[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Started Getty on tty1.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Started getty on tty2-tty6 if dbus and logind are not available.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts.
2021/10/18 14:37:22 fuzzer started
2021/10/18 14:37:22 dialing manager at 10.128.0.169:45165
2021/10/18 14:37:23 syscalls: 1698
2021/10/18 14:37:23 code coverage: enabled
2021/10/18 14:37:23 comparison tracing: enabled
2021/10/18 14:37:23 extra coverage: enabled
2021/10/18 14:37:23 setuid sandbox: enabled
2021/10/18 14:37:23 namespace sandbox: enabled
2021/10/18 14:37:23 Android sandbox: /sys/fs/selinux/policy does not exist
2021/10/18 14:37:23 fault injection: enabled
2021/10/18 14:37:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/10/18 14:37:23 net packet injection: enabled
2021/10/18 14:37:23 net device setup: enabled
2021/10/18 14:37:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/10/18 14:37:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/10/18 14:37:23 USB emulation: enabled
2021/10/18 14:37:23 hci packet injection: enabled
2021/10/18 14:37:23 wifi device emulation: enabled
2021/10/18 14:37:23 802.15.4 emulation: enabled
2021/10/18 14:37:23 fetching corpus: 0, signal 0/2000 (executing program)
syzkaller login: [   67.179108][ T6539] cgroup: Unknown subsys name 'net'
[   67.190473][ T6539] cgroup: Unknown subsys name 'rlimit'
2021/10/18 14:37:23 fetching corpus: 50, signal 43947/47460 (executing program)
2021/10/18 14:37:23 fetching corpus: 100, signal 54985/60040 (executing program)
2021/10/18 14:37:23 fetching corpus: 150, signal 68248/74679 (executing program)
2021/10/18 14:37:24 fetching corpus: 200, signal 73485/81359 (executing program)
2021/10/18 14:37:24 fetching corpus: 250, signal 79088/88332 (executing program)
2021/10/18 14:37:24 fetching corpus: 300, signal 84163/94722 (executing program)
2021/10/18 14:37:24 fetching corpus: 350, signal 88478/100313 (executing program)
2021/10/18 14:37:25 fetching corpus: 400, signal 91583/104760 (executing program)
2021/10/18 14:37:25 fetching corpus: 450, signal 94827/109243 (executing program)
2021/10/18 14:37:25 fetching corpus: 500, signal 98088/113740 (executing program)
2021/10/18 14:37:25 fetching corpus: 550, signal 100908/117831 (executing program)
2021/10/18 14:37:26 fetching corpus: 600, signal 103564/121713 (executing program)
2021/10/18 14:37:26 fetching corpus: 650, signal 105882/125222 (executing program)
2021/10/18 14:37:26 fetching corpus: 700, signal 109808/130219 (executing program)
[   71.004296][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.010823][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
2021/10/18 14:37:26 fetching corpus: 750, signal 111546/133148 (executing program)
2021/10/18 14:37:27 fetching corpus: 800, signal 114516/137213 (executing program)
2021/10/18 14:37:27 fetching corpus: 850, signal 118498/142103 (executing program)
2021/10/18 14:37:27 fetching corpus: 900, signal 120258/144992 (executing program)
2021/10/18 14:37:27 fetching corpus: 950, signal 122410/148205 (executing program)
2021/10/18 14:37:28 fetching corpus: 1000, signal 124364/151257 (executing program)
2021/10/18 14:37:28 fetching corpus: 1050, signal 126221/154171 (executing program)
2021/10/18 14:37:28 fetching corpus: 1100, signal 128500/157412 (executing program)
2021/10/18 14:37:28 fetching corpus: 1150, signal 130150/160115 (executing program)
2021/10/18 14:37:29 fetching corpus: 1200, signal 132159/163048 (executing program)
2021/10/18 14:37:29 fetching corpus: 1250, signal 134079/165913 (executing program)
2021/10/18 14:37:29 fetching corpus: 1300, signal 136178/168896 (executing program)
2021/10/18 14:37:29 fetching corpus: 1350, signal 138029/171638 (executing program)
2021/10/18 14:37:30 fetching corpus: 1400, signal 141034/175301 (executing program)
2021/10/18 14:37:30 fetching corpus: 1450, signal 142438/177657 (executing program)
2021/10/18 14:37:30 fetching corpus: 1500, signal 143802/179936 (executing program)
2021/10/18 14:37:31 fetching corpus: 1550, signal 145599/182560 (executing program)
2021/10/18 14:37:31 fetching corpus: 1600, signal 147127/184899 (executing program)
2021/10/18 14:37:31 fetching corpus: 1650, signal 148383/187039 (executing program)
2021/10/18 14:37:31 fetching corpus: 1700, signal 149953/189419 (executing program)
2021/10/18 14:37:32 fetching corpus: 1750, signal 151354/191668 (executing program)
2021/10/18 14:37:32 fetching corpus: 1800, signal 153067/194155 (executing program)
2021/10/18 14:37:32 fetching corpus: 1850, signal 154361/196287 (executing program)
2021/10/18 14:37:32 fetching corpus: 1900, signal 156612/199135 (executing program)
2021/10/18 14:37:33 fetching corpus: 1950, signal 157939/201233 (executing program)
2021/10/18 14:37:33 fetching corpus: 2000, signal 159038/203101 (executing program)
2021/10/18 14:37:33 fetching corpus: 2050, signal 160976/205657 (executing program)
2021/10/18 14:37:33 fetching corpus: 2100, signal 162224/207681 (executing program)
2021/10/18 14:37:33 fetching corpus: 2150, signal 163581/209766 (executing program)
2021/10/18 14:37:34 fetching corpus: 2200, signal 164824/211760 (executing program)
2021/10/18 14:37:34 fetching corpus: 2250, signal 165682/213469 (executing program)
2021/10/18 14:37:34 fetching corpus: 2300, signal 166987/215446 (executing program)
2021/10/18 14:37:34 fetching corpus: 2350, signal 168072/217229 (executing program)
2021/10/18 14:37:35 fetching corpus: 2400, signal 169617/219354 (executing program)
2021/10/18 14:37:35 fetching corpus: 2450, signal 170825/221230 (executing program)
2021/10/18 14:37:35 fetching corpus: 2500, signal 172017/223096 (executing program)
2021/10/18 14:37:35 fetching corpus: 2550, signal 173239/224950 (executing program)
2021/10/18 14:37:36 fetching corpus: 2600, signal 174008/226483 (executing program)
2021/10/18 14:37:36 fetching corpus: 2650, signal 174796/228019 (executing program)
2021/10/18 14:37:36 fetching corpus: 2700, signal 176036/229886 (executing program)
2021/10/18 14:37:37 fetching corpus: 2750, signal 177210/231667 (executing program)
2021/10/18 14:37:37 fetching corpus: 2800, signal 178422/233418 (executing program)
2021/10/18 14:37:37 fetching corpus: 2850, signal 179870/235326 (executing program)
2021/10/18 14:37:37 fetching corpus: 2900, signal 180820/236933 (executing program)
2021/10/18 14:37:38 fetching corpus: 2950, signal 182115/238767 (executing program)
2021/10/18 14:37:38 fetching corpus: 3000, signal 183201/240404 (executing program)
2021/10/18 14:37:38 fetching corpus: 3050, signal 184194/241991 (executing program)
2021/10/18 14:37:39 fetching corpus: 3100, signal 185269/243561 (executing program)
2021/10/18 14:37:39 fetching corpus: 3150, signal 186467/245211 (executing program)
2021/10/18 14:37:39 fetching corpus: 3200, signal 187321/246625 (executing program)
2021/10/18 14:37:39 fetching corpus: 3250, signal 188487/248249 (executing program)
2021/10/18 14:37:39 fetching corpus: 3300, signal 189490/249757 (executing program)
2021/10/18 14:37:40 fetching corpus: 3350, signal 190429/251221 (executing program)
2021/10/18 14:37:40 fetching corpus: 3400, signal 191460/252709 (executing program)
2021/10/18 14:37:40 fetching corpus: 3450, signal 192354/254114 (executing program)
2021/10/18 14:37:41 fetching corpus: 3500, signal 193433/255593 (executing program)
2021/10/18 14:37:41 fetching corpus: 3550, signal 194219/256911 (executing program)
2021/10/18 14:37:41 fetching corpus: 3600, signal 195464/258512 (executing program)
2021/10/18 14:37:41 fetching corpus: 3650, signal 196478/259983 (executing program)
2021/10/18 14:37:42 fetching corpus: 3700, signal 197184/261286 (executing program)
2021/10/18 14:37:42 fetching corpus: 3750, signal 198258/262746 (executing program)
2021/10/18 14:37:42 fetching corpus: 3800, signal 199200/264150 (executing program)
2021/10/18 14:37:42 fetching corpus: 3850, signal 200107/265499 (executing program)
2021/10/18 14:37:43 fetching corpus: 3900, signal 201172/266975 (executing program)
2021/10/18 14:37:43 fetching corpus: 3950, signal 201980/268197 (executing program)
2021/10/18 14:37:43 fetching corpus: 4000, signal 202784/269485 (executing program)
2021/10/18 14:37:43 fetching corpus: 4050, signal 203339/270575 (executing program)
2021/10/18 14:37:43 fetching corpus: 4100, signal 204116/271830 (executing program)
2021/10/18 14:37:44 fetching corpus: 4150, signal 204950/273083 (executing program)
2021/10/18 14:37:44 fetching corpus: 4200, signal 205823/274307 (executing program)
2021/10/18 14:37:44 fetching corpus: 4250, signal 206996/275716 (executing program)
2021/10/18 14:37:44 fetching corpus: 4300, signal 207722/276885 (executing program)
2021/10/18 14:37:45 fetching corpus: 4350, signal 208443/278010 (executing program)
2021/10/18 14:37:45 fetching corpus: 4400, signal 209067/279087 (executing program)
2021/10/18 14:37:45 fetching corpus: 4450, signal 210094/280406 (executing program)
2021/10/18 14:37:45 fetching corpus: 4500, signal 210757/281484 (executing program)
2021/10/18 14:37:46 fetching corpus: 4550, signal 211606/282640 (executing program)
2021/10/18 14:37:46 fetching corpus: 4600, signal 212344/283740 (executing program)
2021/10/18 14:37:46 fetching corpus: 4650, signal 213185/284867 (executing program)
2021/10/18 14:37:46 fetching corpus: 4700, signal 214056/286044 (executing program)
2021/10/18 14:37:47 fetching corpus: 4750, signal 214729/287117 (executing program)
2021/10/18 14:37:47 fetching corpus: 4800, signal 215553/288220 (executing program)
2021/10/18 14:37:47 fetching corpus: 4850, signal 216244/289283 (executing program)
2021/10/18 14:37:48 fetching corpus: 4900, signal 216812/290249 (executing program)
2021/10/18 14:37:48 fetching corpus: 4950, signal 217505/291300 (executing program)
2021/10/18 14:37:48 fetching corpus: 5000, signal 218029/292288 (executing program)
2021/10/18 14:37:48 fetching corpus: 5050, signal 218692/293354 (executing program)
2021/10/18 14:37:49 fetching corpus: 5100, signal 219195/294257 (executing program)
2021/10/18 14:37:49 fetching corpus: 5150, signal 219876/295253 (executing program)
2021/10/18 14:37:49 fetching corpus: 5200, signal 220496/296208 (executing program)
2021/10/18 14:37:49 fetching corpus: 5250, signal 221380/297283 (executing program)
2021/10/18 14:37:50 fetching corpus: 5300, signal 221861/298209 (executing program)
2021/10/18 14:37:50 fetching corpus: 5350, signal 222671/299271 (executing program)
2021/10/18 14:37:50 fetching corpus: 5400, signal 223331/300209 (executing program)
2021/10/18 14:37:51 fetching corpus: 5450, signal 223927/301131 (executing program)
2021/10/18 14:37:51 fetching corpus: 5500, signal 224559/302063 (executing program)
2021/10/18 14:37:51 fetching corpus: 5550, signal 225244/302993 (executing program)
2021/10/18 14:37:51 fetching corpus: 5600, signal 226037/303951 (executing program)
2021/10/18 14:37:52 fetching corpus: 5650, signal 227084/304976 (executing program)
2021/10/18 14:37:52 fetching corpus: 5700, signal 228170/306026 (executing program)
2021/10/18 14:37:52 fetching corpus: 5750, signal 228901/306962 (executing program)
2021/10/18 14:37:52 fetching corpus: 5800, signal 229442/307816 (executing program)
2021/10/18 14:37:53 fetching corpus: 5850, signal 230067/308705 (executing program)
2021/10/18 14:37:53 fetching corpus: 5900, signal 230483/309517 (executing program)
2021/10/18 14:37:53 fetching corpus: 5950, signal 231009/310333 (executing program)
2021/10/18 14:37:53 fetching corpus: 6000, signal 231499/311145 (executing program)
2021/10/18 14:37:54 fetching corpus: 6050, signal 232052/311972 (executing program)
2021/10/18 14:37:54 fetching corpus: 6100, signal 232446/312766 (executing program)
2021/10/18 14:37:54 fetching corpus: 6150, signal 233063/313623 (executing program)
2021/10/18 14:37:54 fetching corpus: 6200, signal 233659/314457 (executing program)
2021/10/18 14:37:54 fetching corpus: 6250, signal 234358/315291 (executing program)
2021/10/18 14:37:55 fetching corpus: 6300, signal 234879/316110 (executing program)
2021/10/18 14:37:55 fetching corpus: 6350, signal 235379/316879 (executing program)
2021/10/18 14:37:55 fetching corpus: 6400, signal 236215/317707 (executing program)
2021/10/18 14:37:56 fetching corpus: 6450, signal 236739/318470 (executing program)
2021/10/18 14:37:56 fetching corpus: 6500, signal 237251/319213 (executing program)
2021/10/18 14:37:56 fetching corpus: 6550, signal 237845/320018 (executing program)
2021/10/18 14:37:56 fetching corpus: 6600, signal 238259/320748 (executing program)
2021/10/18 14:37:57 fetching corpus: 6650, signal 238837/321512 (executing program)
2021/10/18 14:37:57 fetching corpus: 6700, signal 239391/322254 (executing program)
2021/10/18 14:37:57 fetching corpus: 6750, signal 239987/322998 (executing program)
2021/10/18 14:37:57 fetching corpus: 6800, signal 240574/323727 (executing program)
2021/10/18 14:37:58 fetching corpus: 6850, signal 241043/324413 (executing program)
2021/10/18 14:37:58 fetching corpus: 6900, signal 241529/325136 (executing program)
2021/10/18 14:37:58 fetching corpus: 6950, signal 241951/325779 (executing program)
2021/10/18 14:37:58 fetching corpus: 7000, signal 242519/326514 (executing program)
2021/10/18 14:37:58 fetching corpus: 7050, signal 243074/327223 (executing program)
2021/10/18 14:37:59 fetching corpus: 7100, signal 243512/327864 (executing program)
2021/10/18 14:37:59 fetching corpus: 7150, signal 243927/328544 (executing program)
2021/10/18 14:37:59 fetching corpus: 7200, signal 244303/329192 (executing program)
2021/10/18 14:37:59 fetching corpus: 7250, signal 244710/329850 (executing program)
2021/10/18 14:38:00 fetching corpus: 7300, signal 245056/330485 (executing program)
2021/10/18 14:38:00 fetching corpus: 7350, signal 245476/331104 (executing program)
2021/10/18 14:38:00 fetching corpus: 7400, signal 246011/331770 (executing program)
2021/10/18 14:38:00 fetching corpus: 7450, signal 246352/332401 (executing program)
