last executing test programs:

9.327353023s ago: executing program 1 (id=288):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8.451660549s ago: executing program 2 (id=311):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000015000f11000000040011018701546fabca1b4e7d06a6fcbd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8662238eac09e00dc53d5ae", 0x48}], 0x1}, 0x40000)

8.445702432s ago: executing program 1 (id=312):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x1, 0x0, 0x7e, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r6, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000200)}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x800)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xf7, 0xfa, 0x0, 0x2, 0x0, 0x1, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x100000, 0x2, 0xd, 0x1, 0x1, 0x4, 0xe, 0x0, 0xf31, 0x0, 0xfff}, 0xffffffffffffffff, 0x9, r7, 0x0)

8.36910146s ago: executing program 2 (id=313):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000000002000000", 0x18}], 0x1}, 0x0)

8.368692785s ago: executing program 2 (id=314):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100))

3.11894008s ago: executing program 2 (id=315):
perf_event_open(&(0x7f0000000000)={0x1, 0x74, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000080), 0x4}, 0x104101, 0x2000000000000, 0x5, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffe, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

3.041315068s ago: executing program 1 (id=316):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a", 0x27}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&'], 0xfe33)

2.978900083s ago: executing program 1 (id=317):
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x88, 0x68, &(0x7f0000000080), 0x4)
close(r1)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300))
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804)
sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x8400)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x2000000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)

2.909832299s ago: executing program 2 (id=319):
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r5}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r2, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

2.829918266s ago: executing program 1 (id=320):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

2.649934728s ago: executing program 2 (id=321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x35, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xc1, 0xfd, 0x4000000}]})

2.559246893s ago: executing program 32 (id=321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x35, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xc1, 0xfd, 0x4000000}]})

2.507804978s ago: executing program 1 (id=323):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000811f0300000000000004001400380013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.507577552s ago: executing program 33 (id=323):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000811f0300000000000004001400380013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

548.968392ms ago: executing program 0 (id=331):
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001500), 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
syz_clone(0xc0100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)

418.953818ms ago: executing program 0 (id=332):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x80}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x90)

349.192311ms ago: executing program 0 (id=333):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)

278.742712ms ago: executing program 0 (id=334):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={r0, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000780)}], 0x4, &(0x7f0000000b80)=""/82, 0x52}, 0x0)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2)

178.488541ms ago: executing program 0 (id=335):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="34bfaf35fa1c782b718bbadaac24bb0b1ee77a1dada9e596984a1d660b8ee64f6da4b67a751dce9a84cf0786c4dadeb443a05365ed3fd6722589", 0x3a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x18, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x88}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x930, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf)
close(r4)

