  240.463020][T12775] netlink: 'syz.0.2910': attribute type 4 has an invalid length.
[  240.591706][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'.
[  242.533555][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.380573][T12557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.440703][T12821] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2931'.
[  244.489290][T12557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.519464][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.527872][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.534789][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.537169][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.537870][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.579285][T12557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.612022][T12830] syzkaller0: entered promiscuous mode
[  244.612034][T12830] syzkaller0: entered allmulticast mode
[  244.619257][T12830] tipc: Started in network mode
[  244.619273][T12830] tipc: Node identity b2ecbf0652d8, cluster identity 4711
[  244.623478][T12830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.625463][T12829] tipc: Resetting bearer <eth:syzkaller0>
[  244.648780][T12829] tipc: Disabling bearer <eth:syzkaller0>
[  244.674461][T12557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.719097][T12836] netlink: 'syz.4.2934': attribute type 1 has an invalid length.
[  244.885836][T12557] vlan1: left allmulticast mode
[  244.885848][T12557] veth0_vlan: left allmulticast mode
[  244.885888][T12557] vlan1: left promiscuous mode
[  244.886069][T12557] : port 1(vlan1) entered disabled state
[  245.005647][T12557] bond3 (unregistering): (slave gretap2): Releasing active interface
[  245.025332][T12557] bond2 (unregistering): (slave geneve3): Releasing active interface
[  245.071000][T12557] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  245.112124][T12557] bond0 (unregistering): Released all slaves
[  245.126998][T12557] bond1 (unregistering): Released all slaves
[  245.142670][T12557] bond2 (unregistering): Released all slaves
[  245.161710][T12557] bond3 (unregistering): Released all slaves
[  245.207464][T12823] rxe_eth0 speed is unknown, defaulting to 1000
[  245.351206][T12557] : left promiscuous mode
[  245.436632][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  245.456410][T12557] tipc: Left network mode
[  245.582251][T12874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2946'.
[  245.588030][T12823] lo speed is unknown, defaulting to 1000
[  245.766795][T12883] xt_hashlimit: size too large, truncated to 1048576
[  245.834355][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  246.277625][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.281232][T12901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.375442][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  246.415233][T12557] hsr_slave_0: left promiscuous mode
[  246.416004][T12557] hsr_slave_1: left promiscuous mode
[  246.613522][ T5591] Bluetooth: hci1: command tx timeout
[  246.668047][T12823] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.668122][T12823] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.668181][T12823] bridge_slave_0: entered allmulticast mode
[  246.669095][T12823] bridge_slave_0: entered promiscuous mode
[  246.670824][T12823] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.670866][T12823] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.670916][T12823] bridge_slave_1: entered allmulticast mode
[  246.671741][T12823] bridge_slave_1: entered promiscuous mode
[  246.692138][T12823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.694590][T12823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.715157][T12823] team0: Port device team_slave_0 added
[  246.720339][T12823] team0: Port device team_slave_1 added
[  246.757639][T12823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.757650][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.757659][T12823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.758523][T12823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.758530][T12823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.758539][T12823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.797366][T12823] hsr_slave_0: entered promiscuous mode
[  246.797785][T12823] hsr_slave_1: entered promiscuous mode
[  246.798178][T12823] debugfs: 'hsr0' already exists in 'hsr'
[  246.798188][T12823] Cannot create hsr debugfs directory
[  246.954056][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.954184][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.954214][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.954226][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.129858][T12557] IPVS: stop unused estimator thread 0...
[  247.620712][T12952] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.623049][T12952] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  247.676697][T12823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  247.690019][T12823] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  247.691764][T12823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  247.727655][T12823] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  247.728331][T12823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  247.734657][T12823] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  247.735254][T12823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  247.747541][T12823] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  247.872100][T12823] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.896257][T12823] 8021q: adding VLAN 0 to HW filter on device team0
[  247.904189][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.904231][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.916404][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.916448][ T6427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.348251][T12823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.426899][T12823] veth0_vlan: entered promiscuous mode
[  248.442520][T12823] veth1_vlan: entered promiscuous mode
[  248.483996][T12823] veth0_macvtap: entered promiscuous mode
[  248.489172][T12823] veth1_macvtap: entered promiscuous mode
[  248.505478][T12823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.514114][T12823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.533495][T12557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.533532][T12557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.533554][T12557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.533575][T12557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.639587][ T6425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.639600][ T6425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.688104][ T6425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.688117][ T6425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.693596][ T5591] Bluetooth: hci1: command tx timeout
[  249.261811][T13029] xt_hashlimit: size too large, truncated to 1048576
[  249.261823][T13029] xt_hashlimit: max too large, truncated to 1048576
[  250.514782][T13065] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2986'.