2021/10/18 14:38:01 fetching corpus: 7500, signal 246688/333012 (executing program)
2021/10/18 14:38:01 fetching corpus: 7550, signal 247182/333661 (executing program)
2021/10/18 14:38:01 fetching corpus: 7600, signal 247535/334291 (executing program)
2021/10/18 14:38:01 fetching corpus: 7650, signal 248040/334917 (executing program)
2021/10/18 14:38:01 fetching corpus: 7700, signal 248386/335541 (executing program)
2021/10/18 14:38:02 fetching corpus: 7750, signal 249185/336163 (executing program)
2021/10/18 14:38:02 fetching corpus: 7800, signal 249618/336747 (executing program)
2021/10/18 14:38:02 fetching corpus: 7850, signal 250239/337361 (executing program)
2021/10/18 14:38:02 fetching corpus: 7900, signal 250629/337978 (executing program)
2021/10/18 14:38:02 fetching corpus: 7950, signal 251312/338568 (executing program)
2021/10/18 14:38:03 fetching corpus: 8000, signal 251739/339141 (executing program)
2021/10/18 14:38:03 fetching corpus: 8050, signal 252116/339695 (executing program)
2021/10/18 14:38:03 fetching corpus: 8100, signal 252579/340230 (executing program)
2021/10/18 14:38:03 fetching corpus: 8150, signal 253137/340813 (executing program)
2021/10/18 14:38:04 fetching corpus: 8200, signal 253484/341395 (executing program)
2021/10/18 14:38:04 fetching corpus: 8250, signal 253920/341966 (executing program)
2021/10/18 14:38:04 fetching corpus: 8300, signal 254332/342476 (executing program)
2021/10/18 14:38:04 fetching corpus: 8350, signal 255073/343007 (executing program)
2021/10/18 14:38:05 fetching corpus: 8400, signal 255414/343552 (executing program)
2021/10/18 14:38:05 fetching corpus: 8450, signal 256004/344052 (executing program)
2021/10/18 14:38:05 fetching corpus: 8500, signal 256585/344543 (executing program)
2021/10/18 14:38:06 fetching corpus: 8550, signal 257126/345041 (executing program)
2021/10/18 14:38:06 fetching corpus: 8600, signal 257620/345354 (executing program)
2021/10/18 14:38:06 fetching corpus: 8650, signal 257954/345354 (executing program)
2021/10/18 14:38:06 fetching corpus: 8700, signal 258396/345354 (executing program)
2021/10/18 14:38:07 fetching corpus: 8750, signal 258799/345354 (executing program)
2021/10/18 14:38:07 fetching corpus: 8800, signal 259217/345354 (executing program)
2021/10/18 14:38:07 fetching corpus: 8850, signal 259676/345354 (executing program)
2021/10/18 14:38:07 fetching corpus: 8900, signal 260255/345354 (executing program)
2021/10/18 14:38:08 fetching corpus: 8950, signal 260585/345354 (executing program)
2021/10/18 14:38:08 fetching corpus: 9000, signal 261044/345354 (executing program)
2021/10/18 14:38:08 fetching corpus: 9050, signal 261443/345354 (executing program)
2021/10/18 14:38:08 fetching corpus: 9100, signal 261769/345354 (executing program)
2021/10/18 14:38:09 fetching corpus: 9150, signal 262230/345354 (executing program)
2021/10/18 14:38:09 fetching corpus: 9200, signal 262556/345354 (executing program)
2021/10/18 14:38:09 fetching corpus: 9250, signal 263123/345354 (executing program)
2021/10/18 14:38:09 fetching corpus: 9300, signal 263456/345354 (executing program)
2021/10/18 14:38:09 fetching corpus: 9350, signal 263802/345354 (executing program)
2021/10/18 14:38:10 fetching corpus: 9400, signal 264221/345354 (executing program)
2021/10/18 14:38:10 fetching corpus: 9450, signal 264636/345354 (executing program)
2021/10/18 14:38:10 fetching corpus: 9500, signal 264962/345354 (executing program)
2021/10/18 14:38:10 fetching corpus: 9550, signal 265333/345354 (executing program)
2021/10/18 14:38:10 fetching corpus: 9600, signal 265677/345354 (executing program)
2021/10/18 14:38:11 fetching corpus: 9650, signal 265991/345354 (executing program)
2021/10/18 14:38:11 fetching corpus: 9700, signal 266437/345354 (executing program)
2021/10/18 14:38:11 fetching corpus: 9750, signal 266779/345354 (executing program)
2021/10/18 14:38:11 fetching corpus: 9800, signal 267175/345354 (executing program)
2021/10/18 14:38:12 fetching corpus: 9850, signal 267526/345354 (executing program)
2021/10/18 14:38:12 fetching corpus: 9900, signal 267965/345354 (executing program)
2021/10/18 14:38:12 fetching corpus: 9950, signal 268795/345362 (executing program)
2021/10/18 14:38:12 fetching corpus: 10000, signal 269260/345362 (executing program)
2021/10/18 14:38:12 fetching corpus: 10050, signal 269551/345362 (executing program)
2021/10/18 14:38:13 fetching corpus: 10100, signal 269927/345362 (executing program)
2021/10/18 14:38:13 fetching corpus: 10150, signal 270355/345362 (executing program)
2021/10/18 14:38:13 fetching corpus: 10200, signal 270849/345362 (executing program)
2021/10/18 14:38:13 fetching corpus: 10250, signal 271317/345362 (executing program)
2021/10/18 14:38:13 fetching corpus: 10300, signal 271801/345362 (executing program)
2021/10/18 14:38:14 fetching corpus: 10350, signal 272167/345362 (executing program)
2021/10/18 14:38:14 fetching corpus: 10400, signal 272511/345362 (executing program)
2021/10/18 14:38:14 fetching corpus: 10450, signal 272927/345362 (executing program)
2021/10/18 14:38:14 fetching corpus: 10500, signal 273602/345362 (executing program)
2021/10/18 14:38:15 fetching corpus: 10550, signal 274063/345362 (executing program)
2021/10/18 14:38:15 fetching corpus: 10600, signal 274482/345362 (executing program)
2021/10/18 14:38:15 fetching corpus: 10650, signal 274844/345362 (executing program)
2021/10/18 14:38:15 fetching corpus: 10700, signal 275093/345362 (executing program)
2021/10/18 14:38:16 fetching corpus: 10750, signal 275384/345362 (executing program)
2021/10/18 14:38:16 fetching corpus: 10800, signal 275824/345362 (executing program)
2021/10/18 14:38:16 fetching corpus: 10850, signal 276113/345362 (executing program)
2021/10/18 14:38:16 fetching corpus: 10900, signal 276472/345362 (executing program)
2021/10/18 14:38:17 fetching corpus: 10950, signal 276713/345362 (executing program)
2021/10/18 14:38:17 fetching corpus: 11000, signal 277093/345362 (executing program)
2021/10/18 14:38:17 fetching corpus: 11050, signal 277547/345362 (executing program)
2021/10/18 14:38:17 fetching corpus: 11100, signal 277989/345362 (executing program)
2021/10/18 14:38:17 fetching corpus: 11150, signal 278320/345362 (executing program)
2021/10/18 14:38:18 fetching corpus: 11200, signal 278805/345362 (executing program)
2021/10/18 14:38:18 fetching corpus: 11250, signal 279263/345362 (executing program)
2021/10/18 14:38:18 fetching corpus: 11300, signal 279693/345362 (executing program)
2021/10/18 14:38:18 fetching corpus: 11350, signal 280010/345362 (executing program)
2021/10/18 14:38:19 fetching corpus: 11400, signal 280283/345362 (executing program)
2021/10/18 14:38:19 fetching corpus: 11450, signal 280635/345362 (executing program)
2021/10/18 14:38:19 fetching corpus: 11500, signal 281030/345362 (executing program)
2021/10/18 14:38:19 fetching corpus: 11550, signal 281359/345362 (executing program)
2021/10/18 14:38:20 fetching corpus: 11600, signal 281589/345362 (executing program)
2021/10/18 14:38:20 fetching corpus: 11650, signal 281942/345362 (executing program)
2021/10/18 14:38:20 fetching corpus: 11700, signal 282302/345362 (executing program)
2021/10/18 14:38:20 fetching corpus: 11750, signal 282544/345362 (executing program)
2021/10/18 14:38:21 fetching corpus: 11800, signal 282821/345362 (executing program)
2021/10/18 14:38:21 fetching corpus: 11850, signal 283173/345362 (executing program)
2021/10/18 14:38:21 fetching corpus: 11900, signal 283482/345362 (executing program)
2021/10/18 14:38:22 fetching corpus: 11950, signal 283747/345362 (executing program)
2021/10/18 14:38:22 fetching corpus: 12000, signal 284098/345362 (executing program)
2021/10/18 14:38:22 fetching corpus: 12050, signal 284427/345362 (executing program)
2021/10/18 14:38:22 fetching corpus: 12100, signal 284732/345362 (executing program)
2021/10/18 14:38:22 fetching corpus: 12150, signal 285130/345362 (executing program)
2021/10/18 14:38:23 fetching corpus: 12200, signal 285453/345362 (executing program)
2021/10/18 14:38:23 fetching corpus: 12250, signal 285765/345362 (executing program)
2021/10/18 14:38:23 fetching corpus: 12300, signal 286074/345362 (executing program)
2021/10/18 14:38:23 fetching corpus: 12350, signal 286486/345362 (executing program)
2021/10/18 14:38:24 fetching corpus: 12400, signal 286740/345362 (executing program)
2021/10/18 14:38:24 fetching corpus: 12450, signal 287058/345362 (executing program)
2021/10/18 14:38:24 fetching corpus: 12500, signal 287343/345362 (executing program)
2021/10/18 14:38:24 fetching corpus: 12550, signal 287692/345362 (executing program)
2021/10/18 14:38:25 fetching corpus: 12600, signal 287980/345362 (executing program)
2021/10/18 14:38:25 fetching corpus: 12650, signal 288200/345362 (executing program)
2021/10/18 14:38:25 fetching corpus: 12700, signal 288428/345362 (executing program)
2021/10/18 14:38:26 fetching corpus: 12750, signal 288677/345362 (executing program)
2021/10/18 14:38:26 fetching corpus: 12800, signal 288965/345362 (executing program)
2021/10/18 14:38:26 fetching corpus: 12850, signal 289334/345362 (executing program)
2021/10/18 14:38:26 fetching corpus: 12900, signal 289722/345362 (executing program)
2021/10/18 14:38:26 fetching corpus: 12950, signal 290093/345362 (executing program)
2021/10/18 14:38:27 fetching corpus: 13000, signal 290416/345362 (executing program)
2021/10/18 14:38:27 fetching corpus: 13050, signal 290638/345362 (executing program)
2021/10/18 14:38:27 fetching corpus: 13100, signal 291039/345362 (executing program)
2021/10/18 14:38:27 fetching corpus: 13150, signal 291266/345362 (executing program)
2021/10/18 14:38:27 fetching corpus: 13200, signal 291598/345362 (executing program)
2021/10/18 14:38:28 fetching corpus: 13250, signal 292197/345362 (executing program)
[  132.449512][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.457595][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
2021/10/18 14:38:28 fetching corpus: 13300, signal 292474/345362 (executing program)
2021/10/18 14:38:28 fetching corpus: 13350, signal 292720/345362 (executing program)
2021/10/18 14:38:28 fetching corpus: 13400, signal 292935/345362 (executing program)
2021/10/18 14:38:29 fetching corpus: 13450, signal 293221/345362 (executing program)
2021/10/18 14:38:29 fetching corpus: 13500, signal 293484/345362 (executing program)
2021/10/18 14:38:29 fetching corpus: 13550, signal 293805/345362 (executing program)
2021/10/18 14:38:29 fetching corpus: 13600, signal 294182/345362 (executing program)
2021/10/18 14:38:30 fetching corpus: 13650, signal 294589/345362 (executing program)
2021/10/18 14:38:30 fetching corpus: 13700, signal 294967/345362 (executing program)
2021/10/18 14:38:30 fetching corpus: 13750, signal 295252/345362 (executing program)
2021/10/18 14:38:30 fetching corpus: 13800, signal 295582/345362 (executing program)
2021/10/18 14:38:31 fetching corpus: 13850, signal 295913/345362 (executing program)
2021/10/18 14:38:31 fetching corpus: 13900, signal 296154/345362 (executing program)
2021/10/18 14:38:31 fetching corpus: 13950, signal 296419/345362 (executing program)
2021/10/18 14:38:31 fetching corpus: 14000, signal 296740/345362 (executing program)
2021/10/18 14:38:31 fetching corpus: 14050, signal 297067/345362 (executing program)
2021/10/18 14:38:32 fetching corpus: 14100, signal 297277/345386 (executing program)
2021/10/18 14:38:32 fetching corpus: 14150, signal 297547/345386 (executing program)
2021/10/18 14:38:32 fetching corpus: 14200, signal 297752/345386 (executing program)
2021/10/18 14:38:32 fetching corpus: 14250, signal 297992/345386 (executing program)
2021/10/18 14:38:32 fetching corpus: 14300, signal 298217/345386 (executing program)
2021/10/18 14:38:33 fetching corpus: 14350, signal 298451/345386 (executing program)
2021/10/18 14:38:33 fetching corpus: 14400, signal 298727/345386 (executing program)
2021/10/18 14:38:33 fetching corpus: 14450, signal 299017/345386 (executing program)
2021/10/18 14:38:33 fetching corpus: 14500, signal 299266/345386 (executing program)
2021/10/18 14:38:34 fetching corpus: 14550, signal 299523/345386 (executing program)
2021/10/18 14:38:34 fetching corpus: 14600, signal 299878/345386 (executing program)
2021/10/18 14:38:34 fetching corpus: 14650, signal 300228/345386 (executing program)
2021/10/18 14:38:34 fetching corpus: 14700, signal 300494/345386 (executing program)
2021/10/18 14:38:35 fetching corpus: 14750, signal 300738/345386 (executing program)
2021/10/18 14:38:35 fetching corpus: 14800, signal 300958/345386 (executing program)
2021/10/18 14:38:35 fetching corpus: 14850, signal 301176/345386 (executing program)
2021/10/18 14:38:35 fetching corpus: 14900, signal 301438/345386 (executing program)
2021/10/18 14:38:35 fetching corpus: 14950, signal 301765/345386 (executing program)
2021/10/18 14:38:36 fetching corpus: 15000, signal 302020/345386 (executing program)
2021/10/18 14:38:36 fetching corpus: 15050, signal 302222/345386 (executing program)
2021/10/18 14:38:36 fetching corpus: 15100, signal 302490/345386 (executing program)
2021/10/18 14:38:36 fetching corpus: 15150, signal 302622/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15200, signal 302890/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15250, signal 303103/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15300, signal 303364/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15350, signal 303601/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15400, signal 303845/345386 (executing program)
2021/10/18 14:38:37 fetching corpus: 15450, signal 304179/345386 (executing program)
2021/10/18 14:38:38 fetching corpus: 15500, signal 304466/345386 (executing program)
2021/10/18 14:38:38 fetching corpus: 15550, signal 305232/345386 (executing program)
2021/10/18 14:38:38 fetching corpus: 15600, signal 305439/345386 (executing program)
2021/10/18 14:38:38 fetching corpus: 15650, signal 305663/345386 (executing program)
2021/10/18 14:38:39 fetching corpus: 15700, signal 305888/345386 (executing program)
2021/10/18 14:38:39 fetching corpus: 15750, signal 306159/345386 (executing program)