0s ago: executing program 0 (id=336):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)
close(0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="4f33e363a4b1"})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x8}, 0x8542, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff000000009500680000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21)
r2 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11701' (ED25519) to the list of known hosts.
syzkaller login: [   40.737348][ T5780] cgroup: Unknown subsys name 'net'
[   40.820065][ T5780] cgroup: Unknown subsys name 'cpuset'
[   40.824082][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.057340][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.252636][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.255766][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.259062][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.261962][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.264668][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.379842][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.382990][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.385817][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.388831][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.391598][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.398056][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.402627][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.406367][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.408894][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.414210][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.416895][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.482712][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.486278][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.488742][ T5836] bridge_slave_0: entered allmulticast mode
[   45.491495][ T5836] bridge_slave_0: entered promiscuous mode
[   45.503357][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.505734][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.508007][ T5836] bridge_slave_1: entered allmulticast mode
[   45.510636][ T5836] bridge_slave_1: entered promiscuous mode
[   45.548101][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.554148][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.579441][ T5836] team0: Port device team_slave_0 added
[   45.584928][ T5836] team0: Port device team_slave_1 added
[   45.611408][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.613595][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.621691][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.626415][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.628620][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.637558][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.664090][ T5836] hsr_slave_0: entered promiscuous mode
[   45.666490][ T5836] hsr_slave_1: entered promiscuous mode
[   45.774390][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   45.795655][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   45.903863][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.907351][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.909926][ T5844] bridge_slave_0: entered allmulticast mode
[   45.912877][ T5844] bridge_slave_0: entered promiscuous mode
[   45.917599][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.920157][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.922781][ T5844] bridge_slave_1: entered allmulticast mode
[   45.925976][ T5844] bridge_slave_1: entered promiscuous mode
[   45.934906][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.937499][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.939767][ T5845] bridge_slave_0: entered allmulticast mode
[   45.942392][ T5845] bridge_slave_0: entered promiscuous mode
[   45.948923][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.951261][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.953580][ T5845] bridge_slave_1: entered allmulticast mode
[   45.957219][ T5845] bridge_slave_1: entered promiscuous mode
[   45.986504][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.991055][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.030633][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.036346][ T5844] team0: Port device team_slave_0 added
[   46.041861][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.047478][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.053629][ T5844] team0: Port device team_slave_1 added
[   46.069078][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.087058][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.091145][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.095633][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.098030][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.106875][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.112164][ T5845] team0: Port device team_slave_0 added
[   46.117209][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.119496][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.128612][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.133038][ T5845] team0: Port device team_slave_1 added
[   46.155617][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.157827][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.166098][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.190742][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.192952][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.201878][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.211163][ T5844] hsr_slave_0: entered promiscuous mode
[   46.213475][ T5844] hsr_slave_1: entered promiscuous mode
[   46.215858][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.218386][ T5844] Cannot create hsr debugfs directory
[   46.221631][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.224001][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.226766][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.229002][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.261553][ T5845] hsr_slave_0: entered promiscuous mode
[   46.263819][ T5845] hsr_slave_1: entered promiscuous mode
[   46.267955][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.270412][ T5845] Cannot create hsr debugfs directory
[   46.401341][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.423371][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.426911][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.439232][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.442997][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.449287][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.454731][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.460545][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.466561][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.468905][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.481539][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.483897][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.535143][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.540138][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.549557][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.554001][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.568090][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.572507][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.623425][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.637706][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   46.648059][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.650395][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.669567][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.671904][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.687815][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.707403][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.727240][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   46.739576][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.741902][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.751527][ T5836] veth0_vlan: entered promiscuous mode
[   46.757538][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.759859][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.770131][ T5836] veth1_vlan: entered promiscuous mode
[   46.794145][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.802992][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.807484][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.829332][ T5836] veth0_macvtap: entered promiscuous mode
[   46.833220][ T5836] veth1_macvtap: entered promiscuous mode
[   46.841044][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.857071][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.863565][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.870349][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.873180][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.876129][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.900339][ T5844] veth0_vlan: entered promiscuous mode
[   46.909804][ T5844] veth1_vlan: entered promiscuous mode
[   46.933996][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.964207][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.968516][ T5844] veth0_macvtap: entered promiscuous mode
[   46.971985][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.981757][ T5844] veth1_macvtap: entered promiscuous mode
[   46.999010][ T3715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.001578][ T3715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.010152][ T5845] veth0_vlan: entered promiscuous mode
[   47.014124][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.028228][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.037730][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.040602][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.043419][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.047451][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.054824][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.067540][ T5845] veth1_vlan: entered promiscuous mode
[   47.117501][ T5845] veth0_macvtap: entered promiscuous mode
[   47.133393][ T5845] veth1_macvtap: entered promiscuous mode
[   47.142398][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.144926][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.163164][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.175097][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.182628][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.185834][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.188634][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.191512][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.206873][ T3715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.212152][ T3715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.265946][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.269594][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.300489][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.306140][   T54] Bluetooth: hci0: command tx timeout
[   47.308598][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.470186][   T54] Bluetooth: hci2: command tx timeout
[   47.472099][   T54] Bluetooth: hci1: command tx timeout
[   47.545329][    C0] hrtimer: interrupt took 41476 ns
[   47.867730][ T5932] delete_channel: no stack
[   48.082195][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.182185][ T5222] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[   48.537066][ T5990] Illegal XDP return value 4294967294 on prog  (id 19) dev N/A, expect packet loss!
[   48.772028][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'.
[   48.828713][ T6015] netlink: 'syz.1.56': attribute type 10 has an invalid length.
[   48.891203][ T6015] team0: Port device wlan1 added
[   48.936759][ T6015] syz.1.56 (6015) used greatest stack depth: 19704 bytes left
[   48.951069][ T6028] warning: `syz.2.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.992893][ T6032] netlink: 495 bytes leftover after parsing attributes in process `syz.1.64'.
[   49.083936][ T6035] delete_channel: no stack
[   49.143952][ T6042] netlink: 'syz.1.69': attribute type 21 has an invalid length.
[   49.385565][ T5222] Bluetooth: hci0: command tx timeout
[   49.509856][ T6055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   49.513731][ T6055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   49.518055][ T6055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.75'.
[   49.545887][ T5222] Bluetooth: hci1: command tx timeout
[   49.547687][ T5222] Bluetooth: hci2: command tx timeout
[   49.789536][ T6064] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   50.039751][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'.
[   50.561321][ T6089] netlink: 144 bytes leftover after parsing attributes in process `syz.2.91'.
[   50.740453][ T6101] netlink: 188 bytes leftover after parsing attributes in process `syz.2.97'.
[   50.916799][ T6101] Zero length message leads to an empty skb
[   51.465454][   T54] Bluetooth: hci0: command tx timeout
[   51.573655][  T971] cfg80211: failed to load regulatory.db
[   51.629641][   T54] Bluetooth: hci1: command tx timeout
[   51.631432][ T5222] Bluetooth: hci2: command tx timeout
[   51.831925][ T6156] IPv6: NLM_F_REPLACE set, but no existing node found!
[   52.958861][ T6182] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.134'.
[   53.771693][ T5222] Bluetooth: hci0: command tx timeout
[   53.773561][ T5222] Bluetooth: hci2: command tx timeout
[   53.775407][   T54] Bluetooth: hci1: command tx timeout
[   54.021862][ T6207] netlink: 'syz.0.144': attribute type 2 has an invalid length.
[   54.111605][ T6207] netlink: 'syz.0.144': attribute type 2 has an invalid length.
[   54.308027][ T6225] netlink: 'syz.1.152': attribute type 17 has an invalid length.
[   54.310600][ T6225] netlink: 148 bytes leftover after parsing attributes in process `syz.1.152'.
[   54.342141][ T6225] netlink: 'syz.1.152': attribute type 29 has an invalid length.
[   54.725992][ T6236] delete_channel: no stack
[   54.763004][ T6261] syzkaller0: entered promiscuous mode
[   54.764883][ T6261] syzkaller0: entered allmulticast mode
[   54.979383][ T5222] Bluetooth: hci2: Unknown advertising packet type: 0x30
[   54.981733][ T5222] Bluetooth: hci2: Malformed LE Event: 0x0d
[   55.212627][ T6272] netlink: 'syz.0.174': attribute type 10 has an invalid length.
[   55.413703][ T6272] team0: Port device wlan1 added
[   55.459093][ T6278] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.177'.
[   55.493995][ T6282] netlink: 'syz.2.179': attribute type 2 has an invalid length.
[   55.496743][ T6282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.179'.
[   55.659635][ T6308] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.191'.
[   55.703701][ T6314] netlink: 'syz.2.195': attribute type 11 has an invalid length.
[   55.714388][ T6317] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.192'.
[   55.718276][ T6307] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.192'.
[   55.723524][ T6307] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.192'.
[   55.762740][ T6321] netlink: 'syz.2.199': attribute type 10 has an invalid length.
[   55.778937][ T6321] netlink: 2 bytes leftover after parsing attributes in process `syz.2.199'.
[   55.793470][ T6321] bond0: entered promiscuous mode
[   55.795246][ T6321] bond_slave_0: entered promiscuous mode
[   55.798922][ T6321] bond_slave_1: entered promiscuous mode
[   55.807966][ T6321] bridge0: port 3(bond0) entered blocking state
[   55.811072][ T6321] bridge0: port 3(bond0) entered disabled state
[   55.814637][ T6321] bond0: entered allmulticast mode
[   55.820419][ T6321] bond_slave_0: entered allmulticast mode
[   55.822527][ T6321] bond_slave_1: entered allmulticast mode
[   55.864673][ T6334] netlink: 'syz.1.204': attribute type 3 has an invalid length.
[   55.870612][ T6321] bridge0: port 3(bond0) entered blocking state
[   55.873235][ T6321] bridge0: port 3(bond0) entered forwarding state
[   55.876006][ T6334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.204'.
[   55.990835][ T6344] netlink: 10 bytes leftover after parsing attributes in process `syz.0.209'.
[   56.170690][ T6358] netlink: 'syz.1.216': attribute type 10 has an invalid length.
[   56.173631][ T6364] C: renamed from team_slave_0 (while UP)
[   56.179881][ T6364] netlink: 'syz.2.219': attribute type 3 has an invalid length.
[   56.228282][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.238871][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.241907][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.171625][ T6377] lo: entered allmulticast mode
[   57.206673][ T6379] lo: entered promiscuous mode
[   57.208269][ T6379] lo: left allmulticast mode
[   58.498509][ T6468] raw_sendmsg: syz.1.266 forgot to set AF_INET. Fix it!
[   59.172471][ T6503] validate_nla: 9 callbacks suppressed
[   59.172529][ T6503] netlink: 'syz.0.282': attribute type 2 has an invalid length.
[   59.183802][ T6503] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   59.195717][ T6503] nbd: couldn't find a device at index 149
[   59.765076][ T6515] syzkaller0: entered promiscuous mode
[   59.769824][ T6515] syzkaller0: entered allmulticast mode
[   60.058682][ T6520] netlink: 'syz.2.289': attribute type 17 has an invalid length.
[   60.062919][ T6520] netlink: 'syz.2.289': attribute type 16 has an invalid length.
[   60.067921][ T6520] __nla_validate_parse: 10 callbacks suppressed
[   60.067931][ T6520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.289'.
[   60.132892][ T6528] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.293'.
[   60.308757][ T6536] netlink: 'syz.0.297': attribute type 21 has an invalid length.
[   60.311825][ T6536] netlink: 'syz.0.297': attribute type 1 has an invalid length.
[   60.429921][ T6540] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[   60.432432][ T6540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.299'.
[   60.454057][ T6542] netlink: 'syz.2.300': attribute type 2 has an invalid length.
[   60.457740][ T6542] netlink: 51 bytes leftover after parsing attributes in process `syz.2.300'.
[   60.529184][ T6549] delete_channel: no stack
[   60.609374][ T6560] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.309'.
[   62.994907][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1738720052 wd_nsec: 1738720124
[   65.992177][ T6578] netlink: 152 bytes leftover after parsing attributes in process `syz.2.315'.
[   66.222012][ T6589] netlink: 'syz.1.320': attribute type 10 has an invalid length.
[   66.224828][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'.
[   66.227945][ T6589] dummy0: entered promiscuous mode
[   66.231397][ T6589] bridge0: port 3(dummy0) entered blocking state
[   66.234174][ T6589] bridge0: port 3(dummy0) entered disabled state
[   66.237975][ T6589] dummy0: entered allmulticast mode
[   66.242458][ T6589] bridge0: port 3(dummy0) entered blocking state
[   66.244741][ T6589] bridge0: port 3(dummy0) entered forwarding state
[   66.406557][ T5871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.463680][ T5871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.520603][ T5871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.588022][ T5871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.668951][ T5871] bond0: left allmulticast mode
[   66.673135][ T5871] bond_slave_0: left allmulticast mode
[   66.676221][ T5871] bond_slave_1: left allmulticast mode
[   66.678791][ T5871] bridge0: port 3(bond0) entered disabled state
[   66.684087][ T5871] bridge_slave_1: left allmulticast mode
[   66.687053][ T5871] bridge_slave_1: left promiscuous mode
[   66.689090][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.693521][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.868431][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.871455][ T5871] bond_slave_0: left promiscuous mode
[   66.874647][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.878606][ T5871] bond_slave_1: left promiscuous mode
[   66.880978][ T5871] bond0 (unregistering): Released all slaves
[   67.122923][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.130385][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.135094][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.149575][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.158642][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.198383][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.202274][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.205063][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.208034][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.210634][ T5222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.457895][ T5871] hsr_slave_0: left promiscuous mode
[   67.460005][ T5871] hsr_slave_1: left promiscuous mode
[   67.462029][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.464433][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.469095][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.471451][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.482774][ T5871] veth1_macvtap: left promiscuous mode
[   67.484653][ T5871] veth0_macvtap: left promiscuous mode
[   67.487438][ T5871] veth1_vlan: left promiscuous mode
[   67.489170][ T5871] veth0_vlan: left promiscuous mode
[   67.642692][ T6619] sctp: [Deprecated]: syz.0.328 (pid 6619) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.642692][ T6619] Use struct sctp_sack_info instead
[   67.707989][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   67.722871][ T5871] team0 (unregistering): Port device C removed
[   67.990841][ T6609] chnl_net:caif_netlink_parms(): no params data found
[   68.001175][ T6607] chnl_net:caif_netlink_parms(): no params data found
[   68.083896][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.086723][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.089062][ T6609] bridge_slave_0: entered allmulticast mode
[   68.091745][ T6609] bridge_slave_0: entered promiscuous mode
[   68.100058][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.102461][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.104829][ T6607] bridge_slave_0: entered allmulticast mode
[   68.107923][ T6607] bridge_slave_0: entered promiscuous mode
[   68.110912][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.113282][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.116432][ T6609] bridge_slave_1: entered allmulticast mode
[   68.119407][ T6609] bridge_slave_1: entered promiscuous mode
[   68.134728][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.137710][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.139994][ T6607] bridge_slave_1: entered allmulticast mode
[   68.142683][ T6607] bridge_slave_1: entered promiscuous mode
[   68.152883][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.165958][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.176602][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.181152][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.206454][ T6609] team0: Port device team_slave_0 added
[   68.210075][ T6607] team0: Port device team_slave_0 added
[   68.213899][ T6609] team0: Port device team_slave_1 added
[   68.217968][ T6607] team0: Port device team_slave_1 added
[   68.239928][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.242378][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.251739][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.267438][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.269617][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.277673][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.284770][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.288411][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.297297][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.301622][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.303926][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.312076][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.328746][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.368816][ T6609] hsr_slave_0: entered promiscuous mode
[   68.371129][ T6609] hsr_slave_1: entered promiscuous mode
[   68.373288][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.377067][ T6609] Cannot create hsr debugfs directory
[   68.381482][ T6607] hsr_slave_0: entered promiscuous mode
[   68.383815][ T6607] hsr_slave_1: entered promiscuous mode
[   68.386420][ T6607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.389040][ T6607] Cannot create hsr debugfs directory
[   68.398702][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.477025][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.526062][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.654454][ T6607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.661789][ T5871] dummy0: left allmulticast mode
[   68.666660][ T5871] bridge0: port 3(dummy0) entered disabled state
[   68.676994][ T5871] bridge_slave_1: left allmulticast mode
[   68.679032][ T5871] bridge_slave_1: left promiscuous mode
[   68.680887][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.684931][ T5871] bridge_slave_0: left allmulticast mode
[   68.687104][ T5871] bridge_slave_0: left promiscuous mode
[   68.689442][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.952180][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.958915][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.964479][ T5871] bond0 (unregistering): Released all slaves
[   68.984003][ T6607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   69.002971][ T6646] netlink: 'syz.0.335': attribute type 29 has an invalid length.
[   69.027793][ T6607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   69.039002][ T6607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   69.094235][ T5871] 
[   69.095084][ T5871] ======================================================
[   69.097377][ T5871] WARNING: possible circular locking dependency detected
[   69.099666][ T5871] 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 Not tainted
[   69.102815][ T5871] ------------------------------------------------------
[   69.105032][ T5871] kworker/u8:4/5871 is trying to acquire lock:
[   69.106959][ T5871] ffff888027288e00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[   69.109882][ T5871] 
[   69.109882][ T5871] but task is already holding lock:
[   69.112205][ T5871] ffff888031b38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   69.115425][ T5871] 
[   69.115425][ T5871] which lock already depends on the new lock.
[   69.115425][ T5871] 
[   69.118681][ T5871] 
[   69.118681][ T5871] the existing dependency chain (in reverse order) is:
[   69.121551][ T5871] 
[   69.121551][ T5871] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[   69.124111][ T5871]        lock_acquire+0x120/0x360
[   69.125773][ T5871]        __mutex_lock+0x182/0xe80
[   69.127426][ T5871]        ieee80211_open+0xed/0x1f0
[   69.129088][ T5871]        __dev_open+0x470/0x880
[   69.130655][ T5871]        netif_open+0xaa/0x170
[   69.132193][ T5871]        dev_open+0x125/0x260
[   69.133701][ T5871]        team_add_slave+0xb36/0x2840
[   69.135361][ T5871]        do_set_master+0x533/0x6d0
[   69.137078][ T5871]        do_setlink+0xcf0/0x41c0
[   69.138753][ T5871]        rtnl_newlink+0x160b/0x1c70
[   69.140496][ T5871]        rtnetlink_rcv_msg+0x7cf/0xb70
[   69.142245][ T5871]        netlink_rcv_skb+0x208/0x470
[   69.143978][ T5871]        netlink_unicast+0x75c/0x8e0
[   69.145667][ T5871]        netlink_sendmsg+0x805/0xb30
[   69.147427][ T5871]        __sock_sendmsg+0x21c/0x270
[   69.149099][ T5871]        ____sys_sendmsg+0x505/0x830
[   69.150807][ T5871]        ___sys_sendmsg+0x21f/0x2a0
[   69.152505][ T5871]        __x64_sys_sendmsg+0x19b/0x260
[   69.154336][ T5871]        do_syscall_64+0xfa/0x3b0
[   69.156021][ T5871]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.158143][ T5871] 
[   69.158143][ T5871] -> #0 (team->team_lock_key){+.+.}-{4:4}:
[   69.160823][ T5871]        validate_chain+0xb9b/0x2140
[   69.162613][ T5871]        __lock_acquire+0xab9/0xd20
[   69.164374][ T5871]        lock_acquire+0x120/0x360
[   69.166036][ T5871]        __mutex_lock+0x182/0xe80
[   69.167743][ T5871]        team_del_slave+0x32/0x1c0
[   69.169471][ T5871]        team_device_event+0x285/0xa20
[   69.171288][ T5871]        notifier_call_chain+0x1b6/0x3e0
[   69.173176][ T5871]        unregister_netdevice_many_notify+0x15d8/0x2320
[   69.175497][ T5871]        unregister_netdevice_queue+0x33c/0x380
[   69.177583][ T5871]        _cfg80211_unregister_wdev+0x165/0x590
[   69.179654][ T5871]        ieee80211_remove_interfaces+0x49a/0x6d0
[   69.181768][ T5871]        ieee80211_unregister_hw+0x5d/0x2c0
[   69.183757][ T5871]        mac80211_hwsim_del_radio+0x275/0x460
[   69.185791][ T5871]        hwsim_exit_net+0x584/0x640
[   69.187533][ T5871]        ops_undo_list+0x49a/0x990
[   69.189253][ T5871]        cleanup_net+0x4c5/0x800
[   69.190943][ T5871]        process_scheduled_works+0xae1/0x17b0
[   69.192987][ T5871]        worker_thread+0x8a0/0xda0
[   69.194715][ T5871]        kthread+0x711/0x8a0
[   69.196270][ T5871]        ret_from_fork+0x3fc/0x770
[   69.198000][ T5871]        ret_from_fork_asm+0x1a/0x30
[   69.199785][ T5871] 
[   69.199785][ T5871] other info that might help us debug this:
[   69.199785][ T5871] 
[   69.203125][ T5871]  Possible unsafe locking scenario:
[   69.203125][ T5871] 
[   69.205611][ T5871]        CPU0                    CPU1
[   69.207408][ T5871]        ----                    ----
[   69.209204][ T5871]   lock(&rdev->wiphy.mtx);
[   69.210770][ T5871]                                lock(team->team_lock_key);
[   69.213198][ T5871]                                lock(&rdev->wiphy.mtx);
[   69.215542][ T5871]   lock(team->team_lock_key);
[   69.217152][ T5871] 
[   69.217152][ T5871]  *** DEADLOCK ***
[   69.217152][ T5871] 
[   69.219847][ T5871] 5 locks held by kworker/u8:4/5871:
[   69.221617][ T5871]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   69.225172][ T5871]  #1: ffffc9000393fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   69.228613][ T5871]  #2: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[   69.231655][ T5871]  #3: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[   69.234842][ T5871]  #4: ffff888031b38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[   69.238358][ T5871] 
[   69.238358][ T5871] stack backtrace:
[   69.240301][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-syzkaller-00411-g95993dc3039e-dirty #0 PREEMPT(full) 
[   69.240329][ T5871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.240336][ T5871] Workqueue: netns cleanup_net
[   69.240348][ T5871] Call Trace:
[   69.240353][ T5871]  <TASK>
[   69.240358][ T5871]  dump_stack_lvl+0x189/0x250
[   69.240371][ T5871]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.240380][ T5871]  ? __pfx__printk+0x10/0x10
[   69.240394][ T5871]  ? print_lock_name+0xde/0x100
[   69.240408][ T5871]  print_circular_bug+0x2ee/0x310
[   69.240423][ T5871]  check_noncircular+0x134/0x160
[   69.240439][ T5871]  validate_chain+0xb9b/0x2140
[   69.240450][ T5871]  ? perf_trace_lock+0xec/0x3b0
[   69.240464][ T5871]  ? perf_trace_lock_acquire+0xf5/0x410
[   69.240482][ T5871]  __lock_acquire+0xab9/0xd20
[   69.240496][ T5871]  ? team_del_slave+0x32/0x1c0
[   69.240502][ T5871]  lock_acquire+0x120/0x360
[   69.240509][ T5871]  ? team_del_slave+0x32/0x1c0
[   69.240521][ T5871]  ? __mutex_trylock_common+0x153/0x260
[   69.240536][ T5871]  __mutex_lock+0x182/0xe80
[   69.240545][ T5871]  ? team_del_slave+0x32/0x1c0
[   69.240553][ T5871]  ? rcu_is_watching+0x15/0xb0
[   69.240562][ T5871]  ? xsk_notifier+0x211/0x230
[   69.240575][ T5871]  ? team_del_slave+0x32/0x1c0
[   69.240585][ T5871]  ? __pfx___mutex_lock+0x10/0x10
[   69.240595][ T5871]  ? bond_netdev_event+0xd9/0xe80
[   69.240606][ T5871]  ? __pfx___mutex_lock+0x10/0x10
[   69.240616][ T5871]  ? __pfx_bond_netdev_event+0x10/0x10
[   69.240632][ T5871]  team_del_slave+0x32/0x1c0
[   69.240643][ T5871]  team_device_event+0x285/0xa20
[   69.240656][ T5871]  notifier_call_chain+0x1b6/0x3e0
[   69.240673][ T5871]  unregister_netdevice_many_notify+0x15d8/0x2320
[   69.240695][ T5871]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   69.240703][ T5871]  ? perf_trace_lock+0xec/0x3b0
[   69.240716][ T5871]  ? __pfx_perf_trace_lock+0x10/0x10
[   69.240732][ T5871]  ? kernfs_remove_by_name_ns+0xee/0x130
[   69.240750][ T5871]  unregister_netdevice_queue+0x33c/0x380
[   69.240762][ T5871]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   69.240780][ T5871]  _cfg80211_unregister_wdev+0x165/0x590
[   69.240792][ T5871]  ieee80211_remove_interfaces+0x49a/0x6d0
[   69.240803][ T5871]  ? __pfx_synchronize_rcu+0x10/0x10
[   69.240815][ T5871]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[   69.240826][ T5871]  ? rcu_is_watching+0x15/0xb0
[   69.240841][ T5871]  ieee80211_unregister_hw+0x5d/0x2c0
[   69.240854][ T5871]  mac80211_hwsim_del_radio+0x275/0x460
[   69.240866][ T5871]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[   69.240883][ T5871]  hwsim_exit_net+0x584/0x640
[   69.240894][ T5871]  ? __pfx_hwsim_exit_net+0x10/0x10
[   69.240904][ T5871]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[   69.240917][ T5871]  ops_undo_list+0x49a/0x990
[   69.240930][ T5871]  ? __pfx_ops_undo_list+0x10/0x10
[   69.240946][ T5871]  cleanup_net+0x4c5/0x800
[   69.240956][ T5871]  ? __pfx_cleanup_net+0x10/0x10
[   69.240966][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.240974][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[   69.240981][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[   69.240991][ T5871]  process_scheduled_works+0xae1/0x17b0
[   69.241023][ T5871]  ? __pfx_process_scheduled_works+0x10/0x10
[   69.241045][ T5871]  worker_thread+0x8a0/0xda0
[   69.241057][ T5871]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.241072][ T5871]  ? __kthread_parkme+0x7b/0x200
[   69.241089][ T5871]  kthread+0x711/0x8a0
[   69.241102][ T5871]  ? __pfx_worker_thread+0x10/0x10
[   69.241111][ T5871]  ? __pfx_kthread+0x10/0x10
[   69.241123][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[   69.241131][ T5871]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.241139][ T5871]  ? __pfx_kthread+0x10/0x10
[   69.241151][ T5871]  ret_from_fork+0x3fc/0x770
[   69.241162][ T5871]  ? __pfx_ret_from_fork+0x10/0x10
[   69.241175][ T5871]  ? __switch_to_asm+0x39/0x70
[   69.241184][ T5871]  ? __switch_to_asm+0x33/0x70
[   69.241191][ T5871]  ? __pfx_kthread+0x10/0x10
[   69.241202][ T5871]  ret_from_fork_asm+0x1a/0x30
[   69.241225][ T5871]  </TASK>
[   69.370069][ T5222] Bluetooth: hci1: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   69.372626][ T5222] Bluetooth: hci0: command tx timeout
[   69.486865][ T5871] team0: Port device wlan1 removed
[   69.490793][ T6609] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.496496][ T6656] mac80211_hwsim hwsim7 O3c: renamed from wlan1 (while UP)
[   69.599800][ T5871] hsr_slave_0: left promiscuous mode
[   69.601840][ T5871] hsr_slave_1: left promiscuous mode
[   69.603778][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.606598][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.609249][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.611623][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.617599][ T5871] veth1_macvtap: left promiscuous mode
[   69.619391][ T5871] veth0_macvtap: left promiscuous mode
[   69.621163][ T5871] veth1_vlan: left promiscuous mode
[   69.624047][ T5871] veth0_vlan: left promiscuous mode
[   69.724421][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   69.734598][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   70.129374][ T5871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.187901][ T5871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.227931][ T5871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.278210][ T5871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.735026][ T5871] bridge_slave_1: left allmulticast mode
[   70.738125][ T5871] bridge_slave_1: left promiscuous mode
[   70.740543][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.744567][ T5871] bridge_slave_0: left allmulticast mode
[   70.747184][ T5871] bridge_slave_0: left promiscuous mode
[   70.749644][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.754159][ T5871] bridge_slave_1: left allmulticast mode
[   70.757275][ T5871] bridge_slave_1: left promiscuous mode
[   70.759424][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.762615][ T5871] bridge_slave_0: left allmulticast mode
[   70.764693][ T5871] bridge_slave_0: left promiscuous mode
[   70.767412][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.770459][ T5871] bridge_slave_1: left allmulticast mode
[   70.772218][ T5871] bridge_slave_1: left promiscuous mode
[   70.774019][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.777022][ T5871] bridge_slave_0: left allmulticast mode
[   70.778782][ T5871] bridge_slave_0: left promiscuous mode
[   70.780564][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.827155][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.829162][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.859816][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.863677][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.868802][ T5871] bond0 (unregistering): Released all slaves
[   70.925163][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.929615][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.933834][ T5871] bond0 (unregistering): Released all slaves
[   70.972552][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.977611][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.981894][ T5871] bond0 (unregistering): Released all slaves
[   71.092053][ T5871] team0: Port device O3c removed
[   71.212540][ T5871] hsr_slave_0: left promiscuous mode
[   71.215010][ T5871] hsr_slave_1: left promiscuous mode
[   71.217347][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.220339][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.223720][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.226593][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.230557][ T5871] hsr_slave_0: left promiscuous mode
[   71.232574][ T5871] hsr_slave_1: left promiscuous mode
[   71.234537][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.237327][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.241203][ T5871] hsr_slave_0: left promiscuous mode
[   71.243210][ T5871] hsr_slave_1: left promiscuous mode
[   71.245151][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.248778][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.254261][ T5871] veth1_macvtap: left promiscuous mode
[   71.256846][ T5871] veth0_macvtap: left promiscuous mode
[   71.258940][ T5871] veth1_vlan: left promiscuous mode
[   71.261068][ T5871] veth0_vlan: left promiscuous mode
[   71.352725][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   71.362651][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   71.459092][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   71.467783][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   71.550858][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   71.559050][ T5871] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
20:03:01  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000393e750
R8 =ffff888020f30237 R9 =1ffff110041e6046 R10=dffffc0000000000 R11=ffffffff85472b60
R12=dffffc0000000000 R13=ffffffff99af58a5 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff85472bdc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30b17ff8 CR3=000000010d56a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81c452a5 ffffffff81c452a5
XMM02=ffffffff81c452a5 ffffffff81c452a5 XMM03=ffffffff81c452a5 ffffffff8186d96a
XMM04=00007f2f068ed100 00007f2f05d86440 XMM05=00007f2f05d86458 00007f2f05d864a0
XMM06=00007f2f05d86498 00007f2f05d86490 XMM07=00007f2f05d86488 00007f2f05d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2f05c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8b96c660 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8e2469a0 RDI=ffffffff8b96c660 RBP=ffffc9000311ea38 RSP=ffffc9000311e918
R8 =0000000000000000 R9 =0000000000000001 R10=ffffc9000311ebc0 R11=fffff52000623d7d
R12=1ffff92000623d30 R13=ffffffff8e2469a0 R14=dffffc0000000000 R15=ffffffffffffffff
RIP=ffffffff8b6a84ce RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d140e35c0 CR3=000000010cf66000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