[  250.515300][T13065] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2986'.
[  250.539288][T13067] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  250.773634][ T5591] Bluetooth: hci1: command tx timeout
[  252.856017][ T5591] Bluetooth: hci1: command tx timeout
[  253.112776][T13099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'.
[  253.157302][T13101] Bluetooth: MGMT ver 1.23
[  253.315549][T13102] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  254.751429][ T9861] IPVS: starting estimator thread 0...
[  254.833177][T13155] IPVS: using max 83 ests per chain, 199200 per kthread
[  254.836760][T13165] batadv1: entered promiscuous mode
[  254.836771][T13165] batadv1: entered allmulticast mode
[  254.959475][T13174] Cannot find set identified by id 0 to match
[  255.069863][T13182] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  255.243909][T13189] netlink: Conntrack attr has 12 unknown bytes
[  255.243927][T13189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.838213][T13218] mac80211_hwsim hwsim19 ..c: renamed from wlan1 (while UP)
[  255.908613][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'.
[  255.974973][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  255.990170][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3057'.
[  256.456037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.456819][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.457826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.458869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.460756][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.016400][T13255] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11
[  257.297792][T13274] syz_tun: entered allmulticast mode
[  257.580937][T13297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3089'.
[  257.580977][T13297] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  257.629055][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3090'.
[  257.701835][T13299] netlink: 'syz.0.3090': attribute type 10 has an invalid length.
[  257.775539][T13299] team0: Device veth0_vlan failed to register rx_handler
[  259.733406][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.051778][T13329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3102'.
[  261.362105][T13343] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3109'.
[  261.573157][T13351] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3112'.
[  261.573253][T13351] xt_IDLETIMER: label is empty or not nul-terminated
[  261.645283][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3106'.
[  262.204559][T13371] syzkaller0: entered promiscuous mode
[  262.204572][T13371] syzkaller0: entered allmulticast mode
[  262.444505][T13385] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3128'.
[  262.444535][T13385] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3128'.
[  262.792030][T13411] net_ratelimit: 3 callbacks suppressed
[  262.792046][T13411] ip_tables: iptables: counters copy to user failed while replacing table
[  262.853343][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.853434][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.853509][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.853577][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.853648][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.853726][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.904414][T13418] netlink: 122 bytes leftover after parsing attributes in process `syz.4.3143'.
[  262.921032][T13418] siw: device registration error -23
[  263.159836][T12823] syz_tun (unregistering): left allmulticast mode
[  263.230182][T13436] syzkaller0: entered promiscuous mode
[  263.230201][T13436] syzkaller0: entered allmulticast mode
[  263.242014][T13436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.248792][T13436] tipc: Resetting bearer <eth:syzkaller0>
[  263.251252][T13435] tipc: Resetting bearer <eth:syzkaller0>
[  263.271001][T13435] tipc: Disabling bearer <eth:syzkaller0>
[  263.429931][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.514040][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.545039][T13447] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  263.621341][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.630408][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.631324][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.648439][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.651895][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.663584][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  263.727635][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.980004][T13454] rxe_eth0 speed is unknown, defaulting to 1000
[  264.038736][   T12] bridge_slave_1: left allmulticast mode
[  264.038759][   T12] bridge_slave_1: left promiscuous mode
[  264.038989][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.056869][   T12] bridge_slave_0: left allmulticast mode
[  264.056890][   T12] bridge_slave_0: left promiscuous mode
[  264.057082][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.241885][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.247216][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.248117][   T12] bond0 (unregistering): Released all slaves
[  264.252824][T13454] lo speed is unknown, defaulting to 1000
[  264.472129][T13493] syzkaller1: entered promiscuous mode
[  264.472141][T13493] syzkaller1: entered allmulticast mode
[  264.722496][   T12] hsr_slave_0: left promiscuous mode
[  264.726574][   T12] hsr_slave_1: left promiscuous mode
[  264.729321][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.729360][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.729923][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.729931][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.747809][   T12] veth1_macvtap: left promiscuous mode
[  264.747856][   T12] veth0_macvtap: left promiscuous mode
[  264.747933][   T12] veth1_vlan: left promiscuous mode
[  264.978085][   T12] team0 (unregistering): Port device team_slave_1 removed
[  264.999676][   T12] team0 (unregistering): Port device team_slave_0 removed
[  265.104659][T13454] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.104735][T13454] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.104847][T13454] bridge_slave_0: entered allmulticast mode
[  265.106306][T13454] bridge_slave_0: entered promiscuous mode
