last executing test programs:

1.591042069s ago: executing program 0 (id=555):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)

1.590857216s ago: executing program 0 (id=556):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0xf, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8)

1.536108982s ago: executing program 0 (id=559):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x10}, 0x94)

1.463484753s ago: executing program 0 (id=561):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

1.319722734s ago: executing program 2 (id=564):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @broadcast})

1.252465852s ago: executing program 1 (id=565):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x27, 0xfffffffffffffda9, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.252326943s ago: executing program 2 (id=566):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181002e00000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040)

1.252174924s ago: executing program 1 (id=567):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1488}, 0x0, 0xffffffffffffffff, r0, 0x0)
close(r0)

1.123747778s ago: executing program 1 (id=568):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48)

1.123364231s ago: executing program 1 (id=569):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

702.86159ms ago: executing program 2 (id=570):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12118, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80)

702.710515ms ago: executing program 2 (id=571):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x10, 0x29, 0x32}}], 0x10}, 0x0)

702.161218ms ago: executing program 0 (id=572):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000200), 0x4)

534.780434ms ago: executing program 0 (id=573):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x1, 0x74297, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x20, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)

534.525935ms ago: executing program 2 (id=574):
r0 = socket$kcm(0x10, 0x3, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800020004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

282.257777ms ago: executing program 1 (id=575):
r0 = socket$kcm(0x2d, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11d, 0x1f, 0x0, 0x0)

143.157734ms ago: executing program 2 (id=576):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48)

80.309001ms ago: executing program 32 (id=576):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48)