2021/10/18 14:38:39 fetching corpus: 15800, signal 306371/345386 (executing program)
2021/10/18 14:38:39 fetching corpus: 15850, signal 306597/345386 (executing program)
2021/10/18 14:38:39 fetching corpus: 15900, signal 306962/345387 (executing program)
2021/10/18 14:38:40 fetching corpus: 15950, signal 307263/345388 (executing program)
2021/10/18 14:38:40 fetching corpus: 16000, signal 307486/345388 (executing program)
2021/10/18 14:38:40 fetching corpus: 16050, signal 307845/345388 (executing program)
2021/10/18 14:38:40 fetching corpus: 16100, signal 308035/345388 (executing program)
2021/10/18 14:38:41 fetching corpus: 16150, signal 308234/345388 (executing program)
2021/10/18 14:38:41 fetching corpus: 16200, signal 308441/345388 (executing program)
2021/10/18 14:38:41 fetching corpus: 16250, signal 308679/345388 (executing program)
2021/10/18 14:38:41 fetching corpus: 16300, signal 308904/345388 (executing program)
2021/10/18 14:38:41 fetching corpus: 16350, signal 309172/345388 (executing program)
2021/10/18 14:38:42 fetching corpus: 16400, signal 309483/345388 (executing program)
2021/10/18 14:38:42 fetching corpus: 16450, signal 309724/345388 (executing program)
2021/10/18 14:38:42 fetching corpus: 16500, signal 309979/345388 (executing program)
2021/10/18 14:38:43 fetching corpus: 16550, signal 310235/345388 (executing program)
2021/10/18 14:38:43 fetching corpus: 16600, signal 310506/345388 (executing program)
2021/10/18 14:38:43 fetching corpus: 16650, signal 310764/345388 (executing program)
2021/10/18 14:38:44 fetching corpus: 16700, signal 310961/345388 (executing program)
2021/10/18 14:38:44 fetching corpus: 16750, signal 311179/345388 (executing program)
2021/10/18 14:38:44 fetching corpus: 16800, signal 311431/345388 (executing program)
2021/10/18 14:38:44 fetching corpus: 16850, signal 311666/345388 (executing program)
2021/10/18 14:38:44 fetching corpus: 16900, signal 311949/345388 (executing program)
2021/10/18 14:38:45 fetching corpus: 16950, signal 312110/345388 (executing program)
2021/10/18 14:38:45 fetching corpus: 17000, signal 312499/345388 (executing program)
2021/10/18 14:38:45 fetching corpus: 17050, signal 312744/345388 (executing program)
2021/10/18 14:38:45 fetching corpus: 17100, signal 312942/345388 (executing program)
2021/10/18 14:38:46 fetching corpus: 17150, signal 313221/345388 (executing program)
2021/10/18 14:38:46 fetching corpus: 17200, signal 313545/345388 (executing program)
2021/10/18 14:38:46 fetching corpus: 17250, signal 313924/345388 (executing program)
2021/10/18 14:38:46 fetching corpus: 17300, signal 314124/345388 (executing program)
2021/10/18 14:38:47 fetching corpus: 17350, signal 314320/345388 (executing program)
2021/10/18 14:38:47 fetching corpus: 17400, signal 314584/345388 (executing program)
2021/10/18 14:38:47 fetching corpus: 17450, signal 314843/345388 (executing program)
2021/10/18 14:38:48 fetching corpus: 17500, signal 315044/345388 (executing program)
2021/10/18 14:38:48 fetching corpus: 17550, signal 315257/345388 (executing program)
2021/10/18 14:38:48 fetching corpus: 17600, signal 315469/345388 (executing program)
2021/10/18 14:38:48 fetching corpus: 17650, signal 315757/345388 (executing program)
2021/10/18 14:38:48 fetching corpus: 17700, signal 315980/345388 (executing program)
2021/10/18 14:38:49 fetching corpus: 17750, signal 316254/345388 (executing program)
2021/10/18 14:38:49 fetching corpus: 17800, signal 316652/345388 (executing program)
2021/10/18 14:38:49 fetching corpus: 17850, signal 316853/345388 (executing program)
2021/10/18 14:38:49 fetching corpus: 17900, signal 317106/345388 (executing program)
2021/10/18 14:38:50 fetching corpus: 17950, signal 317338/345388 (executing program)
2021/10/18 14:38:50 fetching corpus: 18000, signal 317521/345388 (executing program)
2021/10/18 14:38:50 fetching corpus: 18050, signal 317681/345388 (executing program)
2021/10/18 14:38:51 fetching corpus: 18100, signal 317891/345388 (executing program)
2021/10/18 14:38:51 fetching corpus: 18150, signal 318142/345388 (executing program)
2021/10/18 14:38:51 fetching corpus: 18200, signal 318342/345388 (executing program)
2021/10/18 14:38:51 fetching corpus: 18250, signal 318584/345388 (executing program)
2021/10/18 14:38:51 fetching corpus: 18300, signal 318789/345388 (executing program)
2021/10/18 14:38:52 fetching corpus: 18350, signal 318997/345388 (executing program)
2021/10/18 14:38:52 fetching corpus: 18400, signal 319259/345388 (executing program)
2021/10/18 14:38:52 fetching corpus: 18450, signal 319544/345388 (executing program)
2021/10/18 14:38:52 fetching corpus: 18500, signal 319745/345388 (executing program)
2021/10/18 14:38:53 fetching corpus: 18550, signal 320107/345388 (executing program)
2021/10/18 14:38:53 fetching corpus: 18600, signal 320308/345388 (executing program)
2021/10/18 14:38:53 fetching corpus: 18650, signal 320507/345388 (executing program)
2021/10/18 14:38:53 fetching corpus: 18700, signal 320733/345388 (executing program)
2021/10/18 14:38:53 fetching corpus: 18750, signal 321026/345388 (executing program)
2021/10/18 14:38:54 fetching corpus: 18800, signal 321243/345388 (executing program)
2021/10/18 14:38:54 fetching corpus: 18850, signal 321408/345388 (executing program)
2021/10/18 14:38:54 fetching corpus: 18900, signal 321602/345388 (executing program)
2021/10/18 14:38:54 fetching corpus: 18950, signal 321839/345388 (executing program)
2021/10/18 14:38:55 fetching corpus: 19000, signal 322035/345388 (executing program)
2021/10/18 14:38:55 fetching corpus: 19050, signal 322259/345388 (executing program)
2021/10/18 14:38:55 fetching corpus: 19100, signal 322612/345388 (executing program)
2021/10/18 14:38:55 fetching corpus: 19150, signal 322836/345388 (executing program)
2021/10/18 14:38:56 fetching corpus: 19200, signal 323040/345388 (executing program)
2021/10/18 14:38:56 fetching corpus: 19250, signal 323225/345388 (executing program)
2021/10/18 14:38:56 fetching corpus: 19300, signal 323476/345388 (executing program)
2021/10/18 14:38:56 fetching corpus: 19350, signal 323660/345388 (executing program)
2021/10/18 14:38:56 fetching corpus: 19400, signal 323925/345388 (executing program)
2021/10/18 14:38:57 fetching corpus: 19450, signal 324090/345388 (executing program)
2021/10/18 14:38:57 fetching corpus: 19500, signal 324277/345388 (executing program)
2021/10/18 14:38:57 fetching corpus: 19550, signal 324478/345388 (executing program)
2021/10/18 14:38:57 fetching corpus: 19600, signal 324716/345388 (executing program)
2021/10/18 14:38:58 fetching corpus: 19650, signal 324892/345388 (executing program)
2021/10/18 14:38:58 fetching corpus: 19700, signal 325094/345388 (executing program)
2021/10/18 14:38:58 fetching corpus: 19750, signal 325406/345388 (executing program)
2021/10/18 14:38:59 fetching corpus: 19800, signal 325602/345388 (executing program)
2021/10/18 14:38:59 fetching corpus: 19850, signal 325799/345388 (executing program)
2021/10/18 14:38:59 fetching corpus: 19900, signal 326002/345388 (executing program)
2021/10/18 14:38:59 fetching corpus: 19950, signal 326232/345388 (executing program)
2021/10/18 14:38:59 fetching corpus: 20000, signal 326518/345388 (executing program)
2021/10/18 14:39:00 fetching corpus: 20050, signal 326727/345388 (executing program)
2021/10/18 14:39:00 fetching corpus: 20100, signal 326977/345388 (executing program)
2021/10/18 14:39:00 fetching corpus: 20150, signal 327175/345390 (executing program)
2021/10/18 14:39:01 fetching corpus: 20200, signal 327409/345390 (executing program)
2021/10/18 14:39:01 fetching corpus: 20250, signal 327629/345390 (executing program)
2021/10/18 14:39:01 fetching corpus: 20300, signal 327897/345390 (executing program)
2021/10/18 14:39:02 fetching corpus: 20350, signal 328099/345390 (executing program)
2021/10/18 14:39:02 fetching corpus: 20400, signal 328323/345390 (executing program)
2021/10/18 14:39:02 fetching corpus: 20450, signal 328594/345390 (executing program)
2021/10/18 14:39:02 fetching corpus: 20500, signal 328891/345400 (executing program)
2021/10/18 14:39:02 fetching corpus: 20550, signal 329052/345400 (executing program)
2021/10/18 14:39:03 fetching corpus: 20600, signal 329216/345400 (executing program)
2021/10/18 14:39:03 fetching corpus: 20650, signal 329520/345400 (executing program)
2021/10/18 14:39:03 fetching corpus: 20700, signal 329725/345400 (executing program)
2021/10/18 14:39:03 fetching corpus: 20750, signal 329978/345400 (executing program)
2021/10/18 14:39:04 fetching corpus: 20800, signal 330163/345400 (executing program)
2021/10/18 14:39:04 fetching corpus: 20849, signal 330366/345401 (executing program)
2021/10/18 14:39:04 fetching corpus: 20899, signal 330582/345401 (executing program)
2021/10/18 14:39:04 fetching corpus: 20949, signal 330997/345401 (executing program)
2021/10/18 14:39:04 fetching corpus: 20999, signal 331195/345401 (executing program)
2021/10/18 14:39:05 fetching corpus: 21049, signal 331414/345401 (executing program)
2021/10/18 14:39:05 fetching corpus: 21099, signal 331636/345401 (executing program)
2021/10/18 14:39:05 fetching corpus: 21149, signal 331795/345401 (executing program)
2021/10/18 14:39:05 fetching corpus: 21199, signal 331974/345401 (executing program)
2021/10/18 14:39:05 fetching corpus: 21249, signal 332171/345401 (executing program)
2021/10/18 14:39:06 fetching corpus: 21299, signal 332341/345401 (executing program)
2021/10/18 14:39:06 fetching corpus: 21349, signal 332537/345401 (executing program)
2021/10/18 14:39:06 fetching corpus: 21399, signal 332742/345401 (executing program)
2021/10/18 14:39:06 fetching corpus: 21449, signal 332934/345401 (executing program)
2021/10/18 14:39:07 fetching corpus: 21498, signal 333142/345403 (executing program)
2021/10/18 14:39:07 fetching corpus: 21548, signal 333344/345403 (executing program)
2021/10/18 14:39:07 fetching corpus: 21598, signal 333547/345403 (executing program)
2021/10/18 14:39:07 fetching corpus: 21648, signal 333745/345403 (executing program)
2021/10/18 14:39:07 fetching corpus: 21698, signal 333940/345403 (executing program)
2021/10/18 14:39:08 fetching corpus: 21748, signal 334150/345403 (executing program)
2021/10/18 14:39:08 fetching corpus: 21798, signal 334320/345403 (executing program)
2021/10/18 14:39:08 fetching corpus: 21848, signal 334611/345403 (executing program)
2021/10/18 14:39:08 fetching corpus: 21898, signal 334819/345408 (executing program)
2021/10/18 14:39:08 fetching corpus: 21948, signal 335071/345408 (executing program)
2021/10/18 14:39:09 fetching corpus: 21998, signal 335267/345408 (executing program)
2021/10/18 14:39:09 fetching corpus: 22048, signal 335458/345408 (executing program)
2021/10/18 14:39:09 fetching corpus: 22097, signal 335707/345408 (executing program)
2021/10/18 14:39:09 fetching corpus: 22147, signal 335872/345408 (executing program)
2021/10/18 14:39:09 fetching corpus: 22197, signal 336026/345408 (executing program)
2021/10/18 14:39:10 fetching corpus: 22246, signal 336248/345408 (executing program)
2021/10/18 14:39:10 fetching corpus: 22296, signal 336389/345408 (executing program)
2021/10/18 14:39:10 fetching corpus: 22346, signal 336559/345408 (executing program)
2021/10/18 14:39:10 fetching corpus: 22396, signal 336793/345408 (executing program)
2021/10/18 14:39:11 fetching corpus: 22445, signal 336996/345414 (executing program)
2021/10/18 14:39:11 fetching corpus: 22495, signal 337186/345414 (executing program)
2021/10/18 14:39:11 fetching corpus: 22545, signal 337347/345414 (executing program)
2021/10/18 14:39:11 fetching corpus: 22595, signal 337581/345414 (executing program)
2021/10/18 14:39:12 fetching corpus: 22644, signal 337733/345421 (executing program)
2021/10/18 14:39:12 fetching corpus: 22694, signal 337876/345421 (executing program)
2021/10/18 14:39:12 fetching corpus: 22744, signal 338065/345421 (executing program)
2021/10/18 14:39:12 fetching corpus: 22794, signal 338264/345421 (executing program)
2021/10/18 14:39:13 fetching corpus: 22844, signal 338485/345422 (executing program)
2021/10/18 14:39:13 fetching corpus: 22894, signal 338696/345422 (executing program)
2021/10/18 14:39:13 fetching corpus: 22944, signal 338871/345422 (executing program)
2021/10/18 14:39:13 fetching corpus: 22994, signal 339038/345422 (executing program)
2021/10/18 14:39:13 fetching corpus: 23044, signal 339225/345422 (executing program)
2021/10/18 14:39:14 fetching corpus: 23094, signal 339410/345422 (executing program)
2021/10/18 14:39:14 fetching corpus: 23144, signal 339558/345422 (executing program)
2021/10/18 14:39:14 fetching corpus: 23191, signal 339841/345422 (executing program)
2021/10/18 14:39:15 fetching corpus: 23241, signal 340046/345422 (executing program)
2021/10/18 14:39:15 fetching corpus: 23291, signal 340216/345422 (executing program)
2021/10/18 14:39:15 fetching corpus: 23340, signal 340346/345423 (executing program)
2021/10/18 14:39:15 fetching corpus: 23390, signal 340527/345423 (executing program)
2021/10/18 14:39:15 fetching corpus: 23440, signal 340865/345423 (executing program)
2021/10/18 14:39:15 fetching corpus: 23490, signal 340994/345423 (executing program)
2021/10/18 14:39:16 fetching corpus: 23540, signal 341149/345423 (executing program)
2021/10/18 14:39:16 fetching corpus: 23590, signal 341350/345423 (executing program)
2021/10/18 14:39:16 fetching corpus: 23640, signal 341504/345423 (executing program)
2021/10/18 14:39:16 fetching corpus: 23690, signal 341654/345423 (executing program)
2021/10/18 14:39:16 fetching corpus: 23740, signal 341853/345423 (executing program)
2021/10/18 14:39:17 fetching corpus: 23790, signal 342011/345423 (executing program)
2021/10/18 14:39:17 fetching corpus: 23792, signal 342017/345423 (executing program)
2021/10/18 14:39:17 fetching corpus: 23792, signal 342017/345423 (executing program)
2021/10/18 14:39:18 starting 6 fuzzer processes
14:39:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r1, 0x71d, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x400c1)