[  265.126627][T13454] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.127175][T13454] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.127280][T13454] bridge_slave_1: entered allmulticast mode
[  265.129869][T13454] bridge_slave_1: entered promiscuous mode
[  265.166576][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.169215][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.202975][T13454] team0: Port device team_slave_0 added
[  265.208545][T13454] team0: Port device team_slave_1 added
[  265.235590][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.235605][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.235618][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.240389][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.240404][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  265.240420][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.325720][T13454] hsr_slave_0: entered promiscuous mode
[  265.326582][T13454] hsr_slave_1: entered promiscuous mode
[  265.327294][T13454] debugfs: 'hsr0' already exists in 'hsr'
[  265.327309][T13454] Cannot create hsr debugfs directory
[  265.733317][ T5591] Bluetooth: hci1: command tx timeout
[  266.655342][T13459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  266.680587][T13454] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  266.719489][T13454] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  266.721721][T13454] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  266.747295][T13454] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  266.747824][T13454] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  266.767869][T13454] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  266.768587][T13454] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  266.791045][T13454] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  266.980109][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  267.004729][T13454] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.036148][T13454] 8021q: adding VLAN 0 to HW filter on device team0
[  267.047363][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.047416][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.061039][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.061089][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.148481][T13454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  267.241015][T13540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.241517][T13540] syzkaller0: entered promiscuous mode
[  267.241527][T13540] syzkaller0: entered allmulticast mode
[  267.276791][T13540] tipc: Resetting bearer <eth:syzkaller0>
[  267.290041][T13539] tipc: Resetting bearer <eth:syzkaller0>
[  267.316158][T13539] tipc: Disabling bearer <eth:syzkaller0>
[  267.399367][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  267.440162][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'.
[  267.591519][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.798182][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  267.813283][ T5591] Bluetooth: hci1: command tx timeout
[  267.900976][T13454] veth0_vlan: entered promiscuous mode
[  267.920186][T13454] veth1_vlan: entered promiscuous mode
[  267.994528][T13454] veth0_macvtap: entered promiscuous mode
[  268.001405][T13454] veth1_macvtap: entered promiscuous mode
[  268.035306][T13454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.060174][T13454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.121617][ T5338] 8021q: adding VLAN 0 to HW filter on device eth9
[  268.123680][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.123711][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.123732][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.123752][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.307080][ T9860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.307098][ T9860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.379696][ T9860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.379713][ T9860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.362789][T13666] netlink: 'syz.5.3218': attribute type 10 has an invalid length.
[  269.421568][T13666] batman_adv: batadv0: Adding interface: netdevsim1
[  269.421758][T13666] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.421993][T13666] batman_adv: batadv0: Interface activated: netdevsim1
[  269.894263][ T5591] Bluetooth: hci1: command tx timeout
[  269.932193][T13708] syzkaller1: entered promiscuous mode
[  269.932213][T13708] syzkaller1: entered allmulticast mode
[  270.007115][T13710] netlink: 'syz.4.3234': attribute type 4 has an invalid length.
[  270.009851][T13710] netlink: 'syz.4.3234': attribute type 4 has an invalid length.
[  270.730357][T13756] xt_LOG: level 115 >= 8
[  270.805580][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'.
[  271.289407][T13780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3264'.
[  271.368109][T13787] netlink: 'syz.4.3266': attribute type 21 has an invalid length.
[  271.932855][T13827] SET target dimension over the limit!
[  271.975678][ T5591] Bluetooth: hci1: command tx timeout
[  272.386057][T13843] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3291'.
[  272.527678][T13851] netlink: 'syz.4.3295': attribute type 11 has an invalid length.
[  272.791199][T13872] netlink: Failed to add GPL helper -22
[  272.791243][T13872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.229333][T13889] netlink: 'syz.5.3311': attribute type 1 has an invalid length.
[  273.430339][T13891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  273.430361][T13891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  274.942215][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'.
[  275.018495][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'.
[  275.027575][T13964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.856289][T13979] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3344'.
[  276.029875][T13989] batman_adv: batadv0: Adding interface: syzkaller0
[  276.029885][T13989] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.029897][T13989] batman_adv: batadv0: Interface activated: syzkaller0
[  276.079770][T13991] syzkaller0: entered promiscuous mode
[  276.079788][T13991] syzkaller0: entered allmulticast mode
[  276.251196][T13988] batman_adv: batadv0: Interface deactivated: syzkaller0
[  276.275059][T13988] batman_adv: batadv0: Removing interface: syzkaller0
[  278.802218][T14083] smbdirect: ib_dev[syz1] removed
[  278.892028][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'.
