last executing test programs:

2m4.132309446s ago: executing program 0 (id=667):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x8a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

2m4.080577177s ago: executing program 0 (id=669):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000380), 0x4)

2m4.079979534s ago: executing program 2 (id=671):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90)

2m4.07934098s ago: executing program 0 (id=672):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/44}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

2m3.994306928s ago: executing program 2 (id=674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a31000000000500050002000000120003"], 0x4c}}, 0x2)

2m3.910084654s ago: executing program 2 (id=676):
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0))
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)

2m3.909729544s ago: executing program 0 (id=677):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x11, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m3.84229048s ago: executing program 2 (id=679):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4)

2m3.841922853s ago: executing program 0 (id=680):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200), 0x20)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff09, 0x0)

2m3.841817617s ago: executing program 2 (id=681):
r0 = socket$kcm(0x28, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x40001)

2m3.72067677s ago: executing program 0 (id=682):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0xc410}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c')

2m3.533496789s ago: executing program 32 (id=682):
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0xc410}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000fc0)=' \xb4\xcfhj0\x04\x9e\x92\xee\x87\xa1X\xbb\xea/\xbe\x18\xeb\xa9\bsDi\xb2\xc6E\x14\x8a\x1d\xc0\xd9\xe6\x10\xc0s\xe8\xc1\x12\xbd\xe2tX}\xa3\x1e \xfady7D -\x96x\x81\xdb.?\x16\xbb\x93\x1c')

2m2.721604909s ago: executing program 2 (id=685):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccc}, 0x23)

2m2.721436114s ago: executing program 33 (id=685):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccc}, 0x23)

32.601859979s ago: executing program 3 (id=2234):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6, 0x0, 0x6, 0x8}]})

32.443051657s ago: executing program 3 (id=2238):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

32.392872225s ago: executing program 3 (id=2241):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

32.215800637s ago: executing program 3 (id=2243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3a, 0xf8, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x4305, 0x2e, 0xfffffbff, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, r2, 0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x0, 0x0})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000080)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="17000000040000ade3e97e20000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000)

30.206301792s ago: executing program 3 (id=2248):
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
close(r4)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0)

30.035667092s ago: executing program 1 (id=2251):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000059)
close(0x3)

30.035104177s ago: executing program 1 (id=2253):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

30.030450608s ago: executing program 3 (id=2254):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @sk_msg}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514231ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6", 0x4d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000700"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, 0x0, 0x200008c0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x240008c0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='svcrdma_sq_post_err\x00'}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000"], 0x6c}}, 0x880)

29.846622418s ago: executing program 1 (id=2255):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

26.962248218s ago: executing program 1 (id=2257):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b937600000000000000000000000000000000000000000002000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x64008050}, 0x20040000)

24.842657081s ago: executing program 1 (id=2258):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

24.842008871s ago: executing program 1 (id=2259):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1, 0x100}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
sendmsg(r7, &(0x7f00000003c0)={&(0x7f0000000100)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="3fdc24af88b379d4e06fd414ba2a96d75b2762cac2e42755ea9d15832c1713f91c67608b00e9772f99961659f4ed36e045c736c124c9c5069ef05fb4557a9d76e74c73c7144ac5e97c385fdda41880d615893704b2892ad78d9f9fdd0869e9e7decec97c2bf5b16d148e4f4531f1485d7c164a1b9c1deb38689a90fba874c37a45ef84c67e3d669e768f4ea454954e42b6964f51c4e5", 0x96}, {&(0x7f0000000c80)}, {&(0x7f0000000240)="fc684a22d66d5617727f9bfe707ab5fe533f4c7ce0442f334b8204e53e9b3d11c73ef5530fe4c4a22e920296da9518d32c9b98a405d5929b98ab1b3445f890d9b264e10d1efa5dd25aa8301a3519a94289860144c0ebea9451a26b60d1e020", 0x5f}], 0x3, &(0x7f0000000340)}, 0x880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="380000bffd2ee53ec891adcebb"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))

14.044235456s ago: executing program 34 (id=2254):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x24, '\x00', 0x0, @sk_msg}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514231ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6", 0x4d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000700"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, 0x0, 0x200008c0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x240008c0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='svcrdma_sq_post_err\x00'}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000"], 0x6c}}, 0x880)

13.815069562s ago: executing program 35 (id=2259):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1, 0x100}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
sendmsg(r7, &(0x7f00000003c0)={&(0x7f0000000100)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="3fdc24af88b379d4e06fd414ba2a96d75b2762cac2e42755ea9d15832c1713f91c67608b00e9772f99961659f4ed36e045c736c124c9c5069ef05fb4557a9d76e74c73c7144ac5e97c385fdda41880d615893704b2892ad78d9f9fdd0869e9e7decec97c2bf5b16d148e4f4531f1485d7c164a1b9c1deb38689a90fba874c37a45ef84c67e3d669e768f4ea454954e42b6964f51c4e5", 0x96}, {&(0x7f0000000c80)}, {&(0x7f0000000240)="fc684a22d66d5617727f9bfe707ab5fe533f4c7ce0442f334b8204e53e9b3d11c73ef5530fe4c4a22e920296da9518d32c9b98a405d5929b98ab1b3445f890d9b264e10d1efa5dd25aa8301a3519a94289860144c0ebea9451a26b60d1e020", 0x5f}], 0x3, &(0x7f0000000340)}, 0x880)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="380000bffd2ee53ec891adcebb"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))

958.035633ms ago: executing program 5 (id=2420):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xf, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xc, 0x1}]}]}}, 0x0, 0x42}, 0x28)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r3, 0x6, 0xc, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
perf_event_open(0x0, 0x0, 0xd, r1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)
close(0xffffffffffffffff)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7, 0x12000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x84, 0x1, @perf_config_ext={0x694, 0xa2}, 0x76fdc7004c3ef8f5, 0x7, 0x6, 0x3, 0x8000000000000000, 0x806, 0x0, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)

858.742807ms ago: executing program 4 (id=2421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='cachefiles_ondemand_close\x00', r1, 0x0, 0x1}, 0x18)

789.662927ms ago: executing program 4 (id=2422):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

657.041931ms ago: executing program 5 (id=2424):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x114, 0x8, 0x0, 0x0)

656.318ms ago: executing program 6 (id=2425):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000002d00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000400"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, 0x0, 0x20}, 0x41)
r6 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc)
setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r10 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r10, 0x1, 0x25, &(0x7f00000002c0), 0x8)

590.194039ms ago: executing program 4 (id=2426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x50, 0x2, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)

589.787574ms ago: executing program 5 (id=2427):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x11, 0x0, 0x4)

500.402554ms ago: executing program 5 (id=2428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})

499.826108ms ago: executing program 4 (id=2429):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

419.512437ms ago: executing program 6 (id=2430):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB="000000cf0000020100000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

296.318517ms ago: executing program 6 (id=2431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x418f, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xfffffffd}, {0x45}, {0x3}, {0x0, 0x0, 0x2, 0x3}, {0x6, 0x3}]})

288.067793ms ago: executing program 5 (id=2432):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8)

220.441881ms ago: executing program 4 (id=2433):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x5}]}, {0x0, [0x2e, 0x0, 0x3e, 0x0, 0x2e, 0x3b3c035660771e24]}}, 0x0, 0x2c, 0x0, 0x1, 0x3}, 0x28)

220.209992ms ago: executing program 4 (id=2434):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

110.757493ms ago: executing program 6 (id=2435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0)

110.310148ms ago: executing program 5 (id=2436):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611", 0x2c}, {&(0x7f0000001dc0)="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", 0x144}], 0x2}, 0x0)

586.222µs ago: executing program 6 (id=2437):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000064006bcd9e3fe3dc4e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

0s ago: executing program 6 (id=2438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56097' (ED25519) to the list of known hosts.
syzkaller login: [   56.369971][ T5830] cgroup: Unknown subsys name 'net'
[   56.500698][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.504767][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.664034][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.153170][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.158305][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.161931][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.165814][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.169449][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.201084][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.204763][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.208281][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.212348][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.215811][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.249892][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.254032][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.259559][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.265421][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.268730][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.512779][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.586306][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.635559][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.710239][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.713189][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.716177][ T5845] bridge_slave_0: entered allmulticast mode
[   64.720950][ T5845] bridge_slave_0: entered promiscuous mode
[   64.747444][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.750699][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.753610][ T5845] bridge_slave_1: entered allmulticast mode
[   64.757776][ T5845] bridge_slave_1: entered promiscuous mode
[   64.832996][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.855560][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.858716][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.861483][ T5849] bridge_slave_0: entered allmulticast mode
[   64.865075][ T5849] bridge_slave_0: entered promiscuous mode
[   64.873153][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.896590][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.899532][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.902244][ T5849] bridge_slave_1: entered allmulticast mode
[   64.905687][ T5849] bridge_slave_1: entered promiscuous mode
[   64.923852][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.926220][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.929117][ T5852] bridge_slave_0: entered allmulticast mode
[   64.931876][ T5852] bridge_slave_0: entered promiscuous mode
[   64.955183][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.957576][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.959816][ T5852] bridge_slave_1: entered allmulticast mode
[   64.962534][ T5852] bridge_slave_1: entered promiscuous mode
[   64.983649][ T5845] team0: Port device team_slave_0 added
[   64.989019][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.002214][ T5845] team0: Port device team_slave_1 added
[   65.006131][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.011570][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.030421][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.074881][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.078299][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.087867][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.095191][ T5849] team0: Port device team_slave_0 added
[   65.109962][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.112620][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.122410][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.128507][ T5849] team0: Port device team_slave_1 added
[   65.132072][ T5852] team0: Port device team_slave_0 added
[   65.153991][ T5852] team0: Port device team_slave_1 added
[   65.193514][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.195749][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.204162][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.223697][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.226333][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.236076][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.242130][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.244687][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.254544][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.259830][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.262608][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.273008][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.281646][ T5845] hsr_slave_0: entered promiscuous mode
[   65.284643][ T5845] hsr_slave_1: entered promiscuous mode
[   65.407782][ T5849] hsr_slave_0: entered promiscuous mode
[   65.411554][ T5849] hsr_slave_1: entered promiscuous mode
[   65.414421][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   65.416761][ T5849] Cannot create hsr debugfs directory
[   65.439382][ T5852] hsr_slave_0: entered promiscuous mode
[   65.442622][ T5852] hsr_slave_1: entered promiscuous mode
[   65.445519][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.448418][ T5852] Cannot create hsr debugfs directory
[   65.745399][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.753771][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.768416][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.780180][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.817484][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.823509][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.830486][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.851066][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.915501][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.925706][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.935049][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.949047][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.080582][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.091895][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.123957][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.134012][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   66.149955][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.152608][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.167719][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.172450][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.175491][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.178429][ T5848] Bluetooth: hci0: command tx timeout
[   66.203447][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.206484][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.214984][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.218076][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.224105][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.239996][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.242881][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.261110][ T5848] Bluetooth: hci1: command tx timeout
[   66.275215][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.278083][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.337529][ T5848] Bluetooth: hci2: command tx timeout
[   66.375466][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.390627][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.504958][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.554173][ T5852] veth0_vlan: entered promiscuous mode
[   66.565128][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.572220][ T5852] veth1_vlan: entered promiscuous mode
[   66.614555][ T5852] veth0_macvtap: entered promiscuous mode
[   66.631001][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.635962][ T5852] veth1_macvtap: entered promiscuous mode
[   66.665888][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.669240][ T5845] veth0_vlan: entered promiscuous mode
[   66.675752][ T5845] veth1_vlan: entered promiscuous mode
[   66.685421][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.706174][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.710315][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.721475][ T5849] veth0_vlan: entered promiscuous mode
[   66.731139][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.740698][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.746684][ T5849] veth1_vlan: entered promiscuous mode
[   66.750221][ T5845] veth0_macvtap: entered promiscuous mode
[   66.771213][ T5845] veth1_macvtap: entered promiscuous mode
[   66.798051][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.825136][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.841841][ T5849] veth0_macvtap: entered promiscuous mode
[   66.846185][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.851097][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.851130][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.853837][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.856286][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.872319][ T5849] veth1_macvtap: entered promiscuous mode
[   66.887962][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.909360][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.917995][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.923040][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.926548][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.948842][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.971137][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.974028][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.983780][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.993772][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.050561][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.053166][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.110995][  T603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.114770][  T603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.118685][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.121146][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.143830][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.146893][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.416346][    C0] hrtimer: interrupt took 37728 ns
[   67.573613][ T5926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.672889][ T5930] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[   67.740395][ T5935] netlink: 'syz.0.13': attribute type 4 has an invalid length.
[   67.742834][ T5935] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13'.
[   67.751762][ T5935] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   68.258277][ T5848] Bluetooth: hci0: command tx timeout
[   68.339442][ T5848] Bluetooth: hci1: command tx timeout
[   68.418073][ T5848] Bluetooth: hci2: command tx timeout
[   68.843644][ T5971] netlink: 'syz.2.29': attribute type 4 has an invalid length.
[   68.847093][ T5971] netlink: 'syz.2.29': attribute type 2 has an invalid length.
[   68.850314][ T5971] netlink: 199288 bytes leftover after parsing attributes in process `syz.2.29'.
[   69.422958][ T5975] netlink: 'syz.0.31': attribute type 3 has an invalid length.
[   69.425453][ T5975] netlink: 'syz.0.31': attribute type 2 has an invalid length.
[   69.428024][ T5975] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.31'.
[   69.662199][ T5985] Zero length message leads to an empty skb
[   70.149124][ T5987] netlink: 763 bytes leftover after parsing attributes in process `syz.1.34'.
[   70.152535][ T5987] netlink: 'syz.1.34': attribute type 10 has an invalid length.
[   70.154918][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34'.
[   70.159193][ T5987] team0: entered promiscuous mode
[   70.160819][ T5987] team_slave_0: entered promiscuous mode
[   70.163161][ T5987] team_slave_1: entered promiscuous mode
[   70.165275][ T5987] team0: entered allmulticast mode
[   70.166882][ T5987] team_slave_0: entered allmulticast mode
[   70.169295][ T5987] team_slave_1: entered allmulticast mode
[   70.171578][ T5987] bridge0: port 3(team0) entered blocking state
[   70.173926][ T5987] bridge0: port 3(team0) entered disabled state
[   70.179529][ T5987] bridge0: port 3(team0) entered blocking state
[   70.181926][ T5987] bridge0: port 3(team0) entered forwarding state
[   70.356942][ T5848] Bluetooth: hci0: command tx timeout
[   70.427592][ T5848] Bluetooth: hci1: command tx timeout
[   70.465342][ T5993] netlink: 188 bytes leftover after parsing attributes in process `syz.2.39'.
[   70.506047][ T5995] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET)
[   70.509252][ T5848] Bluetooth: hci2: command tx timeout
[   70.986247][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.987529][ T6015] infiniband syz1: set active
[   70.989038][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   70.990778][ T6015] infiniband syz1: added bond0
[   71.023180][ T6015] RDS/IB: syz1: added
[   71.024909][ T6015] smc: adding ib device syz1 with port count 1
[   71.027325][ T6015] smc:    ib device syz1 port 1 has pnetid 
[   71.225495][ T5848] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23
[   71.268087][ T6029] netlink: 152 bytes leftover after parsing attributes in process `syz.0.54'.
[   71.340650][ T6031] netlink: 'syz.0.55': attribute type 27 has an invalid length.
[   71.344914][ T6031] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.55'.