14:39:19 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x75, 0x0, 0x0)

14:39:19 executing program 2:
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), 0x10)
pipe(&(0x7f0000000080))

14:39:19 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

14:39:19 executing program 4:
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
accept$packet(r0, 0x0, 0x0)
close(r0)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100), 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c)
sendmsg$tipc(r1, &(0x7f00000006c0)={&(0x7f0000000140), 0x10, &(0x7f0000000640)=[{&(0x7f0000000280)="9c", 0x1}], 0x1}, 0x0)

14:39:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x8492a337d1d87e71}, 0x14}}, 0x0)

[  184.721337][ T6554] chnl_net:caif_netlink_parms(): no params data found
[  184.979629][ T6556] chnl_net:caif_netlink_parms(): no params data found
[  185.023149][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.031905][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.042036][ T6554] device bridge_slave_0 entered promiscuous mode
[  185.063241][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.070687][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.090368][ T6554] device bridge_slave_1 entered promiscuous mode
[  185.154734][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.163985][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.172655][ T6556] device bridge_slave_0 entered promiscuous mode
[  185.182735][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.189906][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.198237][ T6556] device bridge_slave_1 entered promiscuous mode
[  185.287699][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.302415][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.313603][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.386482][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.447485][ T6556] team0: Port device team_slave_0 added
[  185.481159][ T6554] team0: Port device team_slave_0 added
[  185.489919][ T6554] team0: Port device team_slave_1 added
[  185.497288][ T6556] team0: Port device team_slave_1 added
[  185.577530][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.584527][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.613093][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.625695][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.633643][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.659622][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.674249][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.681461][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.707511][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.722784][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.729854][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.756059][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.852000][ T6556] device hsr_slave_0 entered promiscuous mode
[  185.859035][ T6556] device hsr_slave_1 entered promiscuous mode
[  185.884386][ T6554] device hsr_slave_0 entered promiscuous mode
[  185.891480][ T6554] device hsr_slave_1 entered promiscuous mode
[  185.898872][ T6554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.907077][ T6554] Cannot create hsr debugfs directory
[  186.091389][ T6560] chnl_net:caif_netlink_parms(): no params data found
[  186.357036][ T1265] Bluetooth: hci0: command 0x0409 tx timeout
[  186.371511][ T6562] chnl_net:caif_netlink_parms(): no params data found
[  186.493572][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.503910][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.514506][ T6560] device bridge_slave_0 entered promiscuous mode
[  186.550084][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.557601][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.565326][ T6560] device bridge_slave_1 entered promiscuous mode
[  186.606145][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  186.613211][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.642275][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.743643][ T6556] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.778079][ T6560] team0: Port device team_slave_0 added
[  186.800811][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.807976][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.815590][ T6562] device bridge_slave_0 entered promiscuous mode
[  186.824497][ T6556] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.842099][ T6556] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.851826][ T6560] team0: Port device team_slave_1 added
[  186.862938][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.870334][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.878830][ T6562] device bridge_slave_1 entered promiscuous mode
[  186.904368][ T6556] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.980685][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.988427][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.023218][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.037666][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.051210][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.065698][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.073814][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.099919][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.136979][ T6554] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  187.156229][   T20] Bluetooth: hci3: command 0x0409 tx timeout
[  187.190178][ T6855] chnl_net:caif_netlink_parms(): no params data found
[  187.203494][ T6554] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  187.271594][ T6554] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  187.310307][ T6560] device hsr_slave_0 entered promiscuous mode
[  187.317425][ T6560] device hsr_slave_1 entered promiscuous mode
[  187.323914][ T6560] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.332529][ T6560] Cannot create hsr debugfs directory
[  187.347266][ T6562] team0: Port device team_slave_0 added
[  187.353533][ T6554] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  187.391798][ T6562] team0: Port device team_slave_1 added
[  187.399580][   T20] Bluetooth: hci4: command 0x0409 tx timeout
[  187.530094][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.538636][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.564976][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.594914][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.605609][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.613892][ T6855] device bridge_slave_0 entered promiscuous mode
[  187.624256][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.631909][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.659308][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.700859][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.708288][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.716245][ T6855] device bridge_slave_1 entered promiscuous mode
[  187.740765][ T6562] device hsr_slave_0 entered promiscuous mode
[  187.748029][ T6562] device hsr_slave_1 entered promiscuous mode
[  187.754422][ T6562] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.762675][ T6562] Cannot create hsr debugfs directory
[  187.925447][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.937547][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.960999][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.975657][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.059756][ T6560] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.090076][ T6855] team0: Port device team_slave_0 added
[  188.098904][ T6855] team0: Port device team_slave_1 added
[  188.109672][ T6554] 8021q: adding VLAN 0 to HW filter on device team0
[  188.118314][ T6560] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.129076][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.139200][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.147475][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.156223][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.170961][ T6556] 8021q: adding VLAN 0 to HW filter on device team0
[  188.194188][ T6560] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.195968][ T1265] Bluetooth: hci5: command 0x0409 tx timeout
[  188.226018][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.234687][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.248221][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.255550][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.265613][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.274851][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.283682][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.290809][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.299256][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.308176][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.316888][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.323937][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.332174][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.341070][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.350484][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.359402][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.367040][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.374740][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.393918][ T6560] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.422974][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.431239][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.440690][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.450369][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.457698][   T20] Bluetooth: hci0: command 0x041b tx timeout
[  188.458565][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.491431][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.508309][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.515264][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.543677][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.580752][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.589799][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.599734][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.609311][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.618465][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.627448][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.635815][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.651445][ T6562] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  188.677721][ T8116] Bluetooth: hci1: command 0x041b tx timeout
[  188.704158][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.713411][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  188.722211][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.731554][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.740522][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.749405][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.760665][ T6554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.773451][ T6554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  188.784596][ T6562] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  188.795717][ T6562] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  188.810593][ T6562] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  188.826242][ T6855] device hsr_slave_0 entered promiscuous mode
[  188.832996][ T6855] device hsr_slave_1 entered promiscuous mode
[  188.840166][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.847999][ T6855] Cannot create hsr debugfs directory
[  188.853873][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.865154][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.873713][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.882428][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.901646][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.913192][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  188.948786][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.957165][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.994365][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.049276][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.057072][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.114549][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.144970][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.154161][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.167739][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.178864][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  189.236764][   T25] Bluetooth: hci3: command 0x041b tx timeout
[  189.254703][ T6554] device veth0_vlan entered promiscuous mode
[  189.277153][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.285420][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  189.294130][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  189.311700][ T6554] device veth1_vlan entered promiscuous mode
[  189.341492][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  189.350813][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  189.359118][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  189.367619][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.376745][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  189.421573][ T6556] device veth0_vlan entered promiscuous mode
[  189.444437][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  189.452640][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  189.461703][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  189.470679][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.479243][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.489346][ T6560] 8021q: adding VLAN 0 to HW filter on device team0
[  189.489605][ T8116] Bluetooth: hci4: command 0x041b tx timeout
[  189.509199][ T6554] device veth0_macvtap entered promiscuous mode
[  189.522456][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.529750][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  189.539008][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  189.547853][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  189.556954][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  189.565465][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  189.576151][ T6855] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  189.591420][ T6855] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  189.603160][ T6556] device veth1_vlan entered promiscuous mode
[  189.613221][ T6554] device veth1_macvtap entered promiscuous mode
[  189.624516][ T6855] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  189.641014][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  189.649277][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  189.658125][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.667350][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.675628][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.682765][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.691299][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.699626][ T6855] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  189.716085][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.723638][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.743762][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.757866][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.767907][ T6562] 8021q: adding VLAN 0 to HW filter on device team0
[  189.777613][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  189.785460][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.794801][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.805154][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.812248][ T8026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.820588][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  189.829453][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  189.838846][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  189.847957][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  189.866058][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.874640][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.887224][ T6554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.897264][ T6554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.906369][ T6554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.915065][ T6554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.935961][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.944503][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.953306][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.960412][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.968448][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.977574][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.986834][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.993878][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.001998][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.011898][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.068994][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.079661][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.089642][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.098734][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.113932][ T6556] device veth0_macvtap entered promiscuous mode
[  190.163711][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.172982][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.182590][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.191502][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.201002][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.209995][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.219294][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.228318][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.237598][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.246490][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.254659][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.263880][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.273357][ T8213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  190.276122][ T8116] Bluetooth: hci5: command 0x041b tx timeout
[  190.284463][ T8213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.298584][ T6556] device veth1_macvtap entered promiscuous mode
[  190.319090][ T6560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.362696][ T6562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  190.377910][ T6562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.404512][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  190.442869][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.454881][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.479164][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  190.487495][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.496324][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.504578][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.513506][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.516254][   T20] Bluetooth: hci0: command 0x040f tx timeout
[  190.522224][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  190.536447][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  190.587217][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.595592][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  190.607851][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.620375][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.637922][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.660799][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.674760][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.689457][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  190.697891][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  190.706678][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  190.715298][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.723225][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.747113][ T6556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.756481][   T20] Bluetooth: hci1: command 0x040f tx timeout
[  190.762248][ T6556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.772625][ T6556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.785430][ T6556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.812171][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.824580][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.845313][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.856048][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.895521][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.897029][  T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.907070][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.933050][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  190.947380][  T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.968150][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.984969][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.995500][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.002644][ T8021] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.016497][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.025344][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.056425][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  191.067087][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.075044][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.102971][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.111871][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.119006][ T8021] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.127291][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.135426][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.145347][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.153208][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.198289][ T6560] device veth0_vlan entered promiscuous mode
[  191.255100][ T8236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.265267][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.295426][ T8236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.315207][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.317164][ T2979] Bluetooth: hci3: command 0x040f tx timeout
[  191.329771][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.380932][ T6560] device veth1_vlan entered promiscuous mode
[  191.403920][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.424881][ T8257] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  191.430612][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.462035][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.490773][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.515531][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.530774][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
14:39:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x23, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={{r4}, 0x0, 0x2, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x7ff, {0x4, 0x4, 0x1, 0x6, 0xf6}, [0x8, 0x80, 0x3780d73, 0x8, 0xe66, 0x0, 0x10000, 0x9]}}, @subvolid=0x3})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000005780)={'syztnl0\x00', &(0x7f0000005700)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0x1f, 0xc594ebf4825e120a, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x8, 0x5}})