[  279.059884][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'.
[  279.059904][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'.
[  279.148661][T14102] netlink: 'syz.2.3399': attribute type 12 has an invalid length.
[  279.148681][T14102] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3399'.
[  279.229194][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3401'.
[  279.229213][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'.
[  279.965473][T14142] netlink: 'syz.4.3410': attribute type 6 has an invalid length.
[  280.009419][T14145] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  280.284809][T14157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  280.284824][T14157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  280.330397][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'.
[  281.607275][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3422'.
[  282.031929][T14205] netlink: 'syz.4.3430': attribute type 49 has an invalid length.
[  282.328181][T14216] xt_ecn: cannot match TCP bits for non-tcp packets
[  282.482655][T14225] ieee802154 phy0 wpan0: encryption failed: -22
[  282.931294][T14244] netlink: 'syz.2.3448': attribute type 29 has an invalid length.
[  282.931593][T14244] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  282.931603][T14244] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  283.247316][T14247] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3448'.
[  283.697292][T14259] netlink: 'syz.2.3451': attribute type 22 has an invalid length.
[  283.899041][   T34] audit: type=1107 audit(1792445679.984:4): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j>	'
[  285.380015][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3466'.
[  285.380035][T14294] tipc: Cannot configure node identity twice
[  285.627571][T14299] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3468'.
[  285.982988][T14306] netlink: 'syz.4.3471': attribute type 62 has an invalid length.
[  286.427845][T14321] mac80211_hwsim hwsim3 ..c: renamed from wlan1 (while UP)
[  286.967790][T14346] openvswitch: netlink: ufid size 30 bytes exceeds the range (1, 16)
[  286.967809][T14346] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  287.188139][T14362] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  287.216852][T14364] netlink: 'syz.4.3496': attribute type 11 has an invalid length.
[  287.286919][T14366] netlink: 'syz.4.3497': attribute type 4 has an invalid length.
[  287.408170][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'.
[  287.618798][T14382] netlink: 'syz.4.3505': attribute type 8 has an invalid length.
[  288.402885][T14390] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3509'.
[  288.458790][T14393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3509'.
[  288.459465][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3509'.
[  288.646182][T14405] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3515'.
[  289.155588][T14427] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3526'.
[  289.200573][T14427] siw: device registration error -23
[  289.310796][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'.
[  289.369344][T14432] netlink: 'syz.4.3528': attribute type 13 has an invalid length.
[  289.481636][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'.
[  289.541767][T14441] openvswitch: netlink: Missing key (keys=40, expected=100)
[  289.618405][T14447] netlink: 'syz.4.3535': attribute type 1 has an invalid length.
[  290.030323][T14463] syzkaller1: entered promiscuous mode
[  290.030404][T14463] syzkaller1: entered allmulticast mode
[  291.229268][T14491] netlink: 'syz.2.3556': attribute type 2 has an invalid length.
[  291.229286][T14491] netlink: 'syz.2.3556': attribute type 3 has an invalid length.
[  291.229294][T14491] __nla_validate_parse: 2 callbacks suppressed
[  291.229301][T14491] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3556'.
[  291.409050][T14498] netlink: 'syz.2.3559': attribute type 4 has an invalid length.
[  291.428134][ T2433] lo speed is unknown, defaulting to 1000
[  291.428156][ T2433] syz2: Port: 1 Link DOWN
[  291.439586][T14498] netlink: 'syz.2.3559': attribute type 4 has an invalid length.
[  291.446990][ T2433] lo speed is unknown, defaulting to 1000
[  291.447011][ T2433] syz2: Port: 1 Link ACTIVE
[  291.470926][ T2433] lo speed is unknown, defaulting to 1000
[  291.470973][ T2433] syz2: Port: 1 Link DOWN
[  291.480057][T14500] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3560'.
[  291.984927][T14507] cgroup2: Unknown parameter 'muOqwid'
[  292.535615][T14535] ip_tables: iptables: counters copy to user failed while replacing table
[  292.537510][T14535] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  292.797612][T14543] netlink: 'syz.2.3579': attribute type 12 has an invalid length.
[  292.887311][T14545] netlink: 'syz.2.3580': attribute type 16 has an invalid length.
[  292.887451][T14545] netlink: 'syz.2.3580': attribute type 3 has an invalid length.