34.54532ms ago: executing program 1 (id=578):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, [@generic={0x69, 0x1, 0x1, 0x82}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 33 (id=578):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, [@generic={0x69, 0x1, 0x1, 0x82}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21265' (ED25519) to the list of known hosts.
syzkaller login: [   47.481107][ T5795] cgroup: Unknown subsys name 'net'
[   47.648735][ T5795] cgroup: Unknown subsys name 'cpuset'
[   47.652416][ T5795] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.990744][ T5795] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.892137][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.895375][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.898194][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.900768][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.903150][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.906350][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.909291][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.912661][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.915259][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.918036][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.920760][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.923344][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.926430][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.934043][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.937038][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.200342][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   53.220111][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   53.292008][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   53.348600][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.351419][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.354869][ T5826] bridge_slave_0: entered allmulticast mode
[   53.359091][ T5826] bridge_slave_0: entered promiscuous mode
[   53.375466][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.377798][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.380212][ T5830] bridge_slave_0: entered allmulticast mode
[   53.382855][ T5830] bridge_slave_0: entered promiscuous mode
[   53.396709][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.399131][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.401351][ T5826] bridge_slave_1: entered allmulticast mode
[   53.403969][ T5826] bridge_slave_1: entered promiscuous mode
[   53.414655][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.417947][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.420358][ T5830] bridge_slave_1: entered allmulticast mode
[   53.422942][ T5830] bridge_slave_1: entered promiscuous mode
[   53.443130][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.473946][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.485863][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.504564][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.510213][ T5826] team0: Port device team_slave_0 added
[   53.512273][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.515099][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.518144][ T5834] bridge_slave_0: entered allmulticast mode
[   53.521652][ T5834] bridge_slave_0: entered promiscuous mode
[   53.549713][ T5826] team0: Port device team_slave_1 added
[   53.553273][ T5830] team0: Port device team_slave_0 added
[   53.555400][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.557950][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.560418][ T5834] bridge_slave_1: entered allmulticast mode
[   53.563074][ T5834] bridge_slave_1: entered promiscuous mode
[   53.573154][ T5830] team0: Port device team_slave_1 added
[   53.615258][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.621358][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.625312][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.628706][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.636949][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.642343][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.644724][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.654612][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.667300][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.669597][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.678372][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.682411][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.684636][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.693741][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.707754][ T5834] team0: Port device team_slave_0 added
[   53.719986][ T5834] team0: Port device team_slave_1 added
[   53.757771][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.760314][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.769715][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.785290][ T5826] hsr_slave_0: entered promiscuous mode
[   53.788166][ T5826] hsr_slave_1: entered promiscuous mode
[   53.791389][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.793551][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.802668][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.833689][ T5830] hsr_slave_0: entered promiscuous mode
[   53.836627][ T5830] hsr_slave_1: entered promiscuous mode
[   53.838744][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.841183][ T5830] Cannot create hsr debugfs directory
[   53.882032][ T5834] hsr_slave_0: entered promiscuous mode
[   53.884658][ T5834] hsr_slave_1: entered promiscuous mode
[   53.888788][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.891129][ T5834] Cannot create hsr debugfs directory