[  191.556325][ T2979] Bluetooth: hci4: command 0x040f tx timeout
[  191.588762][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.602791][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.613704][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.629990][ T6562] device veth0_vlan entered promiscuous mode
[  191.637160][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.648472][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.677939][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.688645][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.709374][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  191.732532][ T6855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.772955][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.824209][ T6562] device veth1_vlan entered promiscuous mode
[  191.866546][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.877769][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
14:39:27 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_sco(r0, &(0x7f0000000040), 0x3)
listen(r0, 0x0)
close(r0)

[  191.907833][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.936846][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.959212][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.008318][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.029389][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.055016][ T8021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.100288][ T6560] device veth0_macvtap entered promiscuous mode
14:39:27 executing program 1:
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x80, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x2081)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000028000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000014f10000280012000900010076657468"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003e00000100"/20], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)

[  192.150073][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.181758][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.206076][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.220732][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.250011][ T6562] device veth0_macvtap entered promiscuous mode
[  192.278368][ T6560] device veth1_macvtap entered promiscuous mode
[  192.290767][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.306847][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.352512][ T6562] device veth1_macvtap entered promiscuous mode
[  192.359876][   T25] Bluetooth: hci5: command 0x040f tx timeout
[  192.370966][ T8287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.385552][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.394502][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
14:39:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x23, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={{r4}, 0x0, 0x2, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x7ff, {0x4, 0x4, 0x1, 0x6, 0xf6}, [0x8, 0x80, 0x3780d73, 0x8, 0xe66, 0x0, 0x10000, 0x9]}}, @subvolid=0x3})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000005780)={'syztnl0\x00', &(0x7f0000005700)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0x1f, 0xc594ebf4825e120a, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x8, 0x5}})

[  192.406644][ T8289] sit0: Master is either lo or non-ether device
[  192.439759][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.462855][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.483237][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.506040][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.532458][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.547246][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.571945][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.587254][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.596028][ T8116] Bluetooth: hci0: command 0x0419 tx timeout
[  192.599445][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.614228][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.625105][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.662055][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.692319][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.704119][ T8289] sit0: Master is either lo or non-ether device
[  192.717110][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.729465][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.756982][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.780479][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
14:39:28 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@tclass={{0x14}}, @hoplimit={{0x14}}, @flowinfo={{0x14}}, @rthdr={{0x18}}], 0x60}}], 0x1, 0x0)

[  192.798102][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
14:39:28 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

[  192.832103][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.843665][ T2979] Bluetooth: hci1: command 0x0419 tx timeout
[  192.890295][ T6560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  192.930415][ T6560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.954779][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.978964][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.991035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
14:39:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x23, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={{r4}, 0x0, 0x2, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x7ff, {0x4, 0x4, 0x1, 0x6, 0xf6}, [0x8, 0x80, 0x3780d73, 0x8, 0xe66, 0x0, 0x10000, 0x9]}}, @subvolid=0x3})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000005780)={'syztnl0\x00', &(0x7f0000005700)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0x1f, 0xc594ebf4825e120a, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x8, 0x5}})

[  193.032206][ T6560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.074795][ T6560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.102493][ T6560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.123267][ T6560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.155390][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  193.188446][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.223396][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  193.293691][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.347570][ T6562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  193.396273][   T20] Bluetooth: hci3: command 0x0419 tx timeout
[  193.413515][ T6562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.472233][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.534216][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.557685][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.573768][ T6562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.596919][ T6562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.611742][ T6562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.623333][ T6562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.636113][ T2968] Bluetooth: hci4: command 0x0419 tx timeout
14:39:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x23, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000440)={{r4}, 0x0, 0x2, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x7ff, {0x4, 0x4, 0x1, 0x6, 0xf6}, [0x8, 0x80, 0x3780d73, 0x8, 0xe66, 0x0, 0x10000, 0x9]}}, @subvolid=0x3})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000005780)={'syztnl0\x00', &(0x7f0000005700)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7f, 0x1f, 0xc594ebf4825e120a, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x8, 0x5}})

[  193.713811][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.738910][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.876728][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  193.883051][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  193.903708][ T6855] device veth0_vlan entered promiscuous mode
[  193.937071][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.945501][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.012721][ T6855] device veth1_vlan entered promiscuous mode
[  194.042628][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.055400][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.084301][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.178506][ T8236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.201566][ T8236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.267414][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.283837][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  194.302215][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.303344][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.337737][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.371250][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.398842][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.413958][ T6855] device veth0_macvtap entered promiscuous mode
[  194.436286][   T25] Bluetooth: hci5: command 0x0419 tx timeout
[  194.462030][ T6855] device veth1_macvtap entered promiscuous mode
[  194.462468][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.498627][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.519055][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.540525][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.558795][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.583489][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.632543][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.646323][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.663647][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.681153][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.697331][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.711891][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.720220][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  194.730703][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  194.739544][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.748814][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.766239][  T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.774244][  T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.785509][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.799306][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.813317][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.825196][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.842386][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.854807][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.865485][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.883654][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.895613][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.936308][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  194.945236][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.965971][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.977973][ T6855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.992726][ T6855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.006910][ T6855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.019447][ T6855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.211980][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.264380][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.284995][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.302088][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.320707][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.360285][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.472170][ T8399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  195.504068][ T8399] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  195.604872][ T8405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  195.627952][ T8405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  224.181361][ T8435] chnl_net:caif_netlink_parms(): no params data found
[  224.259083][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.267119][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.277608][ T8435] device bridge_slave_0 entered promiscuous mode
[  224.287754][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.295237][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.303438][ T8435] device bridge_slave_1 entered promiscuous mode
[  224.343591][ T8435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.356667][ T8435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.393250][ T8435] team0: Port device team_slave_0 added
[  224.402202][ T8435] team0: Port device team_slave_1 added
[  224.430605][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.444344][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.471586][ T8435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.484587][ T8435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.491534][ T8435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.518346][ T8435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.559548][ T8435] device hsr_slave_0 entered promiscuous mode
[  224.571977][ T8435] device hsr_slave_1 entered promiscuous mode
[  224.579840][ T8435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.588013][ T8435] Cannot create hsr debugfs directory
[  224.719094][ T8435] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  224.729604][ T8435] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  224.741781][ T8435] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  224.757042][ T8435] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  224.782846][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.790024][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.798123][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.805296][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.857953][ T8435] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.871246][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  224.880581][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.889010][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.898208][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  224.912586][ T8435] 8021q: adding VLAN 0 to HW filter on device team0
[  224.931573][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  224.940681][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.947813][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.965438][ T2968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  224.973712][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.980815][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.997091][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  225.005927][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  225.021533][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  225.041158][ T8435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.051964][ T8435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.066230][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  225.075740][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.087143][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  225.104424][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  225.111818][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  225.128079][ T8435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.150993][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.178872][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.187152][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.196714][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.205861][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.217038][ T8435] device veth0_vlan entered promiscuous mode
[  225.232393][ T8435] device veth1_vlan entered promiscuous mode
[  225.258980][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.267495][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.276249][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.284841][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.296135][ T8435] device veth0_macvtap entered promiscuous mode
[  225.307993][ T8435] device veth1_macvtap entered promiscuous mode
[  225.325572][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.336848][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.347078][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.357907][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.368183][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.379520][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.390069][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.400894][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.411148][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  225.421989][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.434757][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.443892][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.452487][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.461022][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.469922][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.482676][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.494713][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.505286][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.516637][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.526878][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.538921][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.548810][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.559790][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.569787][ T8435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.580311][ T8435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.593186][ T8435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.606818][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.615992][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.630528][ T8435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.640631][ T8435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.649818][ T8435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.658904][ T8435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.768276][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.810150][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.819001][  T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.828168][  T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.839283][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  225.856320][ T8066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
14:40:01 executing program 2:
getpeername(0xffffffffffffffff, 0x0, 0x0)

14:40:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:01 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x8492a337d1d87e71}, 0x14}}, 0x0)

14:40:01 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

14:40:01 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x6}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9fffe006044238cb89e14f088a81bffffff00004000632977fbac141431e934a0a662079f4b4d2f2ce5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

[  226.025788][ T8793] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.034682][   T20] Bluetooth: hci2: command 0x0409 tx timeout
[  226.089966][ T8793] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
14:40:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

14:40:02 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  226.497480][   T26] audit: type=1804 audit(1634568002.296:2): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633619794/syzkaller.nR7aDW/2/cgroup.controllers" dev="sda1" ino=13938 res=1 errno=0
14:40:02 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  226.712062][ T8805] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:02 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x6}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

14:40:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x8492a337d1d87e71}, 0x14}}, 0x0)

14:40:03 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "3ab1c94da5875acc198068ec8f9f7a3b1dabd93e"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0)

[  227.218948][ T8819] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
14:40:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

[  227.338017][ T8819] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
14:40:03 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:03 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:03 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x6}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9fffe006044238cb89e14f088a81bffffff00004000632977fbac141431e934a0a662079f4b4d2f2ce5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

[  227.726545][   T26] audit: type=1804 audit(1634568003.526:3): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633619794/syzkaller.nR7aDW/3/cgroup.controllers" dev="sda1" ino=13922 res=1 errno=0
[  227.816379][ T8826] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x8492a337d1d87e71}, 0x14}}, 0x0)

[  228.114271][   T20] Bluetooth: hci2: command 0x041b tx timeout
14:40:04 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "3ab1c94da5875acc198068ec8f9f7a3b1dabd93e"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0)

[  228.405390][ T8864] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  228.523568][ T8864] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
14:40:04 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xffe00000}, {0x6}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

14:40:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

14:40:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

[  229.191606][   T26] audit: type=1804 audit(1634568004.986:4): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633619794/syzkaller.nR7aDW/4/cgroup.controllers" dev="sda1" ino=13944 res=1 errno=0
14:40:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:05 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "3ab1c94da5875acc198068ec8f9f7a3b1dabd93e"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0)

[  229.319069][ T8877] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:05 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3ff, 0x3})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b2a00)
sendfile(r1, r0, 0x0, 0x8000000000004)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0x10000051c)
openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x7a05, 0x1700)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040))
sendmmsg(r5, &(0x7f0000005980)=[{{0x0, 0x3f00, &(0x7f0000000500)=[{&(0x7f00000007c0)='6', 0x1}], 0x1, 0x0, 0x0, 0xc304}, 0xe}], 0x300, 0x0)

14:40:05 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0))

[  229.463966][   T26] audit: type=1804 audit(1634568005.266:5): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir333922181/syzkaller.yDHsmk/4/cgroup.controllers" dev="sda1" ino=13951 res=1 errno=0
14:40:05 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "3ab1c94da5875acc198068ec8f9f7a3b1dabd93e"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0)

[  229.569664][ T8881] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:05 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f000011f000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0xffffd000)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})

14:40:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

14:40:05 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))

14:40:05 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

14:40:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

[  230.047709][   T26] audit: type=1804 audit(1634568005.846:6): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir633619794/syzkaller.nR7aDW/5/cgroup.controllers" dev="sda1" ino=13944 res=1 errno=0
14:40:06 executing program 3:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000080)="d2eaa417e4aa416b78c900ed0002", 0x0, 0x1001000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

[  230.193966][   T25] Bluetooth: hci2: command 0x040f tx timeout
[  230.326135][ T8904] IPVS: persistence engine module ip_vs_pe_Óip not found
[  230.430697][   T26] audit: type=1804 audit(1634568006.227:7): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir333922181/syzkaller.yDHsmk/5/cgroup.controllers" dev="sda1" ino=13955 res=1 errno=0
14:40:06 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
read(r0, &(0x7f0000000300)=""/67, 0x43)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r0, r3, 0x0, 0x8000000000005)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3d)
sendfile(r0, r1, 0x0, 0x10000000002500)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  230.580081][ T8911] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:06 executing program 3:
r0 = socket(0xa, 0x3, 0x1)
getpeername$netlink(r0, 0x0, 0x0)

14:40:06 executing program 0:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="0201000210000000000006000000000008001300e4feff400000d2a82be90000e592c300fcffff390000ff0f00000000e00073000000000000000000000035000000000000000000000e02ff00000000030006000000000002000004000000bb0000e00000000000030005000000000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

14:40:06 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d3", 0x1}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x100000001)

14:40:06 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
read(r0, &(0x7f0000000300)=""/67, 0x43)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r0, r3, 0x0, 0x8000000000005)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3d)
sendfile(r0, r1, 0x0, 0x10000000002500)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

14:40:06 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "be0415ae0406e9b54c02d473762364736716a8fc76777194f87f5335461ab6017bdcde923da7d60a2ed719df849711814f62580771c6f96f6bee9aaa7e228e"}, 0x60)

14:40:07 executing program 2:
syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff)

14:40:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x2c, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x4, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0)

14:40:07 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003440)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "1a"}]}}, &(0x7f0000002440)=""/4096, 0x2a, 0x1000, 0x1}, 0x20)

14:40:07 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

14:40:07 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

14:40:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa0}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48)

[  231.499480][   T26] audit: type=1804 audit(1634568007.297:8): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir333922181/syzkaller.yDHsmk/6/cgroup.controllers" dev="sda1" ino=13968 res=1 errno=0
[  231.595829][ T8933] IPVS: persistence engine module ip_vs_pe_Óip not found
14:40:07 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8941, 0x0)

14:40:07 executing program 3:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x7}, 0x0)

14:40:07 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x3, &(0x7f0000000f40)=@framed, &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r0}, 0xc)

[  231.814027][ T8963] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
14:40:07 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9)

14:40:07 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
read(r0, &(0x7f0000000300)=""/67, 0x43)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r0, r3, 0x0, 0x8000000000005)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3d)
sendfile(r0, r1, 0x0, 0x10000000002500)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

14:40:07 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pread64(r0, &(0x7f0000000140)=""/62, 0x3e, 0x7fffffffffffffff)

14:40:07 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @dev}})
setsockopt$inet_mreq(r0, 0x0, 0x40, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)

14:40:07 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000007080)={0x0, 0x0, &(0x7f0000007040)={&(0x7f0000006fc0)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

14:40:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/10, 0x30c000, 0x800}, 0x20)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

[  232.223696][ T8978] Bluetooth: hci0: load_link_keys: too big key_count value 30309
[  232.273692][   T25] Bluetooth: hci2: command 0x0419 tx timeout
14:40:09 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x190)

14:40:09 executing program 5:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)="b73e624dfa130476cf22f7c6f4", 0xd}}, 0x0)

14:40:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x18, 0x43, 0x1}, 0x18}}, 0x0)

14:40:09 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
read(r0, &(0x7f0000000300)=""/67, 0x43)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r0, r3, 0x0, 0x8000000000005)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xdd3d)
sendfile(r0, r1, 0x0, 0x10000000002500)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

14:40:09 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)

14:40:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/10, 0x30c000, 0x800}, 0x20)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

[  233.880139][ T9008] ieee802154 phy0 wpan0: encryption failed: -22
[  233.901786][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
14:40:09 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000000200)=ANY=[], 0x5}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8}, 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000)

14:40:09 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x18, 0x43, 0x1}, 0x18}}, 0x0)

14:40:09 executing program 1:
unshare(0x48000080)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x2f, 0x0, 0x0, 0x7, 0x1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800}})
syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)

14:40:10 executing program 3:
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000050)
unshare(0x6c060000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x9c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x9c}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

[  234.325599][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
14:40:10 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:40:10 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000000200)=ANY=[], 0x5}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8}, 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000)

14:40:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x18, 0x43, 0x1}, 0x18}}, 0x0)

14:40:10 executing program 4:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x8, "3623e02a0e796b6eb00d16c770b79e833e8a31e901ae1469967888d2ffee"}}}, {{@ipv6={@empty, @private0, [0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x8}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0xffffffff, 0xff], 0x0, 0x4e24, 0x4e22, 0x4e21, 0x800, 0x0, 0x101}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, [0x0, 0x0, 0x0, 0xffffff], [0xffffff00, 0xff, 0x0, 0xffffffff], 'veth0_to_bridge\x00', 'macsec0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0f8b"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x88, 0x20, 0x0, 0x0)
unshare(0x40020680)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, 0x0)

[  234.692454][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  234.761255][ T9072] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'.
[  234.800636][ T9082] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
14:40:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newnexthop={0x18, 0x43, 0x1}, 0x18}}, 0x0)

14:40:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/10, 0x30c000, 0x800}, 0x20)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

[  234.983783][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
14:40:10 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000000200)=ANY=[], 0x5}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8}, 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000)

14:40:10 executing program 0:
pipe(&(0x7f0000000100))

14:40:11 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

14:40:11 executing program 5:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f0000000200)=ANY=[], 0x5}}, 0x0)
connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8}, 0x14}}, 0x0)
recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000)

[  235.536534][ T9054] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'.
14:40:15 executing program 1:
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000050)
unshare(0x6c060000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x9c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x9c}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

14:40:15 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000001dc0), 0x1800, 0x2002, 0x0)

14:40:15 executing program 0:
accept$alg(0xffffffffffffffff, 0x0, 0x0)

14:40:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r2, 0x0, 0xf03b0000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/10, 0x30c000, 0x800}, 0x20)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)

14:40:15 executing program 3:
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000050)
unshare(0x6c060000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x9c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x9c}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

[  239.618942][ T9205] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'.
[  239.759267][ T9222] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'.
[  239.765632][ T9235] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
14:40:16 executing program 4:
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x110, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x8, "3623e02a0e796b6eb00d16c770b79e833e8a31e901ae1469967888d2ffee"}}}, {{@ipv6={@empty, @private0, [0xffffffff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'syzkaller0\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x8}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0xffffffff, 0xff], 0x0, 0x4e24, 0x4e22, 0x4e21, 0x800, 0x0, 0x101}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, [0x0, 0x0, 0x0, 0xffffff], [0xffffff00, 0xff, 0x0, 0xffffffff], 'veth0_to_bridge\x00', 'macsec0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0f8b"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x88, 0x20, 0x0, 0x0)
unshare(0x40020680)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, 0x0)

14:40:16 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005780)=[{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000000800)="d08627f2990f1b413348aa5acc2d714908e6e9613adf66b44f7c55304f9965d1800e4a5769a0cc4519a7646404008bbec1fd232a14daac0507d87e8b9122a0db7eb2da939f1e9c29319c460d83a8be2a0e4b69d2fe35073dc459d3a69707a8d77b1d1caab8ae60490f6678aaa9bfd4f8c460b93c64adc64ff4bc4066ab6299e2c513b2e2ed89eadcc9a01af97116e274a08db22f9fc552573ae8", 0x9a}], 0x1}], 0x1, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x3b, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x2bc0}, 0x350c)

14:40:16 executing program 3:
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000050)
unshare(0x6c060000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x9c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x9c}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

14:40:16 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000001dc0), 0x1800, 0x2002, 0x0)

14:40:16 executing program 1:
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000050)
unshare(0x6c060000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x9c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x9c}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
unshare(0x60000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

14:40:16 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x4, 0x8, 0x4}, 0x40)
unshare(0x2040400)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10)

14:40:16 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x4c00, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}})

[  240.730309][ T9323] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'.
14:40:16 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)

14:40:16 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1}, 0x20)

14:40:17 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r1, &(0x7f0000001dc0), 0x1800, 0x2002, 0x0)

14:40:17 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, &(0x7f0000000340)=""/142, 0x4e, 0x130, 0x1}, 0x20)

14:40:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d7a665b80113c4b13c602ef07d0087dbcaa6b7197f058bbd13df5728f6ae100d2c143ecdcbf8c7cd8da6ecbac5e5515e", 0x30)
close(r0)

[  255.313441][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.319761][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  308.588209][   T20] Bluetooth: hci1: command 0x0406 tx timeout
[  308.588208][    T5] Bluetooth: hci3: command 0x0406 tx timeout
[  308.588258][   T20] Bluetooth: hci5: command 0x0406 tx timeout
[  308.594231][    T5] Bluetooth: hci4: command 0x0406 tx timeout
[  308.618221][   T20] Bluetooth: hci0: command 0x0406 tx timeout
[  316.758593][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  316.765230][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  349.556601][ T8240] Bluetooth: hci2: command 0x0406 tx timeout
[  378.186583][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.192904][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  394.835003][   T27] INFO: task kworker/u4:2:149 blocked for more than 143 seconds.
[  394.843019][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  394.851189][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  394.862079][   T27] task:kworker/u4:2    state:D stack:24496 pid:  149 ppid:     2 flags:0x00004000
[  394.877311][   T27] Workqueue: netns cleanup_net
[  394.882309][   T27] Call Trace:
[  394.888978][   T27]  __schedule+0xb44/0x5960
[  394.893543][   T27]  ? find_held_lock+0x2d/0x110
[  394.901412][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  394.908757][   T27]  ? io_schedule_timeout+0x140/0x140
[  394.914094][   T27]  schedule+0xd3/0x270
[  394.920726][   T27]  schedule_preempt_disabled+0xf/0x20
[  394.928364][   T27]  __mutex_lock+0xa34/0x12f0
[  394.932983][   T27]  ? ip_fib_net_exit+0x1b/0x2b0
[  394.939699][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  394.945728][   T27]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  394.952061][   T27]  ? sockfs_dname+0x80/0x80
[  394.956739][   T27]  ? iput.part.0+0x539/0x850
[  394.961378][   T27]  ip_fib_net_exit+0x1b/0x2b0
[  394.966554][   T27]  ? ip_fib_net_exit+0x2b0/0x2b0
[  394.971513][   T27]  ops_exit_list+0xb0/0x160
[  394.976308][   T27]  cleanup_net+0x4ea/0xb00
[  394.980751][   T27]  ? unregister_pernet_device+0x70/0x70
[  394.986831][   T27]  process_one_work+0x9bf/0x16b0
[  394.992717][   T27]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  395.000359][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  395.005815][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[  395.010906][   T27]  worker_thread+0x658/0x11f0
[  395.015778][   T27]  ? process_one_work+0x16b0/0x16b0
[  395.020992][   T27]  kthread+0x3e5/0x4d0
[  395.025500][   T27]  ? set_kthread_struct+0x130/0x130
[  395.030809][   T27]  ret_from_fork+0x1f/0x30
[  395.035905][   T27] INFO: task syz-executor.4:9301 blocked for more than 143 seconds.
[  395.043894][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  395.050155][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  395.059396][   T27] task:syz-executor.4  state:D stack:27080 pid: 9301 ppid:  6562 flags:0x00004004
[  395.069257][   T27] Call Trace:
[  395.072575][   T27]  __schedule+0xb44/0x5960
[  395.077616][   T27]  ? find_held_lock+0x2d/0x110
[  395.082543][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  395.087965][   T27]  ? io_schedule_timeout+0x140/0x140
[  395.093702][   T27]  schedule+0xd3/0x270
[  395.098932][   T27]  schedule_preempt_disabled+0xf/0x20
[  395.104327][   T27]  __mutex_lock+0xa34/0x12f0
[  395.110347][   T27]  ? wg_netns_pre_exit+0x15/0x190
[  395.116136][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  395.121772][   T27]  ? slab_free_freelist_hook+0x81/0x190
[  395.128482][   T27]  ? vti6_newlink+0xd0/0xd0
[  395.133085][   T27]  ? vti6_newlink+0xd0/0xd0
[  395.138425][   T27]  ? wg_stop+0x180/0x180
[  395.142693][   T27]  wg_netns_pre_exit+0x15/0x190
[  395.148131][   T27]  ? wg_stop+0x180/0x180
[  395.152398][   T27]  setup_net+0x587/0xa30
[  395.157652][   T27]  ? ops_init+0x470/0x470
[  395.162005][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  395.168043][   T27]  copy_net_ns+0x319/0x760
[  395.172487][   T27]  create_new_namespaces+0x3f6/0xb20
[  395.178371][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  395.184034][   T27]  ksys_unshare+0x445/0x920
[  395.189006][   T27]  ? unshare_fd+0x1c0/0x1c0
[  395.193535][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  395.202450][   T27]  __x64_sys_unshare+0x2d/0x40
[  395.208658][   T27]  do_syscall_64+0x35/0xb0
[  395.213145][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  395.219263][   T27] RIP: 0033:0x7fa902b1da39
[  395.223682][   T27] RSP: 002b:00007fa900093188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  395.235070][   T27] RAX: ffffffffffffffda RBX: 00007fa902c20f60 RCX: 00007fa902b1da39
[  395.243118][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020680
[  395.251228][   T27] RBP: 00007fa902b77c5f R08: 0000000000000000 R09: 0000000000000000
[  395.259338][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.267564][   T27] R13: 00007ffe44a09a0f R14: 00007fa900093300 R15: 0000000000022000
[  395.275786][   T27] INFO: task syz-executor.3:9307 blocked for more than 143 seconds.
[  395.283822][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  395.289980][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  395.299800][   T27] task:syz-executor.3  state:D stack:26264 pid: 9307 ppid:  6560 flags:0x00004004
[  395.310700][   T27] Call Trace:
[  395.313999][   T27]  __schedule+0xb44/0x5960
[  395.318691][   T27]  ? find_held_lock+0x2d/0x110
[  395.323471][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  395.328519][   T27]  ? io_schedule_timeout+0x140/0x140
[  395.333827][   T27]  schedule+0xd3/0x270
[  395.339235][   T27]  schedule_preempt_disabled+0xf/0x20
[  395.344719][   T27]  __mutex_lock+0xa34/0x12f0
[  395.349742][   T27]  ? ip_tunnel_init_net+0x2d5/0x9d0
[  395.356207][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  395.361776][   T27]  ? ip_tunnel_init_net+0x14e/0x9d0
[  395.367385][   T27]  ip_tunnel_init_net+0x2d5/0x9d0
[  395.372430][   T27]  ? ip_tunnel_changelink+0x540/0x540
[  395.378391][   T27]  ? ipgre_tap_exit_batch_net+0x20/0x20
[  395.383959][   T27]  ops_init+0xaf/0x470
[  395.393624][   T27]  setup_net+0x40f/0xa30
[  395.398260][   T27]  ? down_read_killable+0x1a9/0x480
[  395.404022][   T27]  ? ops_init+0x470/0x470
[  395.408848][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  395.414415][   T27]  copy_net_ns+0x319/0x760
[  395.419376][   T27]  create_new_namespaces+0x3f6/0xb20
[  395.424690][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  395.431489][   T27]  ksys_unshare+0x445/0x920
[  395.436438][   T27]  ? unshare_fd+0x1c0/0x1c0
[  395.440958][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  395.447853][   T27]  __x64_sys_unshare+0x2d/0x40
[  395.452637][   T27]  do_syscall_64+0x35/0xb0
[  395.457608][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  395.463521][   T27] RIP: 0033:0x7f19d7b3ea39
[  395.469627][   T27] RSP: 002b:00007f19d50b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  395.478470][   T27] RAX: ffffffffffffffda RBX: 00007f19d7c41f60 RCX: 00007f19d7b3ea39
[  395.486913][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000
[  395.495238][   T27] RBP: 00007f19d7b98c5f R08: 0000000000000000 R09: 0000000000000000
[  395.503980][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.512556][   T27] R13: 00007ffce14262af R14: 00007f19d50b4300 R15: 0000000000022000
[  395.521023][   T27] INFO: task syz-executor.3:9314 blocked for more than 144 seconds.
[  395.530853][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  395.537139][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  395.546505][   T27] task:syz-executor.3  state:D stack:28216 pid: 9314 ppid:  6560 flags:0x00004004
[  395.558075][   T27] Call Trace:
[  395.561374][   T27]  __schedule+0xb44/0x5960
[  395.566184][   T27]  ? find_held_lock+0x2d/0x110
[  395.570981][   T27]  ? __mutex_lock+0x9c0/0x12f0
[  395.576971][   T27]  ? io_schedule_timeout+0x140/0x140
[  395.582289][   T27]  schedule+0xd3/0x270
[  395.586872][   T27]  schedule_preempt_disabled+0xf/0x20
[  395.592266][   T27]  __mutex_lock+0xa34/0x12f0
[  395.597314][   T27]  ? smc_pnet_net_init+0x1f9/0x410
[  395.602547][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  395.609275][   T27]  ? smc_pnet_net_init+0x111/0x410
[  395.614418][   T27]  ? lockdep_init_map_type+0x2c3/0x7b0
[  395.620414][   T27]  smc_pnet_net_init+0x1f9/0x410
[  395.626079][   T27]  ? smc_net_exit+0x20/0x20
[  395.630648][   T27]  ops_init+0xaf/0x470
[  395.634711][   T27]  setup_net+0x40f/0xa30
[  395.639066][   T27]  ? down_read_killable+0x1a9/0x480
[  395.644285][   T27]  ? ops_init+0x470/0x470
[  395.650167][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  395.655819][   T27]  copy_net_ns+0x319/0x760
[  395.660262][   T27]  create_new_namespaces+0x3f6/0xb20
[  395.667819][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  395.673480][   T27]  ksys_unshare+0x445/0x920
[  395.678979][   T27]  ? unshare_fd+0x1c0/0x1c0
[  395.683510][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  395.689798][   T27]  __x64_sys_unshare+0x2d/0x40
[  395.694583][   T27]  do_syscall_64+0x35/0xb0
[  395.699627][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  395.706274][   T27] RIP: 0033:0x7f19d7b3ea39
[  395.711346][   T27] RSP: 002b:00007f19d5093188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  395.720192][   T27] RAX: ffffffffffffffda RBX: 00007f19d7c42020 RCX: 00007f19d7b3ea39
[  395.728654][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000
[  395.737643][   T27] RBP: 00007f19d7b98c5f R08: 0000000000000000 R09: 0000000000000000
[  395.746506][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.754535][   T27] R13: 00007ffce14262af R14: 00007f19d5093300 R15: 0000000000022000
[  395.764337][   T27] INFO: task syz-executor.1:9317 blocked for more than 144 seconds.
[  395.773545][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  395.783601][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  395.793297][   T27] task:syz-executor.1  state:D stack:27744 pid: 9317 ppid:  6556 flags:0x00004004
[  395.803620][   T27] Call Trace:
[  395.807408][   T27]  __schedule+0xb44/0x5960
[  395.812189][   T27]  ? find_held_lock+0x2d/0x110
[  395.817193][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  395.821977][   T27]  ? io_schedule_timeout+0x140/0x140
[  395.827416][   T27]  schedule+0xd3/0x270
[  395.831501][   T27]  schedule_preempt_disabled+0xf/0x20
[  395.837007][   T27]  __mutex_lock+0xa34/0x12f0
[  395.841662][   T27]  ? smc_pnet_net_init+0x1f9/0x410
[  395.846879][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  395.852486][   T27]  ? smc_pnet_net_init+0x111/0x410
[  395.857738][   T27]  ? lockdep_init_map_type+0x2c3/0x7b0
[  395.863236][   T27]  smc_pnet_net_init+0x1f9/0x410
[  395.868366][   T27]  ? smc_net_exit+0x20/0x20
[  395.872884][   T27]  ops_init+0xaf/0x470
[  395.877272][   T27]  setup_net+0x40f/0xa30
[  395.881529][   T27]  ? down_read_killable+0x1a9/0x480
[  395.886856][   T27]  ? ops_init+0x470/0x470
[  395.891206][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  395.896917][   T27]  copy_net_ns+0x319/0x760
[  395.901356][   T27]  create_new_namespaces+0x3f6/0xb20
[  395.906763][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  395.915185][   T27]  ksys_unshare+0x445/0x920
[  395.919713][   T27]  ? unshare_fd+0x1c0/0x1c0
[  395.924208][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  395.930184][   T27]  __x64_sys_unshare+0x2d/0x40
[  395.935205][   T27]  do_syscall_64+0x35/0xb0
[  395.939639][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  395.945676][   T27] RIP: 0033:0x7f1884ed9a39
[  395.950152][   T27] RSP: 002b:00007f188244f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  395.958837][   T27] RAX: ffffffffffffffda RBX: 00007f1884fdcf60 RCX: 00007f1884ed9a39
[  395.966996][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000
[  395.975108][   T27] RBP: 00007f1884f33c5f R08: 0000000000000000 R09: 0000000000000000
[  395.983117][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.991164][   T27] R13: 00007ffcf597e3cf R14: 00007f188244f300 R15: 0000000000022000
[  395.999391][   T27] INFO: task syz-executor.1:9332 blocked for more than 144 seconds.
[  396.008084][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  396.014417][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.023258][   T27] task:syz-executor.1  state:D stack:27896 pid: 9332 ppid:  6556 flags:0x00004004
[  396.033277][   T27] Call Trace:
[  396.036726][   T27]  __schedule+0xb44/0x5960
[  396.041180][   T27]  ? find_held_lock+0x2d/0x110
[  396.046134][   T27]  ? __mutex_lock+0x9c0/0x12f0
[  396.050913][   T27]  ? io_schedule_timeout+0x140/0x140
[  396.056435][   T27]  schedule+0xd3/0x270
[  396.060533][   T27]  schedule_preempt_disabled+0xf/0x20
[  396.066000][   T27]  __mutex_lock+0xa34/0x12f0
[  396.070651][   T27]  ? smc_pnet_net_init+0x1f9/0x410
[  396.075929][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  396.081495][   T27]  ? smc_pnet_net_init+0x111/0x410
[  396.086893][   T27]  ? lockdep_init_map_type+0x2c3/0x7b0
[  396.092409][   T27]  smc_pnet_net_init+0x1f9/0x410
[  396.097505][   T27]  ? smc_net_exit+0x20/0x20
[  396.102029][   T27]  ops_init+0xaf/0x470
[  396.106291][   T27]  setup_net+0x40f/0xa30
[  396.110553][   T27]  ? down_read_killable+0x1a9/0x480
[  396.115968][   T27]  ? ops_init+0x470/0x470
[  396.120598][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  396.126279][   T27]  copy_net_ns+0x319/0x760
[  396.130716][   T27]  create_new_namespaces+0x3f6/0xb20
[  396.136177][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  396.141829][   T27]  ksys_unshare+0x445/0x920
[  396.146438][   T27]  ? unshare_fd+0x1c0/0x1c0
[  396.150954][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  396.156979][   T27]  __x64_sys_unshare+0x2d/0x40
[  396.161808][   T27]  do_syscall_64+0x35/0xb0
[  396.166383][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  396.172310][   T27] RIP: 0033:0x7f1884ed9a39
[  396.176952][   T27] RSP: 002b:00007f188242e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  396.185852][   T27] RAX: ffffffffffffffda RBX: 00007f1884fdd020 RCX: 00007f1884ed9a39
[  396.193846][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000
[  396.202073][   T27] RBP: 00007f1884f33c5f R08: 0000000000000000 R09: 0000000000000000
[  396.210159][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.218291][   T27] R13: 00007ffcf597e3cf R14: 00007f188242e300 R15: 0000000000022000
[  396.227684][   T27] INFO: task syz-executor.1:9336 blocked for more than 144 seconds.
[  396.235963][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  396.241866][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.250633][   T27] task:syz-executor.1  state:D stack:28272 pid: 9336 ppid:  6556 flags:0x00000004
[  396.259995][   T27] Call Trace:
[  396.263288][   T27]  __schedule+0xb44/0x5960
[  396.270262][   T27]  ? find_held_lock+0x2d/0x110
[  396.275384][   T27]  ? __mutex_lock+0x9c0/0x12f0
[  396.280182][   T27]  ? io_schedule_timeout+0x140/0x140
[  396.286400][   T27]  schedule+0xd3/0x270
[  396.290502][   T27]  schedule_preempt_disabled+0xf/0x20
[  396.296524][   T27]  __mutex_lock+0xa34/0x12f0
[  396.301140][   T27]  ? rtnetlink_rcv_msg+0x3be/0xb80
[  396.306521][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  396.312086][   T27]  ? rtnetlink_rcv_msg+0x388/0xb80
[  396.317411][   T27]  rtnetlink_rcv_msg+0x3be/0xb80
[  396.322948][   T27]  ? rtnl_newlink+0xa0/0xa0
[  396.327580][   T27]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  396.332880][   T27]  netlink_rcv_skb+0x153/0x420
[  396.337854][   T27]  ? rtnl_newlink+0xa0/0xa0
[  396.342389][   T27]  ? netlink_ack+0xa60/0xa60
[  396.347170][   T27]  ? netlink_deliver_tap+0x1a2/0xc30
[  396.352470][   T27]  ? netlink_deliver_tap+0x1b1/0xc30
[  396.357923][   T27]  netlink_unicast+0x533/0x7d0
[  396.362727][   T27]  ? netlink_attachskb+0x880/0x880
[  396.367947][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  396.374205][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  396.380618][   T27]  ? __phys_addr_symbol+0x2c/0x70
[  396.385825][   T27]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[  396.391582][   T27]  ? __check_object_size+0x16e/0x3f0
[  396.397109][   T27]  netlink_sendmsg+0x86d/0xda0
[  396.401887][   T27]  ? netlink_unicast+0x7d0/0x7d0
[  396.406991][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  396.413252][   T27]  ? netlink_unicast+0x7d0/0x7d0
[  396.418411][   T27]  sock_sendmsg+0xcf/0x120
[  396.422841][   T27]  ____sys_sendmsg+0x6e8/0x810
[  396.428333][   T27]  ? kernel_sendmsg+0x50/0x50
[  396.433036][   T27]  ? do_recvmmsg+0x6d0/0x6d0
[  396.437829][   T27]  ? lock_chain_count+0x20/0x20
[  396.442694][   T27]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  396.449356][   T27]  ___sys_sendmsg+0xf3/0x170
[  396.453967][   T27]  ? sendmsg_copy_msghdr+0x160/0x160
[  396.459658][   T27]  ? __fget_files+0x21b/0x3e0
[  396.464355][   T27]  ? lock_downgrade+0x6e0/0x6e0
[  396.469767][   T27]  ? __fget_files+0x23d/0x3e0
[  396.474474][   T27]  ? __fget_light+0xea/0x280
[  396.479619][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  396.486127][   T27]  __sys_sendmsg+0xe5/0x1b0
[  396.490651][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  396.496073][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  396.501999][   T27]  do_syscall_64+0x35/0xb0