[  292.887458][T14545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3580'.
[  293.026355][T14545] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  293.026427][T14545] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  293.026668][T14545] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  293.131899][T14545] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  293.384215][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.388267][ T5601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.389308][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  293.403156][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  293.407682][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.447132][T14556] netlink: 'syz.4.3583': attribute type 1 has an invalid length.
[  293.447152][T14556] netlink: 'syz.4.3583': attribute type 268 has an invalid length.
[  293.447162][T14556] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3583'.
[  293.722301][T14559] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3584'.
[  293.831167][T14551] rxe_eth0 speed is unknown, defaulting to 1000
[  294.053574][ T5598] Bluetooth: hci0: command 0x0c13 tx timeout
[  294.054458][ T5591] Bluetooth: hci0: Opcode 0x0c13 failed: -110
[  294.176935][T12558] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.183356][T14551] lo speed is unknown, defaulting to 1000
[  294.189409][T14587] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20001
[  294.275069][T12558] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.345177][T12558] batman_adv: batadv0: Interface deactivated: netdevsim1
[  294.348670][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3592'.
[  294.348685][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'.
[  294.389278][T12558] batman_adv: batadv0: Removing interface: netdevsim1
[  294.391616][T12558] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.485857][T12558] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.681434][T14551] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.681568][T14551] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.681657][T14551] bridge_slave_0: entered allmulticast mode
[  294.691995][T14551] bridge_slave_0: entered promiscuous mode
[  294.731596][T14551] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.731672][T14551] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.731773][T14551] bridge_slave_1: entered allmulticast mode
[  294.744599][T14551] bridge_slave_1: entered promiscuous mode
[  294.798037][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.801904][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.859000][T12558] bridge_slave_1: left allmulticast mode
[  294.859021][T12558] bridge_slave_1: left promiscuous mode
[  294.859175][T12558] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.871397][T12558] bridge_slave_0: left allmulticast mode
[  294.871420][T12558] bridge_slave_0: left promiscuous mode
[  294.871584][T12558] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.092496][T12558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.099865][T12558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.101865][T12558] bond0 (unregistering): Released all slaves
[  295.119089][T14551] team0: Port device team_slave_0 added
[  295.126000][T14551] team0: Port device team_slave_1 added
[  295.196679][T14633] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.3604'.
[  295.234866][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.234878][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.234887][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.246903][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.246914][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.246924][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.355336][T14551] hsr_slave_0: entered promiscuous mode
[  295.356803][T14551] hsr_slave_1: entered promiscuous mode
[  295.358752][T14551] debugfs: 'hsr0' already exists in 'hsr'
[  295.358770][T14551] Cannot create hsr debugfs directory
[  295.413342][ T5591] Bluetooth: hci3: command tx timeout
[  295.526620][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3608'.
[  295.526650][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3608'.
[  295.575520][ T5338] 8021q: adding VLAN 0 to HW filter on device eth10
[  295.603833][T12557] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.603924][T12557] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.603981][T12557] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.604000][T12557] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.713795][T14649] TC_ACT_REPEAT abuse ?
[  295.907542][T12558] hsr_slave_0: left promiscuous mode
[  295.908439][T12558] hsr_slave_1: left promiscuous mode
[  295.909161][T12558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.909179][T12558] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.910547][T12558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.910562][T12558] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.932152][T12558] veth1_macvtap: left promiscuous mode
[  295.932242][T12558] veth0_macvtap: left promiscuous mode
[  295.936045][T12558] veth0_vlan: left promiscuous mode
[  296.254267][T14673] __nla_validate_parse: 1 callbacks suppressed
[  296.254284][T14673] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3617'.
[  296.336826][T12558] team0 (unregistering): Port device team_slave_1 removed
[  296.342412][T12558] team0 (unregistering): Port device team_slave_0 removed
[  296.476979][ T5338] 8021q: adding VLAN 0 to HW filter on device eth11
[  296.479728][T14673] 0XD: renamed from gretap0 (while UP)
[  296.490928][T14673] 0XD: entered allmulticast mode
[  296.688864][T14681] bridge1: entered allmulticast mode
[  296.879198][T14551] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.899228][T14551] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.900437][T14551] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.913692][T14551] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  296.916039][T14551] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.925678][T14551] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  296.926336][T14551] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.952827][T14551] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.075137][ T5338] 8021q: adding VLAN 0 to HW filter on device eth12
[  297.131072][T14551] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.171819][T14551] 8021q: adding VLAN 0 to HW filter on device team0
[  297.186897][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.187008][ T9867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.202459][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.202502][ T9867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.308410][ T5338] 8021q: adding VLAN 0 to HW filter on device eth13
[  297.493312][ T5591] Bluetooth: hci3: command tx timeout
[  297.746457][T14551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.892208][T14765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.018548][T14551] veth0_vlan: entered promiscuous mode
[  298.029101][T14551] veth1_vlan: entered promiscuous mode
[  298.069113][T14551] veth0_macvtap: entered promiscuous mode
[  298.081397][T14551] veth1_macvtap: entered promiscuous mode
[  298.109086][T14551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.129777][T14780] syzkaller1: entered promiscuous mode
[  298.129795][T14780] syzkaller1: entered allmulticast mode
[  298.183436][T14551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.276838][T12557] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.276875][T12557] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.276898][T12557] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.276919][T12557] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.361502][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.361514][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.415179][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.415193][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.770096][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'.