[   54.100253][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.106714][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.111732][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.118543][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.163888][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.168850][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.174910][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.180795][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.197361][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.199708][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.202260][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.204504][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.213026][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.215792][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.265642][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.277124][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.283300][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.294121][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.351184][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.385090][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   54.397720][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.399948][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.405749][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.415161][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.418056][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.457913][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   54.478470][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.484855][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.487596][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.499243][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.505708][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.508021][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.538413][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   54.570178][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.573222][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.597138][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.600083][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.615595][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.663810][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.701815][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.774068][ T5826] veth0_vlan: entered promiscuous mode
[   54.790254][ T5826] veth1_vlan: entered promiscuous mode
[   54.830899][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.852166][ T5826] veth0_macvtap: entered promiscuous mode
[   54.862214][ T5826] veth1_macvtap: entered promiscuous mode
[   54.895133][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.903256][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.909032][ T5834] veth0_vlan: entered promiscuous mode
[   54.912164][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.927662][ T5834] veth1_vlan: entered promiscuous mode
[   54.931784][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.935373][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.943236][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.949644][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.979955][ T5834] veth0_macvtap: entered promiscuous mode
[   54.997727][ T5218] Bluetooth: hci1: command tx timeout
[   55.000187][ T5833] Bluetooth: hci0: command tx timeout
[   55.004589][ T5834] veth1_macvtap: entered promiscuous mode
[   55.007866][ T5833] Bluetooth: hci2: command tx timeout
[   55.035270][ T5830] veth0_vlan: entered promiscuous mode
[   55.063064][ T5830] veth1_vlan: entered promiscuous mode
[   55.070898][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.094558][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.117821][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.122397][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.133704][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.137739][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.140449][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.143218][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.163771][ T5830] veth0_macvtap: entered promiscuous mode
[   55.187748][ T5830] veth1_macvtap: entered promiscuous mode
[   55.211382][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.215730][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.270281][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.280031][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.283003][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.294266][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.305379][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.310437][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.314039][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.323002][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.338702][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.354700][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.359265][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.451802][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.455029][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.518801][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.522030][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.639039][ T5911] netlink: 'syz.2.3': attribute type 15 has an invalid length.
[   55.644988][ T5911] netlink: 11206 bytes leftover after parsing attributes in process `syz.2.3'.
[   55.841097][ T5833] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   55.928485][ T5931] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[   55.953139][ T5931] veth1_macvtap: left promiscuous mode
[   56.071378][ T5945] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   56.490190][ T5971] bridge0: port 3(veth1_to_team) entered blocking state
[   56.493032][ T5971] bridge0: port 3(veth1_to_team) entered disabled state
[   56.495277][ T5971] veth1_to_team: entered allmulticast mode
[   56.500236][ T5971] veth1_to_team: entered promiscuous mode