[  396.507142][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  396.513060][   T27] RIP: 0033:0x7f1884ed9a39
[  396.517547][   T27] RSP: 002b:00007f188240d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.527326][   T27] RAX: ffffffffffffffda RBX: 00007f1884fdd0e0 RCX: 00007f1884ed9a39
[  396.536596][   T27] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005
[  396.544645][   T27] RBP: 00007f1884f33c5f R08: 0000000000000000 R09: 0000000000000000
[  396.555705][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.563696][   T27] R13: 00007ffcf597e3cf R14: 00007f188240d300 R15: 0000000000022000
[  396.571854][   T27] INFO: task syz-executor.0:9333 blocked for more than 145 seconds.
[  396.581241][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  396.587359][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.597518][   T27] task:syz-executor.0  state:D stack:28712 pid: 9333 ppid:  6554 flags:0x00000004
[  396.606944][   T27] Call Trace:
[  396.610231][   T27]  __schedule+0xb44/0x5960
[  396.614648][   T27]  ? find_held_lock+0x2d/0x110
[  396.619563][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  396.624342][   T27]  ? io_schedule_timeout+0x140/0x140
[  396.630529][   T27]  schedule+0xd3/0x270
[  396.634622][   T27]  schedule_preempt_disabled+0xf/0x20
[  396.640136][   T27]  __mutex_lock+0xa34/0x12f0
[  396.646512][   T27]  ? dev_ioctl+0x279/0xee0
[  396.651003][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  396.656678][   T27]  ? dev_load+0x79/0x200
[  396.660952][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  396.668213][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  396.674475][   T27]  ? netdev_name_node_lookup_rcu+0x108/0x150
[  396.680624][   T27]  dev_ioctl+0x279/0xee0
[  396.686467][   T27]  sock_ioctl+0x537/0x640
[  396.690825][   T27]  ? br_ioctl_call+0xa0/0xa0
[  396.700338][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  396.707955][   T27]  ? br_ioctl_call+0xa0/0xa0
[  396.712549][   T27]  __x64_sys_ioctl+0x193/0x200
[  396.721773][   T27]  do_syscall_64+0x35/0xb0
[  396.728007][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  396.734217][   T27] RIP: 0033:0x7fb430801a39
[  396.740075][   T27] RSP: 002b:00007fb42dd77188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.749653][   T27] RAX: ffffffffffffffda RBX: 00007fb430904f60 RCX: 00007fb430801a39
[  396.758203][   T27] RDX: 0000000020000180 RSI: 00000000000089f1 RDI: 0000000000000003
[  396.766646][   T27] RBP: 00007fb43085bc5f R08: 0000000000000000 R09: 0000000000000000
[  396.774637][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.783596][   T27] R13: 00007fff59616e5f R14: 00007fb42dd77300 R15: 0000000000022000
[  396.792252][   T27] INFO: task syz-executor.0:9337 blocked for more than 145 seconds.
[  396.801674][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  396.808645][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.818190][   T27] task:syz-executor.0  state:D stack:28712 pid: 9337 ppid:  6554 flags:0x00004004
[  396.828530][   T27] Call Trace:
[  396.831830][   T27]  __schedule+0xb44/0x5960
[  396.837564][   T27]  ? find_held_lock+0x2d/0x110
[  396.842357][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  396.848500][   T27]  ? io_schedule_timeout+0x140/0x140
[  396.853811][   T27]  schedule+0xd3/0x270
[  396.858774][   T27]  schedule_preempt_disabled+0xf/0x20
[  396.864146][   T27]  __mutex_lock+0xa34/0x12f0
[  396.869607][   T27]  ? dev_ioctl+0x279/0xee0
[  396.874046][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  396.881120][   T27]  ? dev_load+0x79/0x200
[  396.886467][   T27]  ? apparmor_capable+0x1d8/0x460
[  396.891608][   T27]  ? dev_load+0x1a7/0x200
[  396.896778][   T27]  dev_ioctl+0x279/0xee0
[  396.901021][   T27]  sock_ioctl+0x537/0x640
[  396.906717][   T27]  ? br_ioctl_call+0xa0/0xa0
[  396.911355][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  396.919148][   T27]  ? br_ioctl_call+0xa0/0xa0
[  396.923767][   T27]  __x64_sys_ioctl+0x193/0x200
[  396.929541][   T27]  do_syscall_64+0x35/0xb0
[  396.933968][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  396.940292][   T27] RIP: 0033:0x7fb430801a39
[  396.945060][   T27] RSP: 002b:00007fb42dd56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.953487][   T27] RAX: ffffffffffffffda RBX: 00007fb430905020 RCX: 00007fb430801a39
[  396.961584][   T27] RDX: 0000000020000100 RSI: 00000000000089f2 RDI: 0000000000000003
[  396.969743][   T27] RBP: 00007fb43085bc5f R08: 0000000000000000 R09: 0000000000000000
[  396.977865][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.986078][   T27] R13: 00007fff59616e5f R14: 00007fb42dd56300 R15: 0000000000022000
[  396.994185][   T27] INFO: task syz-executor.0:9363 blocked for more than 145 seconds.
[  397.004455][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  397.010577][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  397.021346][   T27] task:syz-executor.0  state:D stack:28200 pid: 9363 ppid:  6554 flags:0x00000004
[  397.034870][   T27] Call Trace:
[  397.038542][   T27]  __schedule+0xb44/0x5960
[  397.043012][   T27]  ? find_held_lock+0x2d/0x110
[  397.049682][   T27]  ? __mutex_lock+0x9c0/0x12f0
[  397.054470][   T27]  ? io_schedule_timeout+0x140/0x140
[  397.060763][   T27]  schedule+0xd3/0x270
[  397.066145][   T27]  schedule_preempt_disabled+0xf/0x20
[  397.071556][   T27]  __mutex_lock+0xa34/0x12f0
[  397.077797][   T27]  ? dev_ioctl+0x279/0xee0
[  397.082250][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  397.088710][   T27]  ? dev_load+0x79/0x200
[  397.092959][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  397.100087][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  397.107351][   T27]  ? netdev_name_node_lookup_rcu+0x108/0x150
[  397.113387][   T27]  dev_ioctl+0x279/0xee0
[  397.118148][   T27]  sock_ioctl+0x537/0x640
[  397.122500][   T27]  ? br_ioctl_call+0xa0/0xa0
[  397.128341][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  397.134614][   T27]  ? br_ioctl_call+0xa0/0xa0
[  397.140280][   T27]  __x64_sys_ioctl+0x193/0x200
[  397.146025][   T27]  do_syscall_64+0x35/0xb0
[  397.150473][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  397.156869][   T27] RIP: 0033:0x7fb430801a39
[  397.161302][   T27] RSP: 002b:00007fb42dd35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.170054][   T27] RAX: ffffffffffffffda RBX: 00007fb4309050e0 RCX: 00007fb430801a39
[  397.178227][   T27] RDX: 0000000020000180 RSI: 00000000000089f1 RDI: 0000000000000003
[  397.186273][   T27] RBP: 00007fb43085bc5f R08: 0000000000000000 R09: 0000000000000000
[  397.194247][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.202424][   T27] R13: 00007fff59616e5f R14: 00007fb42dd35300 R15: 0000000000022000
[  397.210553][   T27] 
[  397.210553][   T27] Showing all locks held in the system:
[  397.220370][   T27] 3 locks held by kworker/1:1/25:
[  397.226606][   T27]  #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  397.239700][   T27]  #1: ffffc90000dffdb0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  397.251645][   T27]  #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10
[  397.261590][   T27] 1 lock held by khungtaskd/27:
[  397.266864][   T27]  #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  397.277453][   T27] 4 locks held by kworker/u4:2/149:
[  397.282767][   T27]  #0: ffff888143d83138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  397.294052][   T27]  #1: ffffc9000158fdb0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  397.304633][   T27]  #2: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00
[  397.314953][   T27]  #3: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_fib_net_exit+0x1b/0x2b0
[  397.324189][   T27] 3 locks held by kworker/0:3/1288:
[  397.330206][   T27]  #0: ffff8880254fdd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  397.341434][   T27]  #1: ffffc90005807db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  397.355185][   T27]  #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20
[  397.364927][   T27] 2 locks held by in:imklog/6247:
[  397.370569][   T27]  #0: ffff8880742580f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100
[  397.379843][   T27]  #1: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: raw_spin_rq_lock_nested+0x2b/0x120
[  397.390367][   T27] 2 locks held by syz-executor.4/9301:
[  397.395936][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  397.405570][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x15/0x190
[  397.415009][   T27] 2 locks held by syz-executor.3/9307:
[  397.420477][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  397.430075][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0
[  397.440199][   T27] 2 locks held by syz-executor.3/9314:
[  397.448937][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  397.460098][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410
[  397.470672][   T27] 1 lock held by syz-executor.3/9323:
[  397.476921][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80
[  397.487337][   T27] 2 locks held by syz-executor.1/9317:
[  397.492797][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  397.502678][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410
[  397.512582][   T27] 2 locks held by syz-executor.1/9332:
[  397.518980][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  397.529024][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410
[  397.539282][   T27] 1 lock held by syz-executor.1/9336:
[  397.546383][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80
[  397.556809][   T27] 1 lock held by syz-executor.0/9333:
[  397.562185][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0
[  397.571317][   T27] 1 lock held by syz-executor.0/9337:
[  397.577118][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0
[  397.586346][   T27] 1 lock held by syz-executor.0/9363:
[  397.591721][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0
[  397.600848][   T27] 1 lock held by syz-executor.0/9364:
[  397.606674][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0
[  397.616695][   T27] 
[  397.619023][   T27] =============================================
[  397.619023][   T27] 
[  397.628694][   T27] NMI backtrace for cpu 1
[  397.633028][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0
[  397.641165][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  397.651206][   T27] Call Trace:
[  397.654471][   T27]  dump_stack_lvl+0xcd/0x134
[  397.659124][   T27]  nmi_cpu_backtrace.cold+0x47/0x144
[  397.664571][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  397.669816][   T27]  nmi_trigger_cpumask_backtrace+0x1ae/0x220
[  397.675829][   T27]  watchdog+0xc1d/0xf50
[  397.679997][   T27]  ? reset_hung_task_detector+0x30/0x30
[  397.685530][   T27]  kthread+0x3e5/0x4d0
[  397.689583][   T27]  ? set_kthread_struct+0x130/0x130
[  397.694767][   T27]  ret_from_fork+0x1f/0x30
[  397.699625][   T27] Sending NMI from CPU 1 to CPUs 0:
[  397.705101][    C0] NMI backtrace for cpu 0
[  397.705111][    C0] CPU: 0 PID: 6247 Comm: in:imklog Not tainted 5.15.0-rc5-syzkaller #0
[  397.705134][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  397.705146][    C0] RIP: 0010:call_timer_fn+0xf6/0x6b0
[  397.705239][    C0] Code: c0 84 c1 0f 85 ae 05 00 00 48 c7 44 24 40 00 00 00 00 49 8b 44 24 28 48 c7 44 24 48 00 00 00 00 48 89 44 24 38 49 8b 44 24 40 <48> 89 44 24 50 49 8b 44 24 48 48 89 44 24 58 e8 16 c9 10 00 45 31
[  397.705259][    C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000246
[  397.705277][    C0] RAX: ffffffff8a8f7cc0 RBX: 0000000000000100 RCX: 0000000000000000
[  397.705291][    C0] RDX: 0000000000000000 RSI: ffffffff81661b01 RDI: ffff888077ade438
[  397.705305][    C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8fd0c9e7
[  397.705320][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888077ade410
[  397.705333][    C0] R13: 1ffff92000000fa8 R14: ffffffff873da9d0 R15: ffff8880b9c20240
[  397.705348][    C0] FS:  00007ff43bf0a700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[  397.705369][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  397.705384][    C0] CR2: 00007f401ae70018 CR3: 00000000722a4000 CR4: 00000000003506f0
[  397.705398][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  397.705411][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  397.705424][    C0] Call Trace:
[  397.705428][    C0]  <IRQ>
[  397.705436][    C0]  ? add_timer_on+0x4a0/0x4a0
[  397.705463][    C0]  ? mark_held_locks+0x9f/0xe0
[  397.705488][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  397.705515][    C0]  ? mrp_attr_event+0x280/0x280
[  397.705585][    C0]  __run_timers.part.0+0x675/0xa20
[  397.705609][    C0]  ? call_timer_fn+0x6b0/0x6b0
[  397.705635][    C0]  run_timer_softirq+0xb3/0x1d0
[  397.705655][    C0]  __do_softirq+0x29b/0x9c2
[  397.705680][    C0]  __irq_exit_rcu+0x123/0x180
[  397.705705][    C0]  irq_exit_rcu+0x5/0x20
[  397.705727][    C0]  sysvec_apic_timer_interrupt+0x93/0xc0
[  397.705754][    C0]  </IRQ>
[  397.705760][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  397.705783][    C0] RIP: 0010:kasan_check_range+0xd2/0x180
[  397.705807][    C0] Code: 48 83 c0 01 48 39 d0 74 7a 80 38 00 74 f2 48 89 c2 b8 01 00 00 00 48 85 d2 75 56 5b 5d 41 5c c3 48 85 d2 74 5e 48 01 ea eb 09 <48> 83 c0 01 48 39 d0 74 50 80 38 00 74 f2 eb d4 41 bc 08 00 00 00
[  397.705827][    C0] RSP: 0018:ffffc9000c7f78d0 EFLAGS: 00000246
[  397.705843][    C0] RAX: fffffbfff1719ef9 RBX: fffffbfff1719f03 RCX: ffffffff815eb3d9
[  397.705857][    C0] RDX: fffffbfff1719f03 RSI: 0000000000000058 RDI: ffffffff8b8cf7c0
[  397.705872][    C0] RBP: fffffbfff1719ef8 R08: 0000000000000000 R09: ffffffff8b8cf817
[  397.705885][    C0] R10: fffffbfff1719f02 R11: 0000000000000000 R12: 0000000000000058
[  397.705899][    C0] R13: ffffc9000c7f7bd8 R14: 0000000000000b58 R15: ffffffff8b891100
[  397.705917][    C0]  ? _prb_read_valid+0x239/0x710
[  397.705964][    C0]  memcpy+0x20/0x60
[  397.705986][    C0]  _prb_read_valid+0x239/0x710
[  397.706015][    C0]  ? get_data+0x5d0/0x5d0
[  397.706036][    C0]  ? __mutex_lock+0x21c/0x12f0
[  397.706060][    C0]  ? syslog_print+0x39c/0x580
[  397.706084][    C0]  ? mutex_lock_io_nested+0x1150/0x1150
[  397.706111][    C0]  prb_read_valid+0x75/0xa0
[  397.706135][    C0]  ? prb_final_commit+0x20/0x20
[  397.706162][    C0]  syslog_print+0x3f2/0x580
[  397.706185][    C0]  ? syslog_print_all+0x3a0/0x3a0
[  397.706211][    C0]  ? finish_wait+0x270/0x270
[  397.706232][    C0]  ? lock_downgrade+0x6e0/0x6e0
[  397.706259][    C0]  ? aa_file_perm+0x595/0x1180
[  397.706287][    C0]  do_syslog.part.0+0x202/0x640
[  397.706310][    C0]  ? syslog_print+0x580/0x580
[  397.706334][    C0]  ? __mutex_lock+0x21c/0x12f0
[  397.706357][    C0]  ? __fget_files+0x21b/0x3e0
[  397.706378][    C0]  ? lock_downgrade+0x6e0/0x6e0
[  397.706400][    C0]  ? __fdget_pos+0xe9/0x100
[  397.706420][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  397.706453][    C0]  ? security_syslog+0x73/0x90
[  397.706503][    C0]  do_syslog+0x49/0x60
[  397.706525][    C0]  kmsg_read+0x90/0xb0
[  397.706581][    C0]  ? kmsg_release+0x20/0x20
[  397.706602][    C0]  proc_reg_read+0x119/0x300
[  397.706624][    C0]  ? proc_reg_compat_ioctl+0x2e0/0x2e0
[  397.706646][    C0]  vfs_read+0x1b5/0x600
[  397.706670][    C0]  ksys_read+0x12d/0x250
[  397.706691][    C0]  ? vfs_write+0xae0/0xae0
[  397.706713][    C0]  ? syscall_enter_from_user_mode+0x21/0x70
[  397.706743][    C0]  do_syscall_64+0x35/0xb0
[  397.706765][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  397.706787][    C0] RIP: 0033:0x7ff43e54d22d
[  397.706804][    C0] Code: c1 20 00 00 75 10 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 4e fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 97 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  397.706823][    C0] RSP: 002b:00007ff43bee9580 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[  397.706843][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff43e54d22d
[  397.706857][    C0] RDX: 0000000000001fa0 RSI: 00007ff43bee9da0 RDI: 0000000000000004
[  397.706870][    C0] RBP: 00005631c5d9c9d0 R08: 0000000000000000 R09: 0000000000000000
[  397.706883][    C0] R10: 2ce33e6c02ce33e7 R11: 0000000000000293 R12: 00007ff43bee9da0
[  397.706898][    C0] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007ff43bee9e1e
[  397.707186][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  398.213457][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0
[  398.221601][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  398.231647][   T27] Call Trace:
[  398.234913][   T27]  dump_stack_lvl+0xcd/0x134
[  398.239568][   T27]  panic+0x2b0/0x6dd
[  398.243492][   T27]  ? __warn_printk+0xf3/0xf3
[  398.248092][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  398.253277][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  398.258634][   T27]  ? nmi_trigger_cpumask_backtrace+0x191/0x220
[  398.264773][   T27]  ? watchdog.cold+0x130/0x158
[  398.269556][   T27]  watchdog.cold+0x141/0x158
[  398.274134][   T27]  ? reset_hung_task_detector+0x30/0x30
[  398.279667][   T27]  kthread+0x3e5/0x4d0
[  398.283723][   T27]  ? set_kthread_struct+0x130/0x130
[  398.288906][   T27]  ret_from_fork+0x1f/0x30
[  398.293681][   T27] Kernel Offset: disabled
[  398.298002][   T27] Rebooting in 86400 seconds..