last executing test programs:

1.868959503s ago: executing program 2 (id=1327):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
write$cgroup_freezer_state(r1, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a}, 0x28)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x7606, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0}, 0x28)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10000, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)
recvmsg$kcm(r4, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x20)

1.201836449s ago: executing program 2 (id=1328):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7)

1.129180695s ago: executing program 2 (id=1329):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f0000000200), 0x8)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x9b, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0xc, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014", 0x5}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r6, 0x0, 0x27)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)

314.686249ms ago: executing program 2 (id=1339):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

247.849566ms ago: executing program 1 (id=1340):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0x7fffffffffffffff, 0x12)

246.901749ms ago: executing program 2 (id=1342):
socket$kcm(0x2c, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$kcm(0x25, 0x1, 0x0)
sendmsg(r2, 0x0, 0x4)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f00000000c0)={'veth1_to_bond\x00'})
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4048001)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(r0, 0x0, 0x40012142)

246.713552ms ago: executing program 1 (id=1343):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48)
socket$kcm(0x2, 0x200000000000001, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0)

184.277885ms ago: executing program 1 (id=1344):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

183.713545ms ago: executing program 1 (id=1346):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x10}, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)

170.376929ms ago: executing program 2 (id=1347):
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x80000000, 0x7a}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x20ae8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x2000, 0x7d, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r0, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10)
sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x480c0)
perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x3, 0x73)

147.805679ms ago: executing program 0 (id=1348):
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48)

144.493835ms ago: executing program 1 (id=1349):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44, 0x0, 0x0, 0x2000000}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xb1, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d1345", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_int(r3, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0)

59.735636ms ago: executing program 0 (id=1350):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8)

59.482747ms ago: executing program 0 (id=1351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0xff05, 0x0)

53.936736ms ago: executing program 1 (id=1352):
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0xfffffffe, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afbc9"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

412.988µs ago: executing program 0 (id=1353):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020596c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

194.067µs ago: executing program 0 (id=1354):
socketpair(0x28, 0x5, 0x28, &(0x7f00000002c0))

0s ago: executing program 0 (id=1355):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xe, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37962' (ED25519) to the list of known hosts.
syzkaller login: [   40.445147][ T5754] cgroup: Unknown subsys name 'net'
[   40.527678][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.531656][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.801218][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   50.151410][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   50.407072][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   50.460922][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.463883][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.466306][ T5838] bridge_slave_0: entered allmulticast mode
[   50.469060][ T5838] bridge_slave_0: entered promiscuous mode
[   50.473089][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.475608][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.478005][ T5838] bridge_slave_1: entered allmulticast mode
[   50.480701][ T5838] bridge_slave_1: entered promiscuous mode
[   50.499500][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.504934][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.523691][ T5838] team0: Port device team_slave_0 added
[   50.527376][ T5838] team0: Port device team_slave_1 added
[   50.546618][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.548963][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.557772][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.562817][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.565236][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.573535][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.600382][ T5838] hsr_slave_0: entered promiscuous mode
[   50.602806][ T5838] hsr_slave_1: entered promiscuous mode
[   50.697114][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.703423][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.708879][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.714619][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.732949][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.735440][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.738230][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.740586][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.771176][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.782018][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.786536][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.794837][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   50.801545][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.804030][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.810375][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.812822][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.908825][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.931909][ T5838] veth0_vlan: entered promiscuous mode
[   50.940508][ T5838] veth1_vlan: entered promiscuous mode
[   50.956140][ T5838] veth0_macvtap: entered promiscuous mode
[   50.959949][ T5838] veth1_macvtap: entered promiscuous mode
[   50.969187][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.976144][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.980487][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.983255][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.986009][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.988578][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.255039][ T5849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.388478][ T5849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.457272][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.461166][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.468840][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.472981][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.489332][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.490691][ T5849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.497615][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.500033][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.506458][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.515566][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.518372][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.544006][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.546990][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.550554][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.556778][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.564029][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.580857][ T5849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.767235][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   51.801524][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   51.860449][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   51.881501][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.884044][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.886361][ T5869] bridge_slave_0: entered allmulticast mode
[   51.889098][ T5869] bridge_slave_0: entered promiscuous mode
[   51.910249][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.912567][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.915258][ T5869] bridge_slave_1: entered allmulticast mode
[   51.917963][ T5869] bridge_slave_1: entered promiscuous mode
[   51.958707][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.961119][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.963610][ T5873] bridge_slave_0: entered allmulticast mode
[   51.966301][ T5873] bridge_slave_0: entered promiscuous mode
[   51.982573][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.986226][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.988478][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.990857][ T5873] bridge_slave_1: entered allmulticast mode