[   56.502609][ T5971] bridge0: port 3(veth1_to_team) entered blocking state
[   56.505361][ T5971] bridge0: port 3(veth1_to_team) entered forwarding state
[   56.628940][ T5973] syzkaller0: entered promiscuous mode
[   56.631334][ T5973] syzkaller0: entered allmulticast mode
[   56.835905][    C1] hrtimer: interrupt took 25305 ns
[   57.078786][ T5218] Bluetooth: hci2: command tx timeout
[   57.078926][ T5833] Bluetooth: hci1: command tx timeout
[   57.080829][ T5218] Bluetooth: hci0: command tx timeout
[   57.667820][ T5989] netlink: 'syz.2.44': attribute type 29 has an invalid length.
[   57.798213][ T5993] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   57.801158][ T5993] netlink: 17 bytes leftover after parsing attributes in process `syz.0.45'.
[   57.841642][ T5218] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   57.949412][ T6011] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.55'.
[   58.032606][ T6017] netlink: 'syz.2.58': attribute type 19 has an invalid length.
[   58.166945][ T6020] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.59'.
[   58.169859][ T6020] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   58.172508][ T6020] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   58.240048][ T6022] netlink: 'syz.2.59': attribute type 22 has an invalid length.
[   58.243150][ T6022] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.59'.
[   58.935361][ T6039] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.67'.
[   58.939493][ T6039] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   58.951608][ T6039] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   59.156300][ T5218] Bluetooth: hci1: command tx timeout
[   59.156586][ T5829] Bluetooth: hci2: command tx timeout
[   59.166533][ T5829] Bluetooth: hci0: command tx timeout
[   59.270890][ T6059] netlink: 'syz.2.77': attribute type 10 has an invalid length.
[   59.273556][ T6059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'.
[   59.552363][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.555505][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.561382][ T6083] bridge0: entered allmulticast mode
[   59.568510][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.570768][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.573539][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.575839][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.580063][ T6083] bridge0: entered promiscuous mode
[   60.881737][ T6126] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.109'.
[   60.958789][ T6134] Zero length message leads to an empty skb
[   60.961086][ T6134] netlink: 'syz.2.113': attribute type 10 has an invalid length.
[   61.010513][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.602453][ T5829] Bluetooth: hci1: command tx timeout
[   61.605264][ T5829] Bluetooth: hci0: command tx timeout
[   61.607704][ T5829] Bluetooth: hci2: command tx timeout
[   61.751544][ T6155] netlink: 176 bytes leftover after parsing attributes in process `syz.1.123'.
[   62.262995][ T6188] warning: `syz.1.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.278284][ T6190] Illegal XDP return value 342323200 on prog  (id 48) dev N/A, expect packet loss!
[   62.854493][ T5218] Bluetooth: hci0: Malformed LE Event: 0x0b
[   63.711192][ T6262] netlink: 'syz.1.173': attribute type 41 has an invalid length.
[   63.713701][ T6262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.173'.
[   64.537134][ T6296] netlink: 'syz.1.187': attribute type 29 has an invalid length.
[   64.607558][ T6300] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.189'.
[   64.717582][ T6308] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.193'.
[   64.721497][ T6308] netlink: zone id is out of range
[   64.746072][ T6308] netlink: get zone limit has 8 unknown bytes
[   65.071794][ T6320] netlink: 'syz.0.200': attribute type 10 has an invalid length.
[   65.643265][ T6320] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.942497][ T6339] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component
[   65.959986][ T6343] netlink: 'syz.0.210': attribute type 21 has an invalid length.
[   65.963004][ T6343] netlink: 128 bytes leftover after parsing attributes in process `syz.0.210'.
[   65.971711][ T6343] netlink: 3 bytes leftover after parsing attributes in process `syz.0.210'.
[   66.351840][ T6364] netlink: 'syz.0.220': attribute type 3 has an invalid length.
[   66.355374][ T6364] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.220'.
[   66.459146][ T6370] netlink: 830 bytes leftover after parsing attributes in process `syz.1.223'.
[   66.546055][ T6374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.225'.
[   66.685580][ T6381] pim6reg1: entered allmulticast mode
[   66.697637][ T6381] pim6reg1: left allmulticast mode
[   66.759797][ T6387] tap0: tun_chr_ioctl cmd 1074025677
[   66.761712][ T6387] tap0: linktype set to 769
[   66.984593][ T6395] netlink: 'syz.2.234': attribute type 21 has an invalid length.
[   67.111661][ T6403] netlink: 830 bytes leftover after parsing attributes in process `syz.2.240'.
[   67.411140][ T6425] netlink: 'syz.0.249': attribute type 4 has an invalid length.
[   67.689047][ T6428] netlink: 'syz.0.250': attribute type 21 has an invalid length.
[   68.088862][ T6428] netlink: 'syz.0.250': attribute type 6 has an invalid length.
[   68.092280][ T6428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.250'.
[   68.662766][ T6475] netlink: 17 bytes leftover after parsing attributes in process `syz.1.271'.
[   68.670026][ T6475] netlink: zone id is out of range
[   68.671884][ T6475] netlink: zone id is out of range
[   68.673721][ T6475] netlink: zone id is out of range
[   68.675389][ T6475] netlink: zone id is out of range
[   68.677300][ T6475] netlink: zone id is out of range
[   68.679027][ T6475] netlink: zone id is out of range
[   68.680785][ T6475] netlink: zone id is out of range
[   68.686933][ T6475] netlink: zone id is out of range
[   69.041753][ T6512] netlink: 'syz.1.289': attribute type 2 has an invalid length.
[   69.056030][ T6512] netlink: 'syz.1.289': attribute type 3 has an invalid length.
[   69.058776][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.289'.
[   69.191631][ T6520] netlink: 'syz.2.293': attribute type 19 has an invalid length.
[   69.194476][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.293'.
[   70.449158][ T6578] netlink: 'syz.0.321': attribute type 2 has an invalid length.
[   70.451786][ T6578] netlink: 'syz.0.321': attribute type 8 has an invalid length.
[   70.571665][ T6587] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   70.824054][ T5218] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   70.919691][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.924881][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.092127][ T6605] __nla_validate_parse: 4 callbacks suppressed
[   71.092137][ T6605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[   71.100932][ T6605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[   71.105236][ T6605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'.
[   71.398029][  T790] cfg80211: failed to load regulatory.db
[   71.615028][ T6643] netlink: 'syz.1.352': attribute type 21 has an invalid length.
[   71.641383][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'.
[   71.691351][ T6648] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   71.820710][ T6663] syz.2.361 uses obsolete (PF_INET,SOCK_PACKET)
[   71.824843][ T6663] netlink: 'syz.2.361': attribute type 1 has an invalid length.
[   72.287995][ T5218] Bluetooth: hci1: Malformed LE Event: 0x0d
[   72.331442][ T6693] netlink: 'syz.2.376': attribute type 4 has an invalid length.
[   72.364712][ T6695] netlink: 'syz.1.377': attribute type 13 has an invalid length.
[   72.371030][ T6695] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.377'.
[   72.418038][ T6640] delete_channel: no stack
[   73.303440][ T6757] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.405'.
[   73.452507][ T6769] netlink: 'syz.2.411': attribute type 11 has an invalid length.
[   74.013644][ T6792] net_ratelimit: 76 callbacks suppressed
[   74.013782][ T6792] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   74.018885][ T6792] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   74.436822][   T26] wlan1: Trigger new scan to find an IBSS to join
[   74.582674][ T6818] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   74.625368][ T6818] syzkaller0: entered promiscuous mode
[   74.628126][ T6818] syzkaller0: entered allmulticast mode
[   75.608273][ T6846] netlink: 'syz.2.446': attribute type 10 has an invalid length.
[   75.810707][ T5829] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   75.890642][ T6867] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   75.895460][ T6867] netlink: 'syz.1.456': attribute type 4 has an invalid length.
[   75.900372][ T6867] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.456'.
[   75.902395][ T6846] team0: Port device wlan1 added
[   75.904023][ T6867] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   75.909993][ T6867] netlink: 'syz.1.456': attribute type 4 has an invalid length.
[   75.912699][ T6867] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.456'.
[   76.244901][ T6893] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.466'.
[   76.266708][ T6893] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   76.280572][ T6893] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   76.664959][ T6930] netlink: 'syz.0.482': attribute type 49 has an invalid length.
[   76.903487][ T6947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.490'.
[   76.917848][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[   76.980199][ T6950] delete_channel: no stack
[   77.008552][ T6955] netlink: 'syz.2.494': attribute type 10 has an invalid length.
[   77.014420][ T6955] netlink: 'syz.2.494': attribute type 19 has an invalid length.
[   77.017642][ T6955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.494'.
[   77.386512][ T6985] netlink: 'syz.0.509': attribute type 10 has an invalid length.
[   77.398199][   T36] wlan1: Trigger new scan to find an IBSS to join
[   77.402170][ T6985] team0: Port device geneve1 added
[   77.761392][ T6996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.900972][ T7005] netlink: 'syz.1.518': attribute type 29 has an invalid length.
[   78.044765][ T7020] netlink: 'syz.1.525': attribute type 21 has an invalid length.
[   78.054176][ T7020] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.195552][ T7032] netlink: 'syz.1.531': attribute type 13 has an invalid length.
[   78.203007][ T7032] netlink: 'syz.1.531': attribute type 58 has an invalid length.
[   78.208734][ T7032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.531'.
[   78.229061][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.532'.
[   78.309142][ T1225] wlan1: Creating new IBSS network, BSSID 7a:4d:17:1b:60:66
[   79.065062][ T7084] netlink: 152 bytes leftover after parsing attributes in process `syz.1.557'.
[   79.312610][ T7102] netlink: 'syz.2.566': attribute type 10 has an invalid length.
[   80.420869][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.525306][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.571835][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.634542][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.728497][ T5863] bridge_slave_1: left allmulticast mode
[   80.730513][ T5863] bridge_slave_1: left promiscuous mode
[   80.733119][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.740898][ T5863] bridge_slave_0: left allmulticast mode
[   80.742944][ T5863] bridge_slave_0: left promiscuous mode
[   80.744971][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.961539][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.966567][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.970439][ T5863] bond0 (unregistering): Released all slaves
[   81.061931][ T5863] 
[   81.063056][ T5863] ======================================================
[   81.066145][ T5863] WARNING: possible circular locking dependency detected
[   81.069151][ T5863] 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 Not tainted
[   81.073096][ T5863] ------------------------------------------------------
[   81.076087][ T5863] kworker/u8:3/5863 is trying to acquire lock:
[   81.078830][ T5863] ffff888107260e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[   81.082890][ T5863] 
[   81.082890][ T5863] but task is already holding lock:
[   81.086008][ T5863] ffff888123998768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   81.090389][ T5863] 
[   81.090389][ T5863] which lock already depends on the new lock.
[   81.090389][ T5863] 
[   81.094736][ T5863] 
[   81.094736][ T5863] the existing dependency chain (in reverse order) is:
[   81.098545][ T5863] 
[   81.098545][ T5863] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[   81.101765][ T5863]        lock_acquire+0x120/0x360
[   81.103911][ T5863]        __mutex_lock+0x182/0xe80
[   81.105669][ T5863]        ieee80211_open+0xed/0x1f0
[   81.107329][ T5863]        __dev_open+0x470/0x880
[   81.108905][ T5863]        netif_open+0xaa/0x170
[   81.110492][ T5863]        dev_open+0x125/0x260
[   81.112017][ T5863]        team_add_slave+0xb36/0x2840
[   81.113729][ T5863]        do_set_master+0x533/0x6d0
[   81.115392][ T5863]        do_setlink+0xcf0/0x41c0
[   81.116990][ T5863]        rtnl_newlink+0x160b/0x1c70
[   81.118690][ T5863]        rtnetlink_rcv_msg+0x7cf/0xb70
[   81.120454][ T5863]        netlink_rcv_skb+0x208/0x470
[   81.122275][ T5863]        netlink_unicast+0x75c/0x8e0
[   81.124418][ T5863]        netlink_sendmsg+0x805/0xb30
[   81.126641][ T5863]        __sock_sendmsg+0x21c/0x270
[   81.128592][ T5863]        ____sys_sendmsg+0x505/0x830
[   81.130322][ T5863]        ___sys_sendmsg+0x21f/0x2a0
[   81.132024][ T5863]        __x64_sys_sendmsg+0x19b/0x260
[   81.133801][ T5863]        do_syscall_64+0xfa/0x3b0
[   81.135450][ T5863]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.137541][ T5863] 
[   81.137541][ T5863] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   81.140155][ T5863]        validate_chain+0xb9b/0x2140
[   81.141897][ T5863]        __lock_acquire+0xab9/0xd20
[   81.143595][ T5863]        lock_acquire+0x120/0x360
[   81.145259][ T5863]        __mutex_lock+0x182/0xe80
[   81.146896][ T5863]        team_del_slave+0x32/0x1c0
[   81.148569][ T5863]        team_device_event+0x285/0xa20
[   81.150331][ T5863]        notifier_call_chain+0x1b6/0x3e0
[   81.152141][ T5863]        unregister_netdevice_many_notify+0x15d8/0x2320
[   81.154380][ T5863]        unregister_netdevice_queue+0x33c/0x380
[   81.156426][ T5863]        _cfg80211_unregister_wdev+0x165/0x590
[   81.158437][ T5863]        ieee80211_remove_interfaces+0x49a/0x6d0
[   81.160501][ T5863]        ieee80211_unregister_hw+0x5d/0x2c0
[   81.162438][ T5863]        mac80211_hwsim_del_radio+0x275/0x460
[   81.164407][ T5863]        hwsim_exit_net+0x584/0x640
[   81.166115][ T5863]        ops_undo_list+0x49a/0x990
[   81.167782][ T5863]        cleanup_net+0x4c5/0x800
[   81.169426][ T5863]        process_scheduled_works+0xae1/0x17b0
[   81.171429][ T5863]        worker_thread+0x8a0/0xda0
[   81.173143][ T5863]        kthread+0x711/0x8a0
[   81.174675][ T5863]        ret_from_fork+0x3fc/0x770
[   81.176381][ T5863]        ret_from_fork_asm+0x1a/0x30
[   81.178110][ T5863] 
[   81.178110][ T5863] other info that might help us debug this:
[   81.178110][ T5863] 
[   81.181379][ T5863]  Possible unsafe locking scenario:
[   81.181379][ T5863] 
[   81.183768][ T5863]        CPU0                    CPU1
[   81.185581][ T5863]        ----                    ----
[   81.187329][ T5863]   lock(&rdev->wiphy.mtx);
[   81.188823][ T5863]                                lock(team->team_lock_key#2);
[   81.191262][ T5863]                                lock(&rdev->wiphy.mtx);
[   81.193529][ T5863]   lock(team->team_lock_key#2);
[   81.195092][ T5863] 
[   81.195092][ T5863]  *** DEADLOCK ***
[   81.195092][ T5863] 
[   81.197670][ T5863] 5 locks held by kworker/u8:3/5863:
[   81.199393][ T5863]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   81.202871][ T5863]  #1: ffffc9000481fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   81.206254][ T5863]  #2: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[   81.209247][ T5863]  #3: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[   81.212383][ T5863]  #4: ffff888123998768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   81.215825][ T5863] 
[   81.215825][ T5863] stack backtrace:
[   81.217692][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: kworker/u8:3 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   81.217701][ T5863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.217707][ T5863] Workqueue: netns cleanup_net
[   81.217716][ T5863] Call Trace:
[   81.217720][ T5863]  <TASK>
[   81.217724][ T5863]  dump_stack_lvl+0x189/0x250
[   81.217733][ T5863]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.217742][ T5863]  ? __pfx__printk+0x10/0x10
[   81.217752][ T5863]  ? print_lock_name+0xde/0x100
[   81.217761][ T5863]  print_circular_bug+0x2ee/0x310
[   81.217771][ T5863]  check_noncircular+0x134/0x160
[   81.217781][ T5863]  validate_chain+0xb9b/0x2140
[   81.217789][ T5863]  ? lockdep_unlock+0x89/0x120
[   81.217800][ T5863]  ? validate_chain+0x897/0x2140
[   81.217809][ T5863]  __lock_acquire+0xab9/0xd20
[   81.217817][ T5863]  ? team_del_slave+0x32/0x1c0
[   81.217824][ T5863]  lock_acquire+0x120/0x360
[   81.217830][ T5863]  ? team_del_slave+0x32/0x1c0
[   81.217837][ T5863]  ? __mutex_trylock_common+0x153/0x260
[   81.217846][ T5863]  __mutex_lock+0x182/0xe80
[   81.217857][ T5863]  ? team_del_slave+0x32/0x1c0
[   81.217863][ T5863]  ? rcu_is_watching+0x15/0xb0
[   81.217871][ T5863]  ? team_del_slave+0x32/0x1c0
[   81.217878][ T5863]  ? __pfx___mutex_lock+0x10/0x10
[   81.217887][ T5863]  ? bond_netdev_event+0xd9/0xe80
[   81.217895][ T5863]  ? __pfx___mutex_lock+0x10/0x10
[   81.217904][ T5863]  ? __pfx_bond_netdev_event+0x10/0x10
[   81.217912][ T5863]  team_del_slave+0x32/0x1c0
[   81.217919][ T5863]  team_device_event+0x285/0xa20
[   81.217927][ T5863]  notifier_call_chain+0x1b6/0x3e0
[   81.217937][ T5863]  unregister_netdevice_many_notify+0x15d8/0x2320
[   81.217949][ T5863]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   81.217959][ T5863]  ? __lock_acquire+0xab9/0xd20
[   81.217969][ T5863]  unregister_netdevice_queue+0x33c/0x380
[   81.217978][ T5863]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   81.217988][ T5863]  _cfg80211_unregister_wdev+0x165/0x590
[   81.218000][ T5863]  ieee80211_remove_interfaces+0x49a/0x6d0
[   81.218010][ T5863]  ? __pfx_synchronize_rcu+0x10/0x10
[   81.218019][ T5863]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[   81.218029][ T5863]  ? rcu_is_watching+0x15/0xb0
[   81.218037][ T5863]  ieee80211_unregister_hw+0x5d/0x2c0
[   81.218046][ T5863]  mac80211_hwsim_del_radio+0x275/0x460
[   81.218055][ T5863]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[   81.218064][ T5863]  hwsim_exit_net+0x584/0x640
[   81.218076][ T5863]  ? __pfx_hwsim_exit_net+0x10/0x10
[   81.218087][ T5863]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[   81.218095][ T5863]  ops_undo_list+0x49a/0x990
[   81.218102][ T5863]  ? __pfx_ops_undo_list+0x10/0x10
[   81.218110][ T5863]  cleanup_net+0x4c5/0x800
[   81.218116][ T5863]  ? __pfx_cleanup_net+0x10/0x10
[   81.218123][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.218131][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[   81.218138][ T5863]  ? process_scheduled_works+0x9ef/0x17b0
[   81.218146][ T5863]  process_scheduled_works+0xae1/0x17b0
[   81.218157][ T5863]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.218167][ T5863]  worker_thread+0x8a0/0xda0
[   81.218175][ T5863]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.218185][ T5863]  ? __kthread_parkme+0x7b/0x200
[   81.218194][ T5863]  kthread+0x711/0x8a0
[   81.218204][ T5863]  ? __pfx_worker_thread+0x10/0x10
[   81.218212][ T5863]  ? __pfx_kthread+0x10/0x10
[   81.218221][ T5863]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.218251][ T5863]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.218262][ T5863]  ? __pfx_kthread+0x10/0x10
[   81.218271][ T5863]  ret_from_fork+0x3fc/0x770
[   81.218279][ T5863]  ? __pfx_ret_from_fork+0x10/0x10
[   81.218287][ T5863]  ? __switch_to_asm+0x39/0x70
[   81.218300][ T5863]  ? __switch_to_asm+0x33/0x70
[   81.218309][ T5863]  ? __pfx_kthread+0x10/0x10
[   81.218319][ T5863]  ret_from_fork_asm+0x1a/0x30
[   81.218331][ T5863]  </TASK>
[   81.405023][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.407789][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.410327][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.410497][ T5863] team0: Port device wlan1 removed
[   81.424669][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.432405][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.534037][ T5863] hsr_slave_0: left promiscuous mode
[   81.537286][ T5863] hsr_slave_1: left promiscuous mode
[   81.539339][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.548333][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.554178][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.568026][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.577680][ T5863] veth0_macvtap: left promiscuous mode
[   81.579953][ T5863] veth1_vlan: left promiscuous mode
[   81.582130][ T5863] veth0_vlan: left promiscuous mode
[   81.670624][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   81.681740][ T5863] team0 (unregistering): Port device team_slave_0 removed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   81.754607][ T7154] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.769404][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   81.769416][ T7154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.769420][ T7154] Call Trace:
[   81.769423][ T7154]  <TASK>
[   81.769426][ T7154]  dump_stack_lvl+0x189/0x250
[   81.769438][ T7154]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.769447][ T7154]  ? __pfx__printk+0x10/0x10
[   81.769456][ T7154]  ? lock_release+0x4b/0x3e0
[   81.769464][ T7154]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.769473][ T7154]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.769482][ T7154]  warn_alloc+0x214/0x310
[   81.769491][ T7154]  ? __pfx_warn_alloc+0x10/0x10
[   81.769500][ T7154]  ? __get_vm_area_node+0x28f/0x300
[   81.769507][ T7154]  ? kcov_ioctl+0x55/0x640
[   81.769518][ T7154]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   81.769529][ T7154]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.769538][ T7154]  ? __pfx_kcov_ioctl+0x10/0x10
[   81.769548][ T7154]  vmalloc_user_noprof+0xad/0xf0
[   81.769555][ T7154]  ? kcov_ioctl+0x55/0x640
[   81.769565][ T7154]  kcov_ioctl+0x55/0x640
[   81.769575][ T7154]  ? bpf_lsm_file_ioctl+0x9/0x20
[   81.769585][ T7154]  ? __pfx_kcov_ioctl+0x10/0x10
[   81.769595][ T7154]  __se_sys_ioctl+0xfc/0x170
[   81.769606][ T7154]  do_syscall_64+0xfa/0x3b0
[   81.769616][ T7154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.769623][ T7154]  ? exc_page_fault+0x9f/0xf0
[   81.769631][ T7154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.769638][ T7154] RIP: 0033:0x7f3d8f98e5ab
[   81.769645][ T7154] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   81.769650][ T7154] RSP: 002b:00007fff7eda1c70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   81.769659][ T7154] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f3d8f98e5ab
[   81.769664][ T7154] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8
[   81.769669][ T7154] RBP: 00007f3d8fbb6038 R08: 0000000000000005 R09: 0000000000000000
[   81.769673][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.769677][ T7154] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[   81.769683][ T7154]  </TASK>
[   81.769686][ T7154] Mem-Info:
[   81.845275][ T7154] active_anon:3874 inactive_anon:0 isolated_anon:0
[   81.845275][ T7154]  active_file:11091 inactive_file:38217 isolated_file:0
[   81.845275][ T7154]  unevictable:1768 dirty:131 writeback:0
[   81.845275][ T7154]  slab_reclaimable:9179 slab_unreclaimable:51491
[   81.845275][ T7154]  mapped:6836 shmem:2448 pagetables:899
[   81.845275][ T7154]  sec_pagetables:0 bounce:0
[   81.845275][ T7154]  kernel_misc_reclaimable:0
[   81.845275][ T7154]  free:300001 free_pcp:22534 free_cma:0
[   81.859813][ T7154] Node 0 active_anon:6876kB inactive_anon:0kB active_file:31792kB inactive_file:6080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2376kB dirty:328kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2204kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.870967][ T7154] Node 1 active_anon:8620kB inactive_anon:0kB active_file:12572kB inactive_file:146788kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24968kB dirty:196kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9056kB pagetables:1448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.882170][ T7154] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.894755][ T7154] lowmem_reserve[]: 0 812 812 812 812
[   81.898600][ T7154] Node 0 DMA32 free:492000kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6876kB inactive_anon:0kB active_file:31792kB inactive_file:6080kB unevictable:3536kB writepending:328kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:42608kB local_pcp:27880kB free_cma:0kB
[   81.921681][ T7154] lowmem_reserve[]: 0 0 0 0 0
[   81.923344][ T7154] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.935929][ T7154] lowmem_reserve[]: 0 0 854 854 854
[   81.937717][ T7154] Node 1 Normal free:242120kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7668kB inactive_anon:0kB active_file:12572kB inactive_file:146788kB unevictable:3536kB writepending:196kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:58040kB local_pcp:19436kB free_cma:0kB
[   81.967794][ T7154] lowmem_reserve[]: 0 0 0 0 0
[   81.969414][ T7154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.973484][ T7154] Node 0 DMA32: 1244*4kB (UME) 821*8kB (UME) 371*16kB (UM) 899*32kB (UM) 678*64kB (UM) 263*128kB (UM) 120*256kB (UME) 46*512kB (UM) 33*1024kB (UME) 11*2048kB (UM) 65*4096kB (UM) = 500136kB
[   82.006330][ T7154] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   82.012764][ T7154] Node 1 Normal: 2297*4kB (UME) 611*8kB (UME) 640*16kB (UME) 437*32kB (UME) 203*64kB (UM) 47*128kB (UME) 28*256kB (UME) 15*512kB (UME) 8*1024kB (UM) 9*2048kB (UM) 43*4096kB (M) = 274908kB
[   82.029450][ T7154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.032543][ T7154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.035553][ T7154] 51757 total pagecache pages
[   82.038217][ T7154] 0 pages in swap cache
[   82.039651][ T7154] Free swap  = 124996kB
[   82.041218][ T7154] Total swap = 124996kB
[   82.042651][ T7154] 786301 pages RAM
[   82.043899][ T7154] 0 pages HighMem/MovableOnly
[   82.045466][ T7154] 241075 pages reserved
[   82.047447][ T7154] 0 pages cma reserved
[   82.294180][ T5863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.351782][ T5863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.369203][ T5863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.409897][ T5863] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.472828][ T5863] bridge_slave_1: left allmulticast mode
[   82.475198][ T5863] bridge_slave_1: left promiscuous mode
[   82.478978][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.483072][ T5863] bridge_slave_0: left allmulticast mode
[   82.485409][ T5863] bridge_slave_0: left promiscuous mode
[   82.491722][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.525647][ T5863] team0: Port device geneve1 removed
[   82.570852][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.575540][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.580588][ T5863] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   82.586368][ T5863] bond0 (unregistering): Released all slaves
[   82.629533][ T5863] bond0 (unregistering): Released all slaves
[   82.829240][ T5863] hsr_slave_0: left promiscuous mode
[   82.831643][ T5863] hsr_slave_1: left promiscuous mode
[   82.833602][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.837053][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.839701][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.842118][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.846364][ T5863] veth1_macvtap: left promiscuous mode
[   82.848152][ T5863] veth0_macvtap: left promiscuous mode
[   82.850007][ T5863] veth1_vlan: left promiscuous mode
[   82.851733][ T5863] veth0_vlan: left promiscuous mode
[   82.964079][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   82.982920][ T5863] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
17:30:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b03b200 RCX=ffff888020498000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006e0f6c0 RSP=ffffc90006e0f560
R8 =ffffffff8fa1e8f7 R9 =1ffffffff1f43d1e R10=dffffc0000000000 R11=fffffbfff1f43d1f
R12=1ffff11026cc7f65 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fb28
RIP=ffffffff81b4b37e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1948eb2380 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b2e3ff2f18 CR3=0000000030082000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000481e750
R8 =ffff888108d00237 R9 =1ffff110211a0046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58a6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe03ddbe28 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffff000000 ffffffffffffffff XMM01=0000000000706d63 0000000000000000
XMM02=0000000000ffffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffffffff000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