[   71.396562][ T6033] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   71.418783][ T6033] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.56'.
[   71.559338][ T6037] netlink: 'syz.0.59': attribute type 29 has an invalid length.
[   71.579825][ T6037] netlink: 'syz.0.59': attribute type 29 has an invalid length.
[   71.583095][ T6039] dummy0: entered promiscuous mode
[   71.931099][ T6055] veth0_macvtap: left promiscuous mode
[   71.984737][ T6055] syz.2.67 (6055) used greatest stack depth: 18872 bytes left
[   72.171077][ T6065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.417608][ T5848] Bluetooth: hci0: command tx timeout
[   72.501816][ T6085] dummy0: entered promiscuous mode
[   72.504874][ T6085] bridge0: port 3(dummy0) entered blocking state
[   72.509636][ T5848] Bluetooth: hci1: command tx timeout
[   72.511887][ T6085] bridge0: port 3(dummy0) entered disabled state
[   72.514783][ T6085] dummy0: entered allmulticast mode
[   72.529250][ T6085] bridge0: port 3(dummy0) entered blocking state
[   72.531383][ T6085] bridge0: port 3(dummy0) entered forwarding state
[   72.578788][ T5848] Bluetooth: hci2: command tx timeout
[   72.735997][ T6095] Illegal XDP return value 167208756 on prog  (id 33) dev N/A, expect packet loss!
[   72.890054][ T6111] __nla_validate_parse: 6 callbacks suppressed
[   72.890071][ T6111] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.94'.
[   72.895797][ T6111] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.94'.
[   72.900593][ T6111] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.94'.
[   72.932636][ T6107] validate_nla: 6 callbacks suppressed
[   72.932887][ T6107] netlink: 'syz.0.92': attribute type 10 has an invalid length.
[   72.962933][ T6107] netlink: 55 bytes leftover after parsing attributes in process `syz.0.92'.
[   73.977899][ T6128] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.100'.
[   73.981258][ T6125] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.100'.
[   74.448784][ T6157] netlink: 'syz.2.116': attribute type 39 has an invalid length.
[   74.452109][ T6161] TCP: TCP_TX_DELAY enabled
[   74.542027][ T6166] netlink: 348 bytes leftover after parsing attributes in process `syz.1.120'.
[   74.616285][ T6171] netlink: 168 bytes leftover after parsing attributes in process `syz.1.122'.
[   74.771291][ T6157] hsr_slave_0 (unregistering): left promiscuous mode
[   75.385117][ T6201] netlink: 'syz.1.136': attribute type 11 has an invalid length.
[   75.389144][ T6201] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.136'.
[   75.434172][ T6209] tap0: tun_chr_ioctl cmd 1074025675
[   75.437608][ T6209] tap0: persist disabled
[   75.459344][ T6211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.675822][ T6215] netlink: 'syz.2.142': attribute type 6 has an invalid length.
[   75.688562][ T6215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.142'.
[   75.973350][ T6243] netlink: 'syz.1.154': attribute type 21 has an invalid length.
[   76.088205][ T5848] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[   76.249261][ T6265] netlink: 'syz.0.165': attribute type 2 has an invalid length.
[   76.268939][ T6265] netlink: 'syz.0.165': attribute type 1 has an invalid length.
[   76.616346][ T6294] bridge: RTM_NEWNEIGH with invalid state 0x1
[   76.933101][ T6317] netlink: 'syz.0.191': attribute type 14 has an invalid length.
[   77.085179][ T6327] openvswitch: netlink: Flow actions attr not present in new flow.
[   77.266407][ T6341] netlink: 'syz.2.202': attribute type 3 has an invalid length.
[   77.330609][ T6346] netlink: 'syz.2.205': attribute type 4 has an invalid length.
[   77.673872][ T6369] netlink: 'syz.1.216': attribute type 21 has an invalid length.
[   77.800435][ T6373] syz.1.218 (6373) used obsolete PPPIOCDETACH ioctl
[   78.255412][ T6384] __nla_validate_parse: 12 callbacks suppressed
[   78.255430][ T6384] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.222'.
[   78.395495][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'.
[   78.486571][ T6411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.175298][ T6433] netlink: 140 bytes leftover after parsing attributes in process `syz.1.243'.
[   79.179494][ T6433] netlink: 6 bytes leftover after parsing attributes in process `syz.1.243'.
[   79.339941][ T6443] validate_nla: 2 callbacks suppressed
[   79.339959][ T6443] netlink: 'syz.1.248': attribute type 41 has an invalid length.
[   79.345654][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'.
[   79.382701][ T6445] netlink: 152 bytes leftover after parsing attributes in process `syz.0.249'.
[   79.473377][ T6449] netlink: 'syz.2.251': attribute type 1 has an invalid length.
[   79.476600][ T6449] netlink: 'syz.2.251': attribute type 3 has an invalid length.
[   79.479635][ T6451] bpf: Bad value for 'mode'
[   79.494003][ T6449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.251'.
[   79.647258][ T6463] warning: `syz.0.257' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.690085][ T6507] netlink: 'syz.2.278': attribute type 16 has an invalid length.
[   80.693346][ T6507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.278'.
[   80.995448][ T6517] netlink: 'syz.2.283': attribute type 11 has an invalid length.
[   80.999835][ T6517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'.
[   81.970193][ T6554] netlink: 'syz.1.300': attribute type 2 has an invalid length.
[   81.973574][ T6554] netlink: 8196 bytes leftover after parsing attributes in process `syz.1.300'.
[   82.316061][ T6561] netlink: 'syz.2.303': attribute type 12 has an invalid length.
[   82.697122][ T6575] can: request_module (can-proto-0) failed.
[   82.751634][ T6582] netlink: 'syz.1.313': attribute type 2 has an invalid length.
[   82.754284][ T6582] nbd: must specify a device to reconfigure
[   83.250940][ T6619] netlink: 'syz.0.329': attribute type 21 has an invalid length.
[   83.254892][ T6619] netlink: 'syz.0.329': attribute type 4 has an invalid length.
[   83.259455][ T6619] __nla_validate_parse: 9 callbacks suppressed
[   83.259464][ T6619] netlink: 3 bytes leftover after parsing attributes in process `syz.0.329'.
[   83.396910][ T6626] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.332'.
[   84.479345][ T6652] validate_nla: 1 callbacks suppressed
[   84.479358][ T6652] netlink: 'syz.0.343': attribute type 21 has an invalid length.
[   85.068144][ T6661] tap0: tun_chr_ioctl cmd 1074025677
[   85.071716][ T6661] tap0: linktype set to 825
[   85.803899][ T6698] syzkaller1: tun_chr_ioctl cmd 1074025673
[   86.068991][ T6718] bridge0: port 4(bond0) entered blocking state
[   86.071628][ T6718] bridge0: port 4(bond0) entered disabled state
[   86.074006][ T6718] bond0: entered allmulticast mode
[   86.075794][ T6718] bond_slave_0: entered allmulticast mode
[   86.078096][ T6718] bond_slave_1: entered allmulticast mode
[   86.082967][ T6718] bond0: entered promiscuous mode
[   86.084707][ T6718] bond_slave_0: entered promiscuous mode
[   86.086582][ T6718] bond_slave_1: entered promiscuous mode
[   86.093919][ T6718] bridge0: port 4(bond0) entered blocking state
[   86.096074][ T6718] bridge0: port 4(bond0) entered forwarding state
[   86.100920][ T6718] bond0: left allmulticast mode
[   86.102636][ T6718] bond_slave_0: left allmulticast mode
[   86.112143][ T6718] bond_slave_1: left allmulticast mode
[   86.114360][ T6718] bond0: left promiscuous mode
[   86.116072][ T6718] bond_slave_0: left promiscuous mode
[   86.134735][ T6718] bond_slave_1: left promiscuous mode
[   86.146819][ T6718] bridge0: port 4(bond0) entered disabled state
[   86.342131][   T24] cfg80211: failed to load regulatory.db
[   87.279787][ T6760] netlink: 176 bytes leftover after parsing attributes in process `syz.1.385'.
[   87.610756][ T6783] netlink: 'syz.2.395': attribute type 10 has an invalid length.
[   87.613294][ T6783] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.395'.
[   87.679527][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'.
[   87.684583][ T6786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'.
[   87.898375][ T6804] raw_sendmsg: syz.2.405 forgot to set AF_INET. Fix it!
[   87.960848][ T6810] netlink: 'syz.2.408': attribute type 21 has an invalid length.
[   87.963629][ T6810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'.
[   87.968227][ T6808] netlink: 64 bytes leftover after parsing attributes in process `syz.1.407'.
[   88.020140][ T6815] netlink: 56 bytes leftover after parsing attributes in process `syz.2.410'.
[   88.023616][ T6815] netlink: 56 bytes leftover after parsing attributes in process `syz.2.410'.
[   88.156745][ T6825] C: renamed from team_slave_0 (while UP)
[   88.165199][ T6825] netlink: 'syz.1.415': attribute type 3 has an invalid length.
[   88.170360][ T6825] netlink: 'syz.1.415': attribute type 1 has an invalid length.
[   88.173444][ T6825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   88.267784][ T6830] __nla_validate_parse: 1 callbacks suppressed
[   88.267827][ T6830] netlink: 830 bytes leftover after parsing attributes in process `syz.0.417'.
[   88.286740][ T6830] C: renamed from team_slave_0 (while UP)
[   88.348271][ T6830] netlink: 'syz.0.417': attribute type 3 has an invalid length.
[   88.355862][ T6830] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   88.500598][ T6838] netlink: 'syz.1.421': attribute type 2 has an invalid length.
[   88.544881][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'.
[   88.713352][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[   89.002451][ T6867] netlink: 'syz.1.435': attribute type 3 has an invalid length.
[   89.005547][ T6867] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[   89.013925][ T6867] netlink: 191264 bytes leftover after parsing attributes in process `syz.1.435'.
[   89.283251][ T6883] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.442'.
[   89.398196][ T6895] : renamed from bond_slave_0 (while UP)
[   89.437849][ T6897] delete_channel: no stack
[   89.588164][ T6906] netlink: 'syz.0.453': attribute type 3 has an invalid length.
[   89.591010][ T6906] netlink: 'syz.0.453': attribute type 2 has an invalid length.
[   89.594190][ T6906] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.453'.
[   89.811879][ T5848] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[   89.947151][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[   90.000361][ T6949] netlink: 'syz.0.473': attribute type 13 has an invalid length.
[   90.003339][ T6949] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.473'.
[   90.347194][ T6976] netlink: 'syz.0.484': attribute type 6 has an invalid length.
[   90.349882][ T6976] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.484'.
[   91.549970][ T6993] netlink: 'syz.2.492': attribute type 29 has an invalid length.
[   91.554074][ T6993] netlink: 'syz.2.492': attribute type 29 has an invalid length.
[   91.562512][ T6993] netlink: 'syz.2.492': attribute type 29 has an invalid length.
[   92.289037][ T7024] syzkaller0: entered promiscuous mode
[   92.291358][ T7024] syzkaller0: entered allmulticast mode
[   92.670087][ T7028] netlink: 'syz.2.508': attribute type 2 has an invalid length.
[   92.673106][ T7028] netlink: 'syz.2.508': attribute type 8 has an invalid length.
[   92.693433][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.508'.
[   92.704038][ T7030] netlink: 'syz.1.509': attribute type 21 has an invalid length.
[   92.996087][ T7049] netlink: zone id is out of range
[   93.002325][ T7049] netlink: zone id is out of range
[   93.003179][ T7048] veth1_macvtap: left promiscuous mode
[   93.003989][ T7049] netlink: zone id is out of range
[   93.009173][ T7049] netlink: zone id is out of range
[   93.010778][ T7049] netlink: zone id is out of range
[   93.012314][ T7049] netlink: zone id is out of range
[   93.014171][ T7049] netlink: zone id is out of range
[   93.016029][ T7049] netlink: zone id is out of range
[   93.837931][ T7094] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   94.188685][ T7124] __nla_validate_parse: 3 callbacks suppressed
[   94.188702][ T7124] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.552'.
[   94.194762][ T7118] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.552'.
[   94.199099][ T7124] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.552'.
[   95.326616][ T7152] validate_nla: 5 callbacks suppressed
[   95.326640][ T7152] netlink: 'syz.2.567': attribute type 9 has an invalid length.
[   95.333159][ T7152] netlink: 'syz.2.567': attribute type 8 has an invalid length.
[   95.336140][ T7152] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.567'.
[   96.235781][ T7201] netlink: 'syz.2.590': attribute type 11 has an invalid length.
[   96.242085][ T7201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.590'.
[   96.382235][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.269833][ T7204] syzkaller0: entered promiscuous mode
[   97.271955][ T7204] syzkaller0: entered allmulticast mode
[   97.491053][ T7202] delete_channel: no stack
[   97.624150][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.597'.
[   97.661887][ T7210] netlink: 'syz.2.594': attribute type 39 has an invalid length.
[   97.837658][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'.
[   98.080296][ T7251] netlink: 'syz.0.612': attribute type 3 has an invalid length.
[   98.083199][ T7251] netlink: 144 bytes leftover after parsing attributes in process `syz.0.612'.
[   98.243933][ T7259] netlink: 'syz.2.616': attribute type 21 has an invalid length.
[   98.351138][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.619'.
[   98.358856][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.619'.