[   51.994682][ T5873] bridge_slave_1: entered promiscuous mode
[   52.008900][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.031145][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.042086][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.044864][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.047257][ T5866] bridge_slave_0: entered allmulticast mode
[   52.050122][ T5866] bridge_slave_0: entered promiscuous mode
[   52.066734][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.076901][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.079180][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.081443][ T5866] bridge_slave_1: entered allmulticast mode
[   52.085299][ T5866] bridge_slave_1: entered promiscuous mode
[   52.108437][ T5869] team0: Port device team_slave_0 added
[   52.114964][ T5869] team0: Port device team_slave_1 added
[   52.141450][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.160345][ T5873] team0: Port device team_slave_0 added
[   52.165460][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.176948][ T5873] team0: Port device team_slave_1 added
[   52.179242][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.181499][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.189747][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.216723][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.218982][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.227915][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.232314][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.235596][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.244222][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.260227][ T5866] team0: Port device team_slave_0 added
[   52.264249][ T5866] team0: Port device team_slave_1 added
[   52.266499][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.268691][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.276861][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.310836][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.313094][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.322109][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.327161][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.329432][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.338055][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.363024][ T5869] hsr_slave_0: entered promiscuous mode
[   52.366309][ T5869] hsr_slave_1: entered promiscuous mode
[   52.368496][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.371039][ T5869] Cannot create hsr debugfs directory
[   52.384370][ T5873] hsr_slave_0: entered promiscuous mode
[   52.386610][ T5873] hsr_slave_1: entered promiscuous mode
[   52.388656][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.391018][ T5873] Cannot create hsr debugfs directory
[   52.447419][ T5866] hsr_slave_0: entered promiscuous mode
[   52.449790][ T5866] hsr_slave_1: entered promiscuous mode
[   52.451901][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.455071][ T5866] Cannot create hsr debugfs directory
[   53.584097][ T5867] Bluetooth: hci0: command tx timeout
[   53.584120][   T53] Bluetooth: hci2: command tx timeout
[   53.586490][   T53] Bluetooth: hci1: command tx timeout
[   54.541147][ T5849] bridge_slave_1: left allmulticast mode
[   54.543916][ T5849] bridge_slave_1: left promiscuous mode
[   54.546752][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.554131][ T5849] bridge_slave_0: left allmulticast mode
[   54.556449][ T5849] bridge_slave_0: left promiscuous mode
[   54.559049][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.742359][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.749594][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.753512][ T5849] bond0 (unregistering): Released all slaves
[   54.842099][ T5849] hsr_slave_0: left promiscuous mode
[   54.844731][ T5849] hsr_slave_1: left promiscuous mode
[   54.847535][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.850058][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.853287][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.856038][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.866627][ T5849] veth1_macvtap: left promiscuous mode
[   54.868639][ T5849] veth0_macvtap: left promiscuous mode
[   54.870900][ T5849] veth1_vlan: left promiscuous mode
[   54.872738][ T5849] veth0_vlan: left promiscuous mode
[   55.092591][ T5849] team0 (unregistering): Port device team_slave_1 removed
[   55.113407][ T5849] team0 (unregistering): Port device team_slave_0 removed
[   55.546913][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.561640][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.568182][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.576858][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.627495][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.634786][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.639274][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.646652][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.663575][   T53] Bluetooth: hci0: command tx timeout
[   55.665282][ T5872] Bluetooth: hci2: command tx timeout
[   55.665385][   T53] Bluetooth: hci1: command tx timeout