[  298.889420][   T25] tipc: Node number set to 3761553158
[  299.144581][ T5591] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  299.144724][ T5591] 
[  299.148619][ T5591] ======================================================
[  299.151535][ T5591] WARNING: possible circular locking dependency detected
[  299.154444][ T5591] syzkaller #0 Not tainted
[  299.156380][ T5591] ------------------------------------------------------
[  299.158747][ T5591] kworker/u11:2/5591 is trying to acquire lock:
[  299.160919][ T5591] ffffffff91405f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820
[  299.164802][ T5591] 
[  299.164802][ T5591] but task is already holding lock:
[  299.167817][ T5591] ffffffff913e1b80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x313/0x500
[  299.171684][ T5591] 
[  299.171684][ T5591] which lock already depends on the new lock.
[  299.171684][ T5591] 
[  299.175781][ T5591] 
[  299.175781][ T5591] the existing dependency chain (in reverse order) is:
[  299.179432][ T5591] 
[  299.179432][ T5591] -> #2 (hci_cb_list_lock){+.+.}-{4:4}:
[  299.182614][ T5591]        __mutex_lock+0x19d/0x1550
[  299.184788][ T5591]        hci_remote_features_evt+0x53d/0x950
[  299.187300][ T5591]        hci_event_packet+0x6cd/0xf10
[  299.189502][ T5591]        hci_rx_work+0x3ee/0x1020
[  299.191589][ T5591]        process_scheduled_works+0xc3d/0x1630
[  299.194001][ T5591]        worker_thread+0xa47/0xfb0
[  299.196047][ T5591]        kthread+0x38b/0x480
[  299.198049][ T5591]        ret_from_fork+0x514/0xb70
[  299.199940][ T5591]        ret_from_fork_asm+0x1a/0x30
[  299.201920][ T5591] 
[  299.201920][ T5591] -> #1 (&hdev->lock){+.+.}-{4:4}:
[  299.205028][ T5591]        __mutex_lock+0x19d/0x1550
[  299.207203][ T5591]        l2cap_chan_connect+0x9c/0x1110
[  299.209476][ T5591]        l2cap_sock_connect+0x5e4/0x7e0
[  299.211710][ T5591]        kernel_connect+0x141/0x1c0
[  299.213743][ T5591]        rfcomm_dlc_open+0x644/0x1080
[  299.215845][ T5591]        rfcomm_sock_connect+0x2ed/0x650
[  299.217790][ T5591]        __sys_connect+0x316/0x450
[  299.219466][ T5591]        __x64_sys_connect+0x7a/0x90
[  299.221252][ T5591]        do_syscall_64+0x166/0x520
[  299.223393][ T5591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.226055][ T5591] 
[  299.226055][ T5591] -> #0 (rfcomm_mutex){+.+.}-{4:4}:
[  299.229210][ T5591]        __lock_acquire+0x164c/0x2de0
[  299.231486][ T5591]        lock_acquire+0x115/0x350
[  299.233638][ T5591]        __mutex_lock+0x19d/0x1550
[  299.235809][ T5591]        rfcomm_security_cfm+0x90/0x820
[  299.237921][ T5591]        hci_encrypt_cfm+0x37e/0x500
[  299.239664][ T5591]        hci_encrypt_change_evt+0x5db/0xcf0
[  299.241787][ T5591]        hci_event_packet+0x6cd/0xf10
[  299.243600][ T5591]        hci_rx_work+0x3ee/0x1020
[  299.245554][ T5591]        process_scheduled_works+0xc3d/0x1630
[  299.248111][ T5591]        worker_thread+0xa47/0xfb0
[  299.250266][ T5591]        kthread+0x38b/0x480
[  299.252206][ T5591]        ret_from_fork+0x514/0xb70
[  299.254376][ T5591]        ret_from_fork_asm+0x1a/0x30
[  299.256657][ T5591] 
[  299.256657][ T5591] other info that might help us debug this:
[  299.256657][ T5591] 
[  299.261068][ T5591] Chain exists of:
[  299.261068][ T5591]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[  299.261068][ T5591] 
[  299.265536][ T5591]  Possible unsafe locking scenario:
[  299.265536][ T5591] 
[  299.267941][ T5591]        CPU0                    CPU1
[  299.269806][ T5591]        ----                    ----
[  299.271879][ T5591]   lock(hci_cb_list_lock);
[  299.273720][ T5591]                                lock(&hdev->lock);
[  299.276456][ T5591]                                lock(hci_cb_list_lock);
[  299.279381][ T5591]   lock(rfcomm_mutex);
[  299.281160][ T5591] 
[  299.281160][ T5591]  *** DEADLOCK ***
[  299.281160][ T5591] 
[  299.284445][ T5591] locks held by kworker/u11:2/5591: 4, last CPU#1:
[  299.287180][ T5591]  #0: ffff888115873140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  299.291747][ T5591]  #1: ffffc9000474fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  299.296680][ T5591]  #2: ffff88811632c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_encrypt_change_evt+0x92/0xcf0
[  299.300800][ T5591]  #3: ffffffff913e1b80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_encrypt_cfm+0x313/0x500
[  299.305154][ T5591] 
[  299.305154][ T5591] stack backtrace:
[  299.307595][ T5591] CPU: 1 UID: 0 PID: 5591 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  299.311491][ T5591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.315676][ T5591] Workqueue: hci0 hci_rx_work
[  299.317696][ T5591] Call Trace:
[  299.319052][ T5591]  <TASK>
[  299.320233][ T5591]  dump_stack_lvl+0xe8/0x150
[  299.322174][ T5591]  print_circular_bug+0x2e2/0x300
[  299.324218][ T5591]  check_noncircular+0x12f/0x150
[  299.326169][ T5591]  __lock_acquire+0x164c/0x2de0
[  299.327703][ T5591]  ? perf_trace_lock_acquire+0x346/0x440
[  299.329440][ T5591]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  299.331517][ T5591]  ? rcu_is_watching+0x16/0xb0
[  299.333500][ T5591]  ? trace_contention_end+0x3d/0x140
[  299.335414][ T5591]  lock_acquire+0x115/0x350
[  299.336969][ T5591]  ? rfcomm_security_cfm+0x90/0x820
[  299.338705][ T5591]  __mutex_lock+0x19d/0x1550
[  299.340223][ T5591]  ? rfcomm_security_cfm+0x90/0x820
[  299.342033][ T5591]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  299.344075][ T5591]  ? __pfx___mutex_trylock_common+0x10/0x10
[  299.346042][ T5591]  ? rfcomm_security_cfm+0x90/0x820
[  299.347726][ T5591]  ? __pfx___mutex_lock+0x10/0x10
[  299.349435][ T5591]  ? l2cap_security_cfm+0x10b0/0x1170
[  299.351552][ T5591]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  299.354056][ T5591]  ? __pfx_l2cap_security_cfm+0x10/0x10
[  299.356402][ T5591]  ? hci_encrypt_cfm+0x313/0x500
[  299.358431][ T5591]  ? __pfx_rfcomm_security_cfm+0x10/0x10
[  299.360548][ T5591]  rfcomm_security_cfm+0x90/0x820
[  299.362431][ T5591]  ? lock_acquire+0x115/0x350
[  299.364376][ T5591]  ? __pfx_rfcomm_security_cfm+0x10/0x10
[  299.366736][ T5591]  ? hci_conn_hash_lookup_handle+0x20/0x250
[  299.369254][ T5591]  ? __pfx_rfcomm_security_cfm+0x10/0x10
[  299.371602][ T5591]  hci_encrypt_cfm+0x37e/0x500
[  299.373612][ T5591]  hci_encrypt_change_evt+0x5db/0xcf0
[  299.375859][ T5591]  ? __pfx_bt_warn_ratelimited+0x10/0x10
[  299.378220][ T5591]  ? __skb_clone+0x449/0x6c0
[  299.380082][ T5591]  ? __pfx_hci_encrypt_change_evt+0x10/0x10
[  299.382423][ T5591]  ? skb_pull_data+0xf0/0x200
[  299.384407][ T5591]  hci_event_packet+0x6cd/0xf10
[  299.386431][ T5591]  ? __pfx_hci_encrypt_change_evt+0x10/0x10
[  299.388877][ T5591]  ? __pfx_hci_event_packet+0x10/0x10
[  299.391162][ T5591]  ? audit_put_chunk+0x120/0x2d0
[  299.393250][ T5591]  ? hci_send_to_monitor+0xe2/0x590
[  299.395097][ T5591]  hci_rx_work+0x3ee/0x1020
[  299.396980][ T5591]  ? process_scheduled_works+0x97a/0x1630
[  299.399278][ T5591]  process_scheduled_works+0xc3d/0x1630
[  299.401544][ T5591]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.404030][ T5591]  ? assign_work+0x3cf/0x5d0
[  299.405889][ T5591]  worker_thread+0xa47/0xfb0
[  299.407811][ T5591]  ? __kthread_parkme+0x71/0x1f0
[  299.409819][ T5591]  kthread+0x38b/0x480
[  299.411488][ T5591]  ? __pfx_worker_thread+0x10/0x10
[  299.413553][ T5591]  ? __pfx_kthread+0x10/0x10
[  299.415393][ T5591]  ret_from_fork+0x514/0xb70