[   98.441141][ T7270] netlink: 'syz.2.619': attribute type 21 has an invalid length.
[   98.456174][ T7270] netlink: 'syz.2.619': attribute type 4 has an invalid length.
[   98.468895][ T7270] netlink: 'syz.2.619': attribute type 5 has an invalid length.
[   99.472032][ T7294] __nla_validate_parse: 2 callbacks suppressed
[   99.472052][ T7294] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.629'.
[  100.984446][ T7335] tc_dump_action: action bad kind
[  101.460875][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  101.473416][ T7381] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.666'.
[  101.770453][ T7409] sctp: [Deprecated]: syz.2.679 (pid 7409) Use of int in max_burst socket option deprecated.
[  101.770453][ T7409] Use struct sctp_assoc_value instead
[  101.940550][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.009450][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.100567][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.175844][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.281491][   T13] dummy0: left allmulticast mode
[  102.287416][   T13] bridge0: port 3(dummy0) entered disabled state
[  102.293025][   T13] bridge_slave_1: left allmulticast mode
[  102.295242][   T13] bridge_slave_1: left promiscuous mode
[  102.298852][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.305758][   T13] bridge_slave_0: left allmulticast mode
[  102.308997][   T13] bridge_slave_0: left promiscuous mode
[  102.311312][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.594346][   T13] bond0 (unregistering): (slave 30): Releasing backup interface
[  102.601553][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.606489][   T13] bond0 (unregistering): Released all slaves
[  103.169729][   T13] hsr_slave_0: left promiscuous mode
[  103.187059][   T13] hsr_slave_1: left promiscuous mode
[  103.189693][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.192371][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.199035][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.218086][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.250125][   T13] veth0_macvtap: left promiscuous mode
[  103.293069][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.296685][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.302003][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.309521][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.312766][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.346029][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.349599][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.352913][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.356423][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.360290][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.555713][   T13] team0 (unregistering): Port device team_slave_1 removed
[  103.586625][   T13] team0 (unregistering): Port device C removed
[  103.932360][ T7447] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.690'.
[  104.025391][ T7451] netlink: 'syz.1.691': attribute type 21 has an invalid length.
[  104.425381][ T7440] chnl_net:caif_netlink_parms(): no params data found
[  104.534412][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.643344][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.684946][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.688609][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.690841][ T7440] bridge_slave_0: entered allmulticast mode
[  104.693560][ T7440] bridge_slave_0: entered promiscuous mode
[  104.719108][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.725948][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.730267][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.733019][ T7440] bridge_slave_1: entered allmulticast mode
[  104.736924][ T7440] bridge_slave_1: entered promiscuous mode
[  104.795921][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.834401][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.845665][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.911222][ T7486] netlink: 'syz.1.699': attribute type 12 has an invalid length.
[  104.911817][ T7440] team0: Port device team_slave_0 added
[  104.913617][ T7486] netlink: 172 bytes leftover after parsing attributes in process `syz.1.699'.
[  104.919561][ T7440] team0: Port device team_slave_1 added
[  104.964115][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.966346][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.981872][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.020486][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.022712][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.034480][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.081343][ T7442] chnl_net:caif_netlink_parms(): no params data found
[  105.223183][ T7440] hsr_slave_0: entered promiscuous mode
[  105.226702][ T7440] hsr_slave_1: entered promiscuous mode
[  105.233587][ T7440] debugfs: 'hsr0' already exists in 'hsr'
[  105.236075][ T7440] Cannot create hsr debugfs directory
[  105.257397][   T13] bridge_slave_1: left allmulticast mode
[  105.259746][   T13] bridge_slave_1: left promiscuous mode
[  105.262192][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.271228][   T13] bridge_slave_0: left allmulticast mode
[  105.273538][   T13] bridge_slave_0: left promiscuous mode
[  105.275962][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.378338][   T54] Bluetooth: hci1: command tx timeout
[  105.381189][ T5848] Bluetooth: hci2: command tx timeout
[  105.680466][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.684599][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.688545][   T13] bond0 (unregistering): Released all slaves
[  105.728805][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.731047][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.733285][ T7442] bridge_slave_0: entered allmulticast mode
[  105.736063][ T7442] bridge_slave_0: entered promiscuous mode
[  105.740433][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.742924][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.745162][ T7442] bridge_slave_1: entered allmulticast mode
[  105.748625][ T7442] bridge_slave_1: entered promiscuous mode
[  105.823614][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.879506][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.963918][ T7442] team0: Port device team_slave_0 added
[  106.005907][ T7442] team0: Port device team_slave_1 added
[  106.078603][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.081525][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.091377][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.132821][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.135675][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.152162][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.359507][   T13] hsr_slave_1: left promiscuous mode
[  106.362026][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.365060][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.370727][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.373745][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.394657][   T13] veth1_macvtap: left promiscuous mode
[  106.398749][   T13] veth1_vlan: left promiscuous mode
[  106.400697][   T13] veth0_vlan: left promiscuous mode
[  106.845470][   T13] team0 (unregistering): Port device team_slave_1 removed
[  106.871943][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.722'.
[  106.876626][   T13] team0 (unregistering): Port device team_slave_0 removed
[  107.232584][ T7442] hsr_slave_0: entered promiscuous mode
[  107.236023][ T7442] hsr_slave_1: entered promiscuous mode
[  107.240610][ T7442] debugfs: 'hsr0' already exists in 'hsr'
[  107.242602][ T7442] Cannot create hsr debugfs directory
[  107.248671][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'.
[  107.269516][ T7440] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  107.275191][ T7440] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.289134][ T7440] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.294399][ T7440] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  107.457411][ T5848] Bluetooth: hci2: command tx timeout
[  107.459263][ T5848] Bluetooth: hci1: command tx timeout
[  107.579301][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.593114][ T7440] 8021q: adding VLAN 0 to HW filter on device team0
[  107.639485][ T7440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.642965][ T7440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.675545][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.678108][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.703249][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.705600][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.940327][ T7442] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.036268][ T7442] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.258277][ T7442] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.263723][ T7442] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.304005][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.473241][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.534214][ T7442] 8021q: adding VLAN 0 to HW filter on device team0
[  108.565441][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.568687][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.619736][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.622746][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.700705][ T7442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.728694][ T7440] veth0_vlan: entered promiscuous mode
[  108.764335][ T7440] veth1_vlan: entered promiscuous mode
[  108.841160][ T7440] veth0_macvtap: entered promiscuous mode
[  108.857305][ T7440] veth1_macvtap: entered promiscuous mode
[  108.945516][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.959140][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.988356][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.013816][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.028469][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.031674][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.035004][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.537403][   T54] Bluetooth: hci1: command tx timeout
[  109.538900][ T5848] Bluetooth: hci2: command tx timeout
[  109.863272][ T7442] veth0_vlan: entered promiscuous mode
[  109.875173][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.878374][ T7442] veth1_vlan: entered promiscuous mode
[  109.883738][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.916075][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.921900][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.992108][ T7442] veth0_macvtap: entered promiscuous mode
[  110.009332][ T7442] veth1_macvtap: entered promiscuous mode
[  110.022030][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.030696][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.043847][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.058492][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.061762][ T5874] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.064694][ T5874] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.250320][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.253317][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.301578][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.304200][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.906258][ T7649] net_ratelimit: 75 callbacks suppressed
[  110.906304][ T7649] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  110.911155][ T7649] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  111.155962][ T5848] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  111.158878][ T5848] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  111.618287][ T5848] Bluetooth: hci2: command tx timeout
[  111.620091][ T5848] Bluetooth: hci1: command tx timeout
[  112.509463][ T7730] netlink: 'syz.3.761': attribute type 6 has an invalid length.
[  112.511866][ T7730] netlink: 'syz.3.761': attribute type 25 has an invalid length.
[  112.514219][ T7730] netlink: 'syz.3.761': attribute type 27 has an invalid length.
[  112.516522][ T7730] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.761'.
[  113.521535][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1094514394 wd_nsec: 1094514555
[  114.719379][ T7857] netlink: 13 bytes leftover after parsing attributes in process `syz.3.802'.
[  115.436066][ T7900] netlink: 'syz.3.817': attribute type 10 has an invalid length.
[  115.455363][ T7900] team0: Device ipvlan1 failed to register rx_handler
[  115.703691][ T7909] delete_channel: no stack
[  115.956252][   T54] Bluetooth: hci1: Malformed LE Event: 0x0b
[  116.226658][ T7954] bridge0: port 3(team0) entered disabled state
[  116.230045][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.234087][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.241780][ T7954] bridge0: entered allmulticast mode
[  116.276559][ T7950] bridge0: port 3(team0) entered blocking state
[  116.280123][ T7950] bridge0: port 3(team0) entered forwarding state
[  116.284818][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.288947][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.293855][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.297867][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.306835][ T7950] bridge0: entered promiscuous mode
[  116.380582][   T54] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9
[  116.456157][ T7966] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.847'.
[  117.099533][ T7989] netlink: 'syz.3.856': attribute type 10 has an invalid length.
[  119.473920][ T8040] netlink: 'syz.3.875': attribute type 10 has an invalid length.
[  119.476712][ T8040] netlink: 55 bytes leftover after parsing attributes in process `syz.3.875'.
[  120.522375][ T8076] netlink: 763 bytes leftover after parsing attributes in process `syz.4.881'.
[  120.946898][ T8092] delete_channel: no stack
[  120.949959][ T8093] 0: renamed from bond_slave_1 (while UP)
[  120.952082][ T8092] delete_channel: no stack
[  121.075458][ T8097] syz.3.888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  121.085569][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.3.888 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  121.085592][ T8097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.085603][ T8097] Call Trace:
[  121.085609][ T8097]  <TASK>
[  121.085618][ T8097]  dump_stack_lvl+0x189/0x250
[  121.085644][ T8097]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  121.085668][ T8097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.085686][ T8097]  ? __pfx__printk+0x10/0x10
[  121.085708][ T8097]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.085726][ T8097]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  121.085750][ T8097]  warn_alloc+0x214/0x310
[  121.085771][ T8097]  ? stack_depot_save_flags+0x429/0x900
[  121.085797][ T8097]  ? __pfx_warn_alloc+0x10/0x10
[  121.085819][ T8097]  ? kasan_save_track+0x4f/0x80
[  121.085838][ T8097]  ? xskq_create+0x56/0x170
[  121.085851][ T8097]  ? xsk_init_queue+0xb0/0x110
[  121.085870][ T8097]  ? xsk_setsockopt+0x57b/0x8d0
[  121.085889][ T8097]  ? do_sock_setsockopt+0x17c/0x1b0
[  121.085934][ T8097]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  121.085950][ T8097]  ? do_syscall_64+0xfa/0x3b0
[  121.085965][ T8097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.085988][ T8097]  __vmalloc_node_range_noprof+0x125/0x12f0
[  121.086031][ T8097]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  121.086056][ T8097]  ? __kasan_kmalloc+0x93/0xb0
[  121.086078][ T8097]  vmalloc_user_noprof+0xad/0xf0
[  121.086098][ T8097]  ? xskq_create+0xbf/0x170
[  121.086112][ T8097]  xskq_create+0xbf/0x170
[  121.086127][ T8097]  xsk_init_queue+0xb0/0x110
[  121.086152][ T8097]  xsk_setsockopt+0x57b/0x8d0
[  121.086175][ T8097]  ? __pfx_xsk_setsockopt+0x10/0x10
[  121.086196][ T8097]  ? __pfx_aa_sk_perm+0x10/0x10
[  121.086215][ T8097]  ? __fget_files+0x2a/0x420
[  121.086236][ T8097]  ? aa_sock_opt_perm+0x74/0x110
[  121.086256][ T8097]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  121.086272][ T8097]  ? __pfx_xsk_setsockopt+0x10/0x10
[  121.086300][ T8097]  do_sock_setsockopt+0x17c/0x1b0
[  121.086322][ T8097]  __x64_sys_setsockopt+0x13f/0x1b0
[  121.086345][ T8097]  do_syscall_64+0xfa/0x3b0
[  121.086360][ T8097]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.086375][ T8097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.086389][ T8097]  ? exc_page_fault+0x9f/0xf0
[  121.086405][ T8097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.086420][ T8097] RIP: 0033:0x7f7b7258ebe9
[  121.086452][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.086466][ T8097] RSP: 002b:00007f7b707f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  121.086483][ T8097] RAX: ffffffffffffffda RBX: 00007f7b727b5fa0 RCX: 00007f7b7258ebe9
[  121.086493][ T8097] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  121.086502][ T8097] RBP: 00007f7b72611e19 R08: 0000000000000004 R09: 0000000000000000
[  121.086511][ T8097] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  121.086520][ T8097] R13: 00007f7b727b6038 R14: 00007f7b727b5fa0 R15: 00007ffef687e968
[  121.086545][ T8097]  </TASK>
[  121.086665][ T8097] Mem-Info:
[  121.195029][ T8097] active_anon:6534 inactive_anon:0 isolated_anon:0
[  121.195029][ T8097]  active_file:11091 inactive_file:38232 isolated_file:0
[  121.195029][ T8097]  unevictable:1768 dirty:132 writeback:0
[  121.195029][ T8097]  slab_reclaimable:9706 slab_unreclaimable:55312
[  121.195029][ T8097]  mapped:18048 shmem:2470 pagetables:1262
[  121.195029][ T8097]  sec_pagetables:0 bounce:0
[  121.195029][ T8097]  kernel_misc_reclaimable:0
[  121.195029][ T8097]  free:288323 free_pcp:20483 free_cma:0
[  121.210707][ T8097] Node 0 active_anon:17864kB inactive_anon:0kB active_file:26940kB inactive_file:22680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42572kB dirty:304kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4096kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.221042][ T8097] Node 1 active_anon:8272kB inactive_anon:0kB active_file:17424kB inactive_file:130248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29620kB dirty:224kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7972kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  121.232288][ T8097] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  121.240976][ T8097] lowmem_reserve[]: 0 811 811 811 811
[  121.242828][ T8097] Node 0 DMA32 free:386100kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17864kB inactive_anon:0kB active_file:26940kB inactive_file:22680kB unevictable:3536kB writepending:304kB present:1556484kB managed:831084kB mlocked:0kB bounce:0kB free_pcp:44436kB local_pcp:23688kB free_cma:0kB
[  121.254130][ T8097] lowmem_reserve[]: 0 0 0 0 0
[  121.255684][ T8097] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  121.264870][ T8097] lowmem_reserve[]: 0 0 854 854 854
[  121.266590][ T8097] Node 1 Normal free:293340kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8272kB inactive_anon:0kB active_file:17424kB inactive_file:130248kB unevictable:3536kB writepending:224kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37376kB local_pcp:18484kB free_cma:0kB
[  121.278045][ T8097] lowmem_reserve[]: 0 0 0 0 0
[  121.279577][ T8097] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  121.283533][ T8097] Node 0 DMA32: 523*4kB (UM) 467*8kB (UME) 340*16kB (UM) 438*32kB (UME) 205*64kB (UM) 22*128kB (UM) 7*256kB (UM) 2*512kB (M) 4*1024kB (UME) 1*2048kB (E) 82*4096kB (UM) = 386052kB
[  121.290417][ T8097] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  121.295678][ T8097] Node 1 Normal: 619*4kB (UME) 492*8kB (UME) 209*16kB (UME) 148*32kB (UME) 51*64kB (UM) 219*128kB (UME) 93*256kB (UE) 49*512kB (UE) 30*1024kB (UE) 14*2048kB (U) 34*4096kB (UM) = 293340kB
[  121.303042][ T8097] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.306043][ T8097] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  121.313181][ T8097] 51793 total pagecache pages
[  121.314909][ T8097] 0 pages in swap cache
[  121.316327][ T8097] Free swap  = 124996kB
[  121.319439][ T8097] Total swap = 124996kB
[  121.320856][ T8097] 786301 pages RAM
[  121.322181][ T8097] 0 pages HighMem/MovableOnly
[  121.324307][ T8097] 241282 pages reserved
[  121.325724][ T8097] 0 pages cma reserved
[  121.998718][ T8105] netlink: 'syz.1.892': attribute type 19 has an invalid length.
[  122.003135][ T8103] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.891'.
[  122.012616][ T8103] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.891'.
[  122.096056][   T54] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6
[  122.163615][ T8119] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.899'.
[  122.353229][ T8129] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  124.315638][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'.
[  124.333514][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'.
[  124.736677][ T8201] netlink: 'syz.3.926': attribute type 2 has an invalid length.
[  125.532135][ T8215] netlink: 'syz.4.930': attribute type 29 has an invalid length.
[  125.535854][ T8215] netlink: 'syz.4.930': attribute type 29 has an invalid length.
[  125.539865][ T8215] netlink: 'syz.4.930': attribute type 29 has an invalid length.
[  125.613183][ T8221] netlink: 10 bytes leftover after parsing attributes in process `syz.3.934'.
[  125.693948][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.936'.
[  125.700885][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'.
[  126.226355][ T8271] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.956'.
[  126.241381][ T8271] netlink: zone id is out of range
[  126.245302][ T8271] netlink: zone id is out of range
[  126.259917][ T8271] netlink: get zone limit has 8 unknown bytes
[  126.806638][ T8301] netlink: 17 bytes leftover after parsing attributes in process `syz.3.970'.
[  126.811797][ T8301] netlink: zone id is out of range
[  126.813938][ T8301] netlink: zone id is out of range
[  126.816097][ T8301] netlink: zone id is out of range
[  126.821047][ T8301] netlink: zone id is out of range
[  126.823659][ T8301] netlink: zone id is out of range
[  126.825940][ T8301] netlink: zone id is out of range
[  126.931247][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'.
[  126.934278][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'.
[  127.180086][ T8313] netlink: 1018 bytes leftover after parsing attributes in process `syz.4.976'.
[  127.275714][ T8320] netlink: 'syz.3.978': attribute type 16 has an invalid length.
[  127.280698][ T8320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.978'.
[  127.314408][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.405696][ T8323] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  128.866389][ T8365] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.998'.
[  128.871133][ T8365] net_ratelimit: 79 callbacks suppressed
[  128.871144][ T8365] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  128.916627][ T8370] netlink: 'syz.1.1000': attribute type 4 has an invalid length.
[  129.891108][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.895151][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.913415][ T8413] bridge0: entered allmulticast mode
[  129.973320][ T8413] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.977512][ T8413] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.982434][ T8413] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.986418][ T8413] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.000245][ T8413] bridge0: entered promiscuous mode
[  130.151166][ T8421] lo: entered allmulticast mode
[  130.191248][ T8421] lo: entered promiscuous mode
[  130.197783][ T8421] lo: left allmulticast mode
[  130.254918][ T8425] netlink: 'syz.3.1026': attribute type 21 has an invalid length.
[  130.557304][   T54] Bluetooth: hci0: Dropping invalid advertising data
[  130.560465][   T54] Bluetooth: hci0: unknown advertising packet type: 0xff
[  130.560486][   T54] Bluetooth: hci0: Malformed LE Event: 0x02
[  130.924493][   T54] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  130.929920][   T54] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  131.128160][ T8482] syzkaller1: tun_chr_ioctl cmd 1074025677
[  131.130366][ T8482] syzkaller1: linktype set to 776
[  131.442262][ T8492] blkio.reset_stats is deprecated
[  131.685490][ T8509] __nla_validate_parse: 3 callbacks suppressed
[  131.685505][ T8509] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1066'.
[  131.692161][ T8509] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  131.834444][ T8519] netlink: 166 bytes leftover after parsing attributes in process `syz.4.1071'.
[  131.910605][ T8525] netlink: 'syz.1.1074': attribute type 13 has an invalid length.
[  131.914972][ T8525] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1074'.
[  132.131695][ T8535] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1078'.
[  132.364926][ T8541] netlink: 'syz.4.1081': attribute type 26 has an invalid length.
[  132.423623][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.425751][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.359122][ T8569] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1092'.
[  133.546833][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1099'.
[  133.831051][ T8602] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1109'.
[  133.937040][   T54] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10
[  135.040723][ T8641] netlink: 'syz.4.1128': attribute type 29 has an invalid length.
[  135.045406][ T8641] netlink: 'syz.4.1128': attribute type 29 has an invalid length.
[  135.099292][   T54] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  136.017268][   T54] Bluetooth: hci2: command tx timeout
[  136.252151][ T8693] netlink: 'syz.4.1149': attribute type 3 has an invalid length.
[  136.254715][ T8693] netlink: 'syz.4.1149': attribute type 1 has an invalid length.
[  136.258230][ T8693] netlink: 201352 bytes leftover after parsing attributes in process `syz.4.1149'.
[  137.071473][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  138.419782][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1181'.
[  139.102743][ T8776] netlink: 'syz.1.1186': attribute type 10 has an invalid length.
[  139.193724][ T8776] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  139.390211][ T8789] : port 1(erspan0) entered blocking state
[  139.394041][ T8789] : port 1(erspan0) entered disabled state
[  139.396714][ T8789] erspan0: entered allmulticast mode
[  139.400644][ T8789] erspan0: entered promiscuous mode
[  139.702961][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'.
[  139.789739][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1198'.
[  139.994063][ T8823] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  141.436536][   T54] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  141.623971][ T8861] netlink: 'syz.1.1224': attribute type 2 has an invalid length.
[  141.631748][ T8861] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  141.877619][ T8871] netlink: 'syz.3.1228': attribute type 10 has an invalid length.
[  142.067574][ T8892] netlink: 'syz.4.1237': attribute type 6 has an invalid length.
[  142.070247][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1237'.
[  142.129941][ T8900] netlink: 'syz.1.1241': attribute type 10 has an invalid length.
[  142.246225][ T8906] netlink: 'syz.3.1243': attribute type 3 has an invalid length.
[  142.254124][ T8906] netlink: 'syz.3.1243': attribute type 2 has an invalid length.
[  142.256811][ T8906] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.1243'.
[  142.349051][ T8914] netlink: 'syz.4.1247': attribute type 39 has an invalid length.
[  143.036362][ T8917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1248'.
[  143.146919][ T8927] netlink: 'syz.4.1252': attribute type 33 has an invalid length.
[  143.149599][ T8927] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1252'.
[  143.478881][ T8952] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1265'.
[  143.576417][ T8949] netlink: 'syz.4.1264': attribute type 27 has an invalid length.
[  143.581935][ T8949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1264'.
[  143.613008][ T8958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.615931][ T8958] IPv6: NLM_F_CREATE should be set when creating new route
[  143.618461][ T8958] IPv6: NLM_F_CREATE should be set when creating new route
[  143.952864][ T8976] syzkaller0: entered promiscuous mode
[  143.954965][ T8976] syzkaller0: entered allmulticast mode
[  144.011443][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1276'.
[  144.016106][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1276'.
[  144.021440][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1276'.
[  144.190783][ T8992] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1282'.
[  144.322509][ T9004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1288'.
[  144.329668][ T9004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1288'.
[  144.334243][ T9004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1288'.
[  144.439707][ T9014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'.
[  146.433606][ T9104] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  146.436715][ T9104] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  146.600940][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.644297][ T9107] team0: Port device bond0 added
[  146.718749][ T9107] syz.4.1335 (9107) used greatest stack depth: 17976 bytes left
[  148.025867][ T9139] validate_nla: 4 callbacks suppressed
[  148.025883][ T9139] netlink: 'syz.3.1349': attribute type 13 has an invalid length.
[  148.033548][ T9139] netlink: 'syz.3.1349': attribute type 58 has an invalid length.
[  149.122697][ T9162] __nla_validate_parse: 3 callbacks suppressed
[  149.122710][ T9162] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1358'.
[  149.130843][ T9162] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1358'.
[  149.251922][ T9176] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1365'.
[  149.302180][ T9179] tap0: tun_chr_ioctl cmd 2148553947
[  149.456513][ T9192] cgroup: fork rejected by pids controller in /syz4
[  150.064388][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.068177][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.071437][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.076542][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.082157][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.672937][ T9215] chnl_net:caif_netlink_parms(): no params data found
[  150.775504][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.780725][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.783095][ T9215] bridge_slave_0: entered allmulticast mode
[  150.785820][ T9215] bridge_slave_0: entered promiscuous mode
[  150.791168][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.793508][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.795744][ T9215] bridge_slave_1: entered allmulticast mode
[  150.800052][ T9215] bridge_slave_1: entered promiscuous mode
[  150.823947][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.833300][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.890875][ T9215] team0: Port device team_slave_0 added
[  150.898718][ T9215] team0: Port device team_slave_1 added
[  150.992433][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.994611][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.003933][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.009325][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.014825][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.040299][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.106677][ T9215] hsr_slave_0: entered promiscuous mode
[  151.110729][ T9215] hsr_slave_1: entered promiscuous mode
[  151.113090][ T9215] debugfs: 'hsr0' already exists in 'hsr'
[  151.114884][ T9215] Cannot create hsr debugfs directory
[  151.267921][ T9215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.335136][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  151.355722][ T9215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.424412][ T9215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.482672][ T9215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.659589][ T9215] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  151.668274][ T9215] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  151.674163][ T9215] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  151.685217][ T9215] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  151.767318][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.769882][ T9273] delete_channel: no stack
[  151.791764][ T9215] 8021q: adding VLAN 0 to HW filter on device team0
[  151.796875][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.799232][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.807704][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.809846][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.926371][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.964612][ T9288] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1404'.
[  151.990798][ T9286] bridge_slave_1: left allmulticast mode
[  151.992550][ T9286] bridge_slave_1: left promiscuous mode
[  151.994905][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.007102][ T9286] bridge_slave_0: left promiscuous mode
[  152.009030][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.097183][   T54] Bluetooth: hci1: command tx timeout
[  152.139682][ T9302] netlink: 'syz.1.1408': attribute type 21 has an invalid length.
[  152.142366][ T9302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1408'.
[  152.145377][ T9302] netlink: 'syz.1.1408': attribute type 4 has an invalid length.
[  152.150467][ T9302] netlink: 'syz.1.1408': attribute type 5 has an invalid length.
[  152.153994][ T9302] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1408'.
[  152.229156][ T9215] veth0_vlan: entered promiscuous mode
[  152.235787][ T9215] veth1_vlan: entered promiscuous mode
[  152.255249][ T9215] veth0_macvtap: entered promiscuous mode
[  152.263025][ T9215] veth1_macvtap: entered promiscuous mode
[  152.273843][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.285182][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.291979][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.295068][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.301743][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.320453][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.397737][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.400802][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.434466][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.440432][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.513444][ T9319] -1: renamed from syzkaller0
[  152.559103][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1418'.
[  152.694602][ T9336] : entered promiscuous mode
[  153.730720][ T9354] netlink: 'syz.1.1432': attribute type 2 has an invalid length.
[  153.733352][ T9354] netlink: 85376 bytes leftover after parsing attributes in process `syz.1.1432'.
[  153.745813][ T9356] : renamed from veth0_to_bond (while UP)
[  153.800874][ T9362] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1436'.
[  154.051115][   T54] Bluetooth: hci1: Malformed Event: 0x13
[  154.177581][   T54] Bluetooth: hci1: command tx timeout
[  154.307233][ T9399] netlink: 'syz.1.1453': attribute type 10 has an invalid length.
[  154.338916][ T9399] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  154.412396][ T9407] __nla_validate_parse: 1 callbacks suppressed
[  154.412411][ T9407] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1457'.
[  154.532775][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'.
[  154.574184][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1462'.
[  154.578287][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1462'.
[  154.582815][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1462'.
[  155.575177][ T9434] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1469'.
[  155.885420][ T9459] openvswitch: netlink: Message has 5 unknown bytes.
[  156.084949][ T9472] netlink: 'syz.3.1487': attribute type 11 has an invalid length.
[  156.098631][ T9472] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1487'.
[  156.147757][ T9478] netlink: 'syz.4.1490': attribute type 29 has an invalid length.
[  156.152879][ T9472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.257343][   T54] Bluetooth: hci1: command tx timeout
[  156.667951][ T9509] netlink: 'syz.3.1504': attribute type 29 has an invalid length.
[  157.161897][ T9540] netlink: 'syz.1.1519': attribute type 21 has an invalid length.
[  157.165091][ T9540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1519'.
[  157.205367][ T9543] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1521'.
[  157.246044][ T9547] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1523'.
[  157.350971][ T9558] netlink: 'syz.3.1528': attribute type 1 has an invalid length.
[  157.834869][ T9594] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  157.842802][ T9594] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  158.337249][   T54] Bluetooth: hci1: command tx timeout
[  159.619665][ T9640] __nla_validate_parse: 4 callbacks suppressed
[  159.619677][ T9640] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1566'.
[  159.641260][ T9642] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1565'.
[  160.357736][ T9674] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1581'.
[  160.362056][ T9678] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1583'.
[  160.920026][ T9710] netlink: 'syz.4.1595': attribute type 19 has an invalid length.
[  160.923356][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1595'.
[  163.131983][ T9769] syzkaller0: entered promiscuous mode
[  163.133748][ T9769] syzkaller0: entered allmulticast mode
[  163.138382][ T9770] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1622'.
[  163.142197][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1624'.
[  163.451480][ T9779] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1625'.
[  164.369974][ T9786] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1628'.
[  164.619867][ T9791] netlink: 'syz.3.1629': attribute type 39 has an invalid length.
[  164.623499][ T9790] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1630'.
[  165.041736][ T9817] netlink: 'syz.3.1642': attribute type 10 has an invalid length.
[  165.058414][ T9817] veth0_vlan: left promiscuous mode
[  165.061401][ T9817] veth0_vlan: entered promiscuous mode
[  165.065419][ T9817] team0: Device veth0_vlan failed to register rx_handler
[  165.215122][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'.
[  165.872459][ T9865] bpf: Bad value for 'mode'
[  166.594420][ T9914] netlink: 'syz.4.1688': attribute type 10 has an invalid length.
[  166.696457][   T54] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  167.330355][ T9944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.493728][ T9957] netlink: 'syz.4.1706': attribute type 1 has an invalid length.
[  167.496387][ T9957] netlink: 'syz.4.1706': attribute type 3 has an invalid length.
[  167.500547][ T9957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1706'.
[  167.503492][   T54] Bluetooth: hci2: Malformed LE Event: 0x0d
[  168.041146][T10000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1726'.
[  168.071977][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 14 < 18
[  168.206909][T10014] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1733'.
[  168.220447][T10016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1734'.
[  168.225069][T10016] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1734'.
[  168.231370][T10016] netlink: 'syz.4.1734': attribute type 5 has an invalid length.
[  168.234541][T10016] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1734'.
[  168.277679][T10023] netlink: 'syz.3.1738': attribute type 2 has an invalid length.
[  168.280238][T10023] netlink: 'syz.3.1738': attribute type 1 has an invalid length.
[  168.282913][T10023] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1738'.
[  168.338040][T10024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.341224][T10024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.458817][   T54] Bluetooth: hci1: Malformed HCI Event
[  168.888446][   T54] Bluetooth: hci2: command tx timeout
[  169.205196][T10065] netlink: 'syz.1.1757': attribute type 41 has an invalid length.
[  170.187176][   T54] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  170.291299][T10083] netlink: 51563 bytes leftover after parsing attributes in process `syz.1.1765'.
[  170.508020][T10095] netlink: 11382 bytes leftover after parsing attributes in process `syz.3.1771'.
[  170.512712][T10097] netlink: 'syz.4.1772': attribute type 29 has an invalid length.
[  170.527680][T10097] netlink: 'syz.4.1772': attribute type 29 has an invalid length.
[  170.531038][T10097] netlink: 'syz.4.1772': attribute type 29 has an invalid length.
[  170.723978][T10113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.726514][T10113] IPv6: NLM_F_CREATE should be set when creating new route
[  170.728997][T10113] IPv6: NLM_F_CREATE should be set when creating new route
[  170.931929][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'.
[  171.177194][   T54] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  171.435867][T10136] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1790'.
[  171.536118][T10146] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1795'.
[  171.540805][T10146] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  171.691990][T10153] validate_nla: 3 callbacks suppressed
[  171.692409][T10153] netlink: 'syz.4.1799': attribute type 39 has an invalid length.
[  173.136521][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'.
[  173.220381][ T5848] Bluetooth: hci0: command tx timeout
[  173.290395][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'.
[  173.293293][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'.
[  173.351093][T10188] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1814'.
[  173.355344][T10189] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1816'.
[  173.820088][T10220] netlink: 'syz.1.1828': attribute type 4 has an invalid length.
[  173.854607][T10224] netlink: 'syz.1.1830': attribute type 17 has an invalid length.
[  173.858813][T10224] netlink: 'syz.1.1830': attribute type 16 has an invalid length.
[  173.919228][T10230] netlink: 'syz.4.1833': attribute type 1 has an invalid length.
[  174.244018][T10250] netlink: 'syz.4.1843': attribute type 4 has an invalid length.
[  174.477512][T10266] tc_dump_action: action bad kind
[  174.524665][T10270] netlink: 'syz.4.1852': attribute type 10 has an invalid length.
[  174.684467][T10278] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component
[  174.810407][T10282] netlink: 'syz.4.1859': attribute type 10 has an invalid length.
[  174.813168][T10282] team0: entered promiscuous mode
[  174.814972][T10282] team_slave_0: entered promiscuous mode
[  174.817463][T10282] team_slave_1: entered promiscuous mode
[  174.822045][T10282] team0: entered allmulticast mode
[  174.823824][T10282] team_slave_0: entered allmulticast mode
[  174.825620][T10282] team_slave_1: entered allmulticast mode
[  174.829397][T10282] bridge0: port 3(team0) entered blocking state
[  174.831590][T10282] bridge0: port 3(team0) entered disabled state
[  174.847155][T10282] bridge0: port 3(team0) entered blocking state
[  174.849416][T10282] bridge0: port 3(team0) entered forwarding state
[  175.021866][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.413340][T10333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  175.811541][T10347] __nla_validate_parse: 9 callbacks suppressed
[  175.811554][T10347] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1889'.
[  176.344038][T10357] netlink: 'syz.4.1894': attribute type 9 has an invalid length.
[  176.346865][T10357] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1894'.
[  176.403670][T10367] syzkaller0: entered promiscuous mode
[  176.406224][T10367] syzkaller0: entered allmulticast mode
[  176.701396][T10389] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1908'.
[  176.840599][T10407] netlink: 'syz.3.1916': attribute type 33 has an invalid length.
[  176.961282][T10420] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1923'.
[  176.980381][T10422] ]X: renamed from veth0_vlan (while UP)
[  177.024795][T10426] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1926'.
[  177.181255][T10441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1933'.
[  177.968665][T10471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1947'.
[  181.079747][T10498] netlink: 'syz.4.1960': attribute type 12 has an invalid length.
[  181.082355][T10498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1960'.
[  181.200063][T10504] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  181.259187][T10510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1966'.
[  181.914492][T10554] netlink: 'syz.4.1987': attribute type 10 has an invalid length.
[  182.294313][T10566] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1992'.
[  182.431128][T10572] netlink: 'syz.1.1995': attribute type 21 has an invalid length.
[  183.149678][T10601] netlink: 'syz.4.2006': attribute type 8 has an invalid length.
[  183.153211][T10601] netlink: 'syz.4.2006': attribute type 3 has an invalid length.
[  183.156144][T10601] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.2006'.
[  183.304866][T10619] netlink: 'syz.3.2016': attribute type 2 has an invalid length.
[  183.482564][T10632] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2022'.
[  183.543291][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2023'.
[  183.550216][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2023'.
[  183.553587][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2023'.
[  183.823637][T10651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2030'.
[  183.826844][T10651] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  183.844356][T10653] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2031'.
[  183.851415][ T3638] bridge0: port 3(team0) entered disabled state
[  184.082918][T10651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.235221][T10679] syzkaller0: tun_chr_ioctl cmd 1074025681
[  185.251202][T10698] netlink: 'syz.1.2050': attribute type 10 has an invalid length.
[  185.321870][T10709] netlink: 'syz.3.2053': attribute type 1 has an invalid length.
[  185.324326][T10709] netlink: 'syz.3.2053': attribute type 2 has an invalid length.
[  186.241037][T10776] netlink: 'syz.1.2083': attribute type 21 has an invalid length.
[  187.281500][T10799] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2091'.
[  187.284528][T10799] netlink: zone id is out of range
[  187.286215][T10799] netlink: get zone limit has 8 unknown bytes
[  187.442145][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2101'.
[  187.502748][T10823] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.2103'.
[  187.506518][T10823] openvswitch: netlink: Message has 4 unknown bytes.
[  188.762505][T10878] tun0: tun_chr_ioctl cmd 1074025677
[  188.765024][T10878] tun0: linktype set to 270
[  188.776105][T10876] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2127'.
[  188.804387][T10876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.085517][T10896] netlink: 'syz.3.2137': attribute type 33 has an invalid length.
[  189.088242][T10896] netlink: 'syz.3.2137': attribute type 3 has an invalid length.
[  189.090693][T10896] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2137'.
[  189.267356][T10910] tap0: tun_chr_ioctl cmd 1074025677
[  189.269262][T10910] tap0: linktype set to 0
[  189.385568][T10923] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2150'.
[  189.511728][T10928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2152'.
[  190.050458][T10963] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2169'.
[  190.207870][T10970] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  190.258049][T10974] netlink: 'syz.3.2175': attribute type 4 has an invalid length.
[  190.785965][T11011] netlink: 'syz.1.2192': attribute type 21 has an invalid length.
[  190.796446][T11011] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2192'.
[  190.812512][T11011] netlink: 'syz.1.2192': attribute type 4 has an invalid length.
[  190.816624][T11004] syzkaller0: tun_chr_ioctl cmd 1074812117
[  190.823815][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  190.873972][T11022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2197'.
[  192.752529][   T54] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  192.828907][T11086] __nla_validate_parse: 3 callbacks suppressed
[  192.828920][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2226'.
[  192.917749][T11092] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.335204][T11119] netlink: 'syz.1.2242': attribute type 10 has an invalid length.
[  193.610841][T11119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.639330][T11119] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  193.719888][T11123] veth1_macvtap: left promiscuous mode
[  193.911313][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.914003][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.634485][T11150] netlink: 'syz.1.2253': attribute type 39 has an invalid length.
[  196.650365][T11163] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2257'.
[  196.685840][T11165] netlink: 'syz.1.2258': attribute type 1 has an invalid length.
[  196.818033][T11167] netlink: 'syz.1.2259': attribute type 1 has an invalid length.
[  196.823766][T11167] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2259'.
[  202.661784][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 5634128709 wd_nsec: 5634128953
[  211.289872][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  211.293420][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  211.296197][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  211.300933][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  211.303970][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  211.647013][    C1] sched: DL replenish lagged too much
[  211.665565][T11181] chnl_net:caif_netlink_parms(): no params data found
[  211.748561][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.750878][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.753167][T11181] bridge_slave_0: entered allmulticast mode
[  211.755942][T11181] bridge_slave_0: entered promiscuous mode
[  211.760474][T11181] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.762773][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.764954][T11181] bridge_slave_1: entered allmulticast mode
[  211.768010][T11181] bridge_slave_1: entered promiscuous mode
[  211.792714][T11181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.798242][T11181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.929094][T11181] team0: Port device team_slave_0 added
[  211.932422][T11181] team0: Port device team_slave_1 added
[  211.999000][T11181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.001150][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.030209][T11181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.049615][T11181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.051749][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.058321][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.066805][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.072078][T11181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.072116][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.080243][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.089065][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.126032][ T5874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.182346][ T5874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.232021][T11181] hsr_slave_0: entered promiscuous mode
[  212.234911][T11181] hsr_slave_1: entered promiscuous mode
[  212.237895][T11181] debugfs: 'hsr0' already exists in 'hsr'
[  212.241467][T11181] Cannot create hsr debugfs directory
[  212.243347][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2267'.
[  212.262963][ T5874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.270617][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2267'.
[  212.348838][ T5874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.786607][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2274'.
[  212.832483][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.836774][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.842684][ T5874] bond0 (unregistering): Released all slaves
[  212.855774][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2276'.
[  212.893252][T11181] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.907769][T11181] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.935864][T11181] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.946693][T11181] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  212.973959][T11225] net veth1_virt_wifi : renamed from virt_wifi0
[  213.102858][T11194] chnl_net:caif_netlink_parms(): no params data found
[  213.248295][ T5874] hsr_slave_0: left promiscuous mode
[  213.251261][ T5874] hsr_slave_1: left promiscuous mode
[  213.253522][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.255945][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.261430][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.263687][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.284326][ T5874] veth0_macvtap: left promiscuous mode
[  213.286120][ T5874] veth1_vlan: left promiscuous mode
[  213.304820][T11250] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2285'.
[  213.377533][   T54] Bluetooth: hci3: command tx timeout
[  213.607498][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  213.633638][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  213.923927][T11194] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.926853][T11194] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.930280][T11194] bridge_slave_0: entered allmulticast mode
[  213.934080][T11194] bridge_slave_0: entered promiscuous mode
[  213.947786][T11194] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.950847][T11194] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.953734][T11194] bridge_slave_1: entered allmulticast mode
[  213.956759][T11194] bridge_slave_1: entered promiscuous mode