[   55.705750][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.732017][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.742594][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.752718][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.836322][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.871546][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   55.890398][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.893903][  T349] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.896317][  T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.920382][  T349] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.922882][  T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.931973][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   55.945602][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.947993][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.956168][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.958566][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.991661][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.036451][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   56.056972][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.059401][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.066880][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.069286][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.112801][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.141251][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.161531][ T5869] veth0_vlan: entered promiscuous mode
[   56.182891][ T5869] veth1_vlan: entered promiscuous mode
[   56.208559][ T5873] veth0_vlan: entered promiscuous mode
[   56.219931][ T5869] veth0_macvtap: entered promiscuous mode
[   56.225469][ T5873] veth1_vlan: entered promiscuous mode
[   56.231217][ T5869] veth1_macvtap: entered promiscuous mode
[   56.241203][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.246199][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.257368][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.266253][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.269216][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.272180][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.276225][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.282007][ T5873] veth0_macvtap: entered promiscuous mode
[   56.292587][ T5873] veth1_macvtap: entered promiscuous mode
[   56.314604][ T5866] veth0_vlan: entered promiscuous mode
[   56.327354][ T5866] veth1_vlan: entered promiscuous mode
[   56.337418][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.356853][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.361627][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.366948][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.369861][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.372758][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.375956][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.376523][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.392231][ T5866] veth0_macvtap: entered promiscuous mode
[   56.402797][ T5866] veth1_macvtap: entered promiscuous mode
[   56.415637][  T349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.418677][  T349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.420910][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.435480][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.450105][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.452946][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.457914][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.460798][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.507062][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.509539][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.543112][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.546852][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.576174][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.581087][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.658414][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.673841][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.799367][ T5969] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.090049][ T5984] netlink: 'syz.1.18': attribute type 3 has an invalid length.
[   57.092798][ T5984] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   57.411701][ T5999] netlink: 'syz.1.24': attribute type 29 has an invalid length.
[   57.417536][ T5999] netlink: 'syz.1.24': attribute type 29 has an invalid length.
[   57.422160][ T5999] netlink: 'syz.1.24': attribute type 29 has an invalid length.
[   57.436840][ T5999] netlink: 'syz.1.24': attribute type 29 has an invalid length.
[   57.475258][ T6001] Zero length message leads to an empty skb
[   57.744203][   T53] Bluetooth: hci2: command tx timeout
[   57.744221][ T5867] Bluetooth: hci0: command tx timeout
[   57.747377][   T53] Bluetooth: hci1: command tx timeout
[   57.849888][ T6021] netlink: 'syz.2.35': attribute type 33 has an invalid length.
[   57.852514][ T6021] netlink: 'syz.2.35': attribute type 13 has an invalid length.
[   57.857238][ T6021] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35'.
[   59.220900][   T53] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   59.249579][ T6073] mac80211_hwsim hwsim7 O3c: renamed from wlan1
[   59.579362][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.601297][ T6099] Driver unsupported XDP return value 0 on prog  (id 34) dev N/A, expect packet loss!
[   59.747352][ T6106] netlink: 'syz.0.72': attribute type 39 has an invalid length.
[   59.782688][ T6111] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.75'.
[   59.791097][    C0] hrtimer: interrupt took 63279 ns
[   59.823661][   T53] Bluetooth: hci1: command tx timeout
[   59.825555][   T53] Bluetooth: hci2: command tx timeout
[   59.838771][   T53] Bluetooth: hci0: command tx timeout
[   59.924408][ T6117] netlink: 'syz.0.77': attribute type 10 has an invalid length.
[   59.932448][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[   59.941910][ T6117] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.000008][ T6120] syz.2.78: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.007706][ T6115] team0: Port device geneve1 added