[  299.417309][ T5591]  ? __pfx_ret_from_fork+0x10/0x10
[  299.419393][ T5591]  ? __switch_to+0xc89/0x1420
[  299.421409][ T5591]  ? __pfx_kthread+0x10/0x10
[  299.423366][ T5591]  ret_from_fork_asm+0x1a/0x30
[  299.425377][ T5591]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  299.573637][ T5591] Bluetooth: hci3: command tx timeout
[  299.655487][ T5663] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.713972][ T5663] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.772493][ T5663] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.835864][ T5663] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.911335][ T5663] tipc: Resetting bearer <eth:syzkaller0>
[  299.986177][ T5663] tipc: Disabling bearer <eth:syzkaller0>
[  299.992251][ T5663] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  299.996821][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.997500][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.997785][ T5663] bond0 (unregistering): Released all slaves
[  299.998999][ T5663] bond1 (unregistering): Released all slaves
[  300.036467][ T5663] tipc: Left network mode
[  300.140366][ T5338] 8021q: adding VLAN 0 to HW filter on device eth14
[  300.220040][ T5663] hsr_slave_0: left promiscuous mode
[  300.222434][ T5663] hsr_slave_1: left promiscuous mode
[  300.222701][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.223546][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.287163][ T5663] team0 (unregistering): Port device team_slave_1 removed
[  300.289369][ T5663] team0 (unregistering): Port device team_slave_0 removed
[  300.337808][ T5338] 8021q: adding VLAN 0 to HW filter on device eth15
[  300.490621][ T5338] 8021q: adding VLAN 0 to HW filter on device eth16
[  300.552569][ T5663] IPVS: stop unused estimator thread 0...
[  300.640996][ T5338] 8021q: adding VLAN 0 to HW filter on device eth17
[  300.850786][ T5663] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.897720][ T5663] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.916615][ T5663] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.957093][ T5663] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.021077][ T5663] bridge_slave_1: left allmulticast mode
[  301.021098][ T5663] bridge_slave_1: left promiscuous mode
[  301.021191][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.022269][ T5663] bridge_slave_0: left allmulticast mode
[  301.022283][ T5663] bridge_slave_0: left promiscuous mode
[  301.022369][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.090014][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.091403][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.092301][ T5663] bond0 (unregistering): Released all slaves
[  301.228459][ T5338] 8021q: adding VLAN 0 to HW filter on device eth18
[  301.289123][ T5663] hsr_slave_0: left promiscuous mode
[  301.289494][ T5663] hsr_slave_1: left promiscuous mode
[  301.289716][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.289726][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.290228][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.290235][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.291823][ T5663] veth1_macvtap: left promiscuous mode
[  301.291839][ T5663] veth0_macvtap: left promiscuous mode
[  301.291911][ T5663] veth1_vlan: left promiscuous mode
[  301.291937][ T5663] veth0_vlan: left promiscuous mode
[  301.396049][ T5663] team0 (unregistering): Port device team_slave_1 removed
[  301.399764][ T5663] team0 (unregistering): Port device team_slave_0 removed
[  301.433049][ T5338] 8021q: adding VLAN 0 to HW filter on device eth19
[  301.542426][ T5338] 8021q: adding VLAN 0 to HW filter on device eth20
[  301.648271][ T5338] 8021q: adding VLAN 0 to HW filter on device eth21