[  213.992058][T11181] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.006933][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.014808][T11181] 8021q: adding VLAN 0 to HW filter on device team0
[  214.023917][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.041221][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.043485][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.046726][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.049113][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.075390][T11194] team0: Port device team_slave_0 added
[  214.081514][T11194] team0: Port device team_slave_1 added
[  214.138104][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.140367][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.150852][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.164061][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.166238][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.176498][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.186852][   T54] Bluetooth: hci2: command tx timeout
[  214.203118][T11181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  214.386523][T11194] hsr_slave_0: entered promiscuous mode
[  214.398593][T11194] hsr_slave_1: entered promiscuous mode
[  214.401191][T11194] debugfs: 'hsr0' already exists in 'hsr'
[  214.403159][T11194] Cannot create hsr debugfs directory
[  214.682276][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.461273][   T54] Bluetooth: hci3: command tx timeout
[  215.566638][T11194] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.573163][T11194] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.580794][T11194] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.590457][T11194] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.605444][T11181] veth0_vlan: entered promiscuous mode
[  215.626195][T11181] veth1_vlan: entered promiscuous mode
[  215.685657][T11181] veth0_macvtap: entered promiscuous mode
[  215.701588][T11181] veth1_macvtap: entered promiscuous mode
[  215.735862][T11181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.749549][T11194] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.760903][T11181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.773457][T11194] 8021q: adding VLAN 0 to HW filter on device team0
[  215.786711][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.790955][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.810730][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.813443][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.818560][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.820776][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.824587][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.828712][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.956066][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.959259][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.991984][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.995073][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.257734][   T54] Bluetooth: hci2: command tx timeout
[  216.268255][T11194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.453512][T11194] veth0_vlan: entered promiscuous mode
[  216.467519][T11194] veth1_vlan: entered promiscuous mode
[  216.494929][T11194] veth0_macvtap: entered promiscuous mode
[  216.510291][T11194] veth1_macvtap: entered promiscuous mode
[  216.529444][T11194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.538933][T11194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.561715][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.568519][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.581732][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.595304][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.660730][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.663305][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.685638][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.689169][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.969099][T11335] openvswitch: netlink: Message has 24 unknown bytes.
[  216.971286][T11335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.326378][T11357] bridge0: port 3(ip6gretap0) entered blocking state
[  217.329294][T11357] bridge0: port 3(ip6gretap0) entered disabled state
[  217.332386][T11357] ip6gretap0: entered allmulticast mode
[  217.335731][T11357] ip6gretap0: entered promiscuous mode
[  217.340037][T11357] bridge0: port 3(ip6gretap0) entered blocking state
[  217.342348][T11357] bridge0: port 3(ip6gretap0) entered forwarding state
[  217.537551][   T54] Bluetooth: hci3: command tx timeout
[  217.623943][T11370] netlink: 'syz.5.2324': attribute type 41 has an invalid length.
[  217.728844][T11378] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2328'.
[  217.732015][T11378] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2328'.
[  218.126387][T11394] netlink: 'syz.5.2335': attribute type 40 has an invalid length.
[  218.336218][T11409] netlink: 'syz.4.2341': attribute type 21 has an invalid length.
[  218.339506][   T54] Bluetooth: hci2: command tx timeout
[  218.450399][T11394] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.022617][T11424] netlink: 'syz.4.2347': attribute type 21 has an invalid length.
[  219.627099][   T54] Bluetooth: hci3: command tx timeout
[  220.427377][   T54] Bluetooth: hci2: command tx timeout
[  220.706788][T11447] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2357'.
[  221.714696][T11496] netlink: 'syz.4.2380': attribute type 10 has an invalid length.
[  221.725156][T11496] syz_tun: entered promiscuous mode
[  221.759139][T11496] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  222.663055][T11536] netlink: 'syz.4.2399': attribute type 2 has an invalid length.
[  223.542532][   T54] Bluetooth: hci1: adv larger than maximum supported
[  223.542575][   T54] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  223.545593][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  224.476841][T11575] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  224.534772][T11579] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  225.166786][T11612] syzkaller0: entered promiscuous mode
[  225.169780][T11612] syzkaller0: entered allmulticast mode
[  225.681647][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2439'.
[  225.685282][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2439'.
Connection to localhost closed by remote host.
[  225.769758][T11710] netlink: 'syz.5.2441': attribute type 39 has an invalid length.
[  226.043364][T11624] bond0: (slave syz_tun): Releasing backup interface
[  226.138264][ T7526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.209280][ T7526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.259414][ T7526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.320942][ T7526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.420238][ T7526] bridge0: port 3(team0) entered disabled state
[  226.425880][ T7526] bridge_slave_1: left allmulticast mode
[  226.434015][ T7526] bridge_slave_1: left promiscuous mode
[  226.436449][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.442105][ T7526] bridge_slave_0: left allmulticast mode
[  226.444404][ T7526] bridge_slave_0: left promiscuous mode
[  226.446785][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.712948][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.717268][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.720976][ T7526] bond0 (unregistering): Released all slaves
[  226.791149][ T7526] : left promiscuous mode
[  227.111652][ T7526] hsr_slave_0: left promiscuous mode
[  227.114487][ T7526] hsr_slave_1: left promiscuous mode
[  227.125045][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.127651][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.130434][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.132849][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.142404][ T7526] veth1_macvtap: left promiscuous mode
[  227.144308][ T7526] veth0_macvtap: left promiscuous mode
[  227.146284][ T7526] veth1_vlan: left promiscuous mode
[  227.149953][ T7526] veth0_vlan: left promiscuous mode
[  227.476080][ T7526] team_slave_1 (unregistering): left promiscuous mode
[  227.479486][ T7526] team_slave_1 (unregistering): left allmulticast mode
[  227.482249][ T7526] team0 (unregistering): Port device team_slave_1 removed
[  227.508587][ T7526] team_slave_0 (unregistering): left promiscuous mode
[  227.510771][ T7526] team_slave_0 (unregistering): left allmulticast mode
[  227.514368][ T7526] team0 (unregistering): Port device team_slave_0 removed
[  228.195284][ T7526] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.261221][ T7526] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.310117][ T7526] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.362763][ T7526] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.474390][ T7526] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.554300][ T7526] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.624564][ T7526] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.705996][ T7526] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.805042][ T7526] ip6gretap0: left allmulticast mode
[  228.806824][ T7526] ip6gretap0: left promiscuous mode
[  228.808910][ T7526] bridge0: port 3(ip6gretap0) entered disabled state
[  228.813186][ T7526] bridge_slave_1: left allmulticast mode
[  228.815051][ T7526] bridge_slave_1: left promiscuous mode
[  228.816920][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.822780][ T7526] bridge_slave_0: left allmulticast mode
[  228.824892][ T7526] bridge_slave_0: left promiscuous mode
[  228.827180][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.832024][ T7526] bridge_slave_1: left allmulticast mode
[  228.834271][ T7526] bridge_slave_1: left promiscuous mode
[  228.836347][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.841219][ T7526] bridge_slave_0: left allmulticast mode
[  228.843783][ T7526] bridge_slave_0: left promiscuous mode
[  228.845881][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.173946][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.180095][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.185098][ T7526] bond0 (unregistering): Released all slaves
[  229.469896][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.474168][ T7526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.478493][ T7526] bond0 (unregistering): Released all slaves
[  229.996505][ T7526] hsr_slave_0: left promiscuous mode
[  229.999020][ T7526] hsr_slave_1: left promiscuous mode
[  230.001766][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.004358][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.006946][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.010459][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.015343][ T7526] hsr_slave_0: left promiscuous mode
[  230.017742][ T7526] hsr_slave_1: left promiscuous mode
[  230.019871][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.022120][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.024710][ T7526] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.026912][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.043000][ T7526] veth1_macvtap: left promiscuous mode
[  230.044831][ T7526] veth0_macvtap: left promiscuous mode
[  230.046608][ T7526] veth1_vlan: left promiscuous mode
[  230.048448][ T7526] veth0_vlan: left promiscuous mode
[  230.051378][ T7526] veth1_macvtap: left promiscuous mode
[  230.053100][ T7526] veth0_macvtap: left promiscuous mode
[  230.054933][ T7526] veth1_vlan: left promiscuous mode
[  230.056602][ T7526] veth0_vlan: left promiscuous mode
[  230.440970][ T7526] team0 (unregistering): Port device team_slave_1 removed
[  230.478247][ T7526] team0 (unregistering): Port device team_slave_0 removed
[  231.057287][ T7526] team0 (unregistering): Port device team_slave_1 removed
[  231.084043][ T7526] team0 (unregistering): Port device team_slave_0 removed
[  245.072207][ T7526] bridge_slave_1: left allmulticast mode
[  245.074419][ T7526] bridge_slave_1: left promiscuous mode
[  245.077284][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.100346][ T7526] bridge_slave_0: left allmulticast mode
[  245.102758][ T7526] bridge_slave_0: left promiscuous mode
[  245.105220][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.417799][ T7526] team0: Port device bond0 removed
[  245.420811][ T7526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.424729][ T7526] bond0 (unregistering): (slave 0): Releasing backup interface
[  245.428396][ T7526] bond0 (unregistering): Released all slaves

VM DIAGNOSIS:
21:48:16  Registers:
info registers vcpu 0

CPU#0
RAX=dc85833d7ecd3000 RBX=ffffffff819680b8 RCX=dc85833d7ecd3000 RDX=0000000000000001
RSI=ffffffff8d9b1620 RDI=ffffffff8be2fd00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa32430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b775bb3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b862a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bd285c39c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=90509a34b100bc00 RBX=ffffffff819680b8 RCX=90509a34b100bc00 RDX=0000000000000001
RSI=ffffffff8d9b1620 RDI=ffffffff8be2fd00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa32430 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b775bb3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c2a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bd285d6d80 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000ffff0000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ffff0000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