[   60.012383][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.2.78 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[   60.012402][ T6120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.012410][ T6120] Call Trace:
[   60.012418][ T6120]  <TASK>
[   60.012427][ T6120]  dump_stack_lvl+0x189/0x250
[   60.012465][ T6120]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.012487][ T6120]  ? __pfx__printk+0x10/0x10
[   60.012513][ T6120]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.012533][ T6120]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.012561][ T6120]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.012593][ T6120]  warn_alloc+0x214/0x310
[   60.012614][ T6120]  ? stack_depot_save_flags+0x429/0x900
[   60.012651][ T6120]  ? __pfx_warn_alloc+0x10/0x10
[   60.012681][ T6120]  ? kasan_save_track+0x4f/0x80
[   60.012706][ T6120]  ? xskq_create+0x56/0x170
[   60.012721][ T6120]  ? xsk_init_queue+0xb0/0x110
[   60.012733][ T6120]  ? xsk_setsockopt+0x4de/0x710
[   60.012745][ T6120]  ? do_sock_setsockopt+0x17c/0x1b0
[   60.012758][ T6120]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   60.012770][ T6120]  ? do_syscall_64+0xfa/0x3b0
[   60.012815][ T6120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.012859][ T6120]  __vmalloc_node_range_noprof+0x125/0x12f0
[   60.012983][ T6120]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.013025][ T6120]  ? __kasan_kmalloc+0x93/0xb0
[   60.013056][ T6120]  vmalloc_user_noprof+0xad/0xf0
[   60.013077][ T6120]  ? xskq_create+0xbf/0x170
[   60.013103][ T6120]  xskq_create+0xbf/0x170
[   60.013135][ T6120]  xsk_init_queue+0xb0/0x110
[   60.013194][ T6120]  xsk_setsockopt+0x4de/0x710
[   60.013227][ T6120]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.013259][ T6120]  ? __fget_files+0x2a/0x420
[   60.013278][ T6120]  ? aa_sock_opt_perm+0x74/0x110
[   60.013308][ T6120]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.013325][ T6120]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.013351][ T6120]  do_sock_setsockopt+0x17c/0x1b0
[   60.013387][ T6120]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.013425][ T6120]  do_syscall_64+0xfa/0x3b0
[   60.013441][ T6120]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.013459][ T6120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.013473][ T6120]  ? exc_page_fault+0x9f/0xf0
[   60.013502][ T6120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.013514][ T6120] RIP: 0033:0x7f39e4d8eb69
[   60.013531][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.013542][ T6120] RSP: 002b:00007f39e5b68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.013556][ T6120] RAX: ffffffffffffffda RBX: 00007f39e4fb6080 RCX: 00007f39e4d8eb69
[   60.013565][ T6120] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008
[   60.013573][ T6120] RBP: 00007f39e4e11df1 R08: 0000000000000004 R09: 0000000000000000
[   60.013580][ T6120] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   60.013588][ T6120] R13: 0000000000000000 R14: 00007f39e4fb6080 R15: 00007ffcacd0f278
[   60.013654][ T6120]  </TASK>
[   60.146427][ T6120] Mem-Info:
[   60.147863][ T6120] active_anon:5269 inactive_anon:0 isolated_anon:0
[   60.147863][ T6120]  active_file:857 inactive_file:38213 isolated_file:0
[   60.147863][ T6120]  unevictable:1768 dirty:1416 writeback:0
[   60.147863][ T6120]  slab_reclaimable:9147 slab_unreclaimable:52701
[   60.147863][ T6120]  mapped:18061 shmem:2488 pagetables:982
[   60.147863][ T6120]  sec_pagetables:0 bounce:0
[   60.147863][ T6120]  kernel_misc_reclaimable:0
[   60.147863][ T6120]  free:301802 free_pcp:19143 free_cma:0
[   60.162237][ T6120] Node 0 active_anon:11932kB inactive_anon:0kB active_file:2660kB inactive_file:25252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29560kB dirty:5432kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6880kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.178533][ T6120] Node 1 active_anon:9144kB inactive_anon:0kB active_file:768kB inactive_file:127600kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42684kB dirty:232kB writeback:0kB shmem:5216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4612kB pagetables:1808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.190197][ T6120] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.208562][ T6120] lowmem_reserve[]: 0 812 812 812 812
[   60.210643][ T6120] Node 0 DMA32 free:437656kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11908kB inactive_anon:0kB active_file:2660kB inactive_file:25252kB unevictable:3536kB writepending:5432kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:25932kB local_pcp:8444kB free_cma:0kB
[   60.222939][ T6120] lowmem_reserve[]: 0 0 0 0 0
[   60.244198][ T6120] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   60.258098][ T6120] lowmem_reserve[]: 0 0 854 854 854
[   60.260043][ T6120] Node 1 Normal free:295304kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9132kB inactive_anon:0kB active_file:768kB inactive_file:127600kB unevictable:3536kB writepending:232kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:50820kB local_pcp:22700kB free_cma:0kB
[   60.271083][ T6120] lowmem_reserve[]: 0 0 0 0 0
[   60.272829][ T6120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.282204][ T6120] Node 0 DMA32: 1*4kB (E) 104*8kB (UM) 58*16kB (UE) 146*32kB (UE) 29*64kB (UE) 6*128kB (UE) 6*256kB (UM) 6*512kB (UME) 6*1024kB (UME) 2*2048kB (UM) 101*4096kB (M) = 437604kB
[   60.289520][ T6120] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   60.310642][ T6120] Node 1 Normal: 26*4kB (ME) 382*8kB (UM) 159*16kB (UM) 13*32kB (UM) 10*64kB (UM) 12*128kB (ME) 11*256kB (UM) 13*512kB (UME) 7*1024kB (UM) 6*2048kB (UM) 63*4096kB (M) = 295272kB
[   60.317221][ T6120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.327605][ T6120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.330656][ T6120] 41525 total pagecache pages
[   60.332214][ T6120] 0 pages in swap cache
[   60.353402][ T6120] Free swap  = 124996kB
[   60.354868][ T6120] Total swap = 124996kB
[   60.356284][ T6120] 786301 pages RAM
[   60.357560][ T6120] 0 pages HighMem/MovableOnly
[   60.359160][ T6120] 241075 pages reserved
[   60.360571][ T6120] 0 pages cma reserved
[   60.406322][ T6115] syz.2.78 (6115) used greatest stack depth: 19048 bytes left
[   60.559704][ T6137] team0: Port device team_slave_0 removed
[   60.562120][ T6137] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   60.602044][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   60.622343][ T6152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.92'.
[   60.670098][ T6157] netlink: 22 bytes leftover after parsing attributes in process `syz.0.88'.
[   60.827611][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.101'.
[   61.277143][ T6188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.836669][ T6232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'.
[   63.840393][ T6232] caif0: entered promiscuous mode
[   63.842065][ T6232] caif0: entered allmulticast mode
[   64.269700][ T6266] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.141'.
[   64.344161][ T6271] validate_nla: 3 callbacks suppressed
[   64.344221][ T6271] netlink: 'syz.2.143': attribute type 21 has an invalid length.
[   64.351589][ T6271] netlink: 156 bytes leftover after parsing attributes in process `syz.2.143'.
[   65.048241][ T6280] netlink: 'syz.0.148': attribute type 33 has an invalid length.
[   66.709697][ T6288] C: renamed from team_slave_0 (while UP)
[   66.713071][ T6288] netlink: 'syz.2.152': attribute type 8 has an invalid length.
[   66.716476][ T6288] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   66.846802][ T6319] netlink: 'syz.2.167': attribute type 19 has an invalid length.
[   66.849415][ T6319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.167'.
[   67.510352][ T6335] netlink: 180 bytes leftover after parsing attributes in process `syz.1.173'.
[   67.745781][ T6352] veth0_vlan: entered allmulticast mode
[   67.868660][ T6352] veth0_vlan: left promiscuous mode
[   67.888567][ T6352] veth0_vlan: entered promiscuous mode
[   68.908605][ T6376] netlink: 'syz.0.191': attribute type 10 has an invalid length.
[   68.911297][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.919652][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.926005][ T6376] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   69.178663][ T6393] netlink: 830 bytes leftover after parsing attributes in process `syz.1.200'.
[   72.052671][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   72.055431][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   72.196433][ T6416] netlink: 'syz.0.209': attribute type 25 has an invalid length.
[   72.542383][ T6443] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   72.586355][ T6447] netlink: 14 bytes leftover after parsing attributes in process `syz.0.223'.
[   72.755460][ T6462] ksmbd: Unknown IPC event: 1, ignore.
[   73.030563][ T6479] netlink: 'syz.1.238': attribute type 2 has an invalid length.
[   73.452915][ T5867] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28
[   73.456166][ T5867] Bluetooth: hci0: Unable to find connection with handle 0x0000
[   74.456578][ T6539] netlink: 17 bytes leftover after parsing attributes in process `syz.2.267'.
[   74.459651][ T6539] netlink: zone id is out of range
[   74.461376][ T6539] netlink: zone id is out of range
[   74.463123][ T6539] netlink: zone id is out of range
[   74.532056][ T6543] netlink: 'syz.0.269': attribute type 16 has an invalid length.
[   74.569348][ T6543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.269'.
[   74.639227][   T36] wlan1: Trigger new scan to find an IBSS to join
[   74.752772][ T6539] netlink: zone id is out of range
[   74.756356][ T6539] netlink: zone id is out of range
[   74.758091][ T6539] netlink: zone id is out of range
[   74.759818][ T6539] netlink: zone id is out of range
[   74.761532][ T6539] netlink: zone id is out of range
[   74.764165][ T6539] netlink: zone id is out of range
[   74.765866][ T6539] netlink: zone id is out of range
[   75.301011][ T6550] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.272'.
[   75.352827][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.356247][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.363091][ T6554] bridge0: entered allmulticast mode
[   75.368449][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.371135][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.373827][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.376239][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.380583][ T6554] bridge0: entered promiscuous mode
[   75.442205][ T6562] netlink: 'syz.0.277': attribute type 10 has an invalid length.
[   75.448254][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.451384][ T6562] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   75.484779][ T6562] bond0: entered promiscuous mode
[   75.486587][ T6562] bond_slave_0: entered promiscuous mode
[   75.488695][ T6562] bond_slave_1: entered promiscuous mode
[   75.490697][ T6562] team0: entered promiscuous mode
[   75.492390][ T6562] team_slave_0: entered promiscuous mode
[   75.496220][ T6562] team_slave_1: entered promiscuous mode
[   75.498350][ T6562] batadv_slave_0: entered promiscuous mode
[   75.500395][ T6562] batadv0: entered promiscuous mode
[   75.506275][ T6562] netlink: 'syz.0.277': attribute type 10 has an invalid length.
[   75.508923][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.277'.
[   75.515080][ T6562] batadv0: entered allmulticast mode
[   75.518019][ T6562] bond0: (slave batadv0): Releasing backup interface
[   75.521569][ T6562] bridge0: port 3(batadv0) entered blocking state
[   75.524231][ T6562] bridge0: port 3(batadv0) entered disabled state
[   75.635553][ T6579] netlink: 'syz.1.285': attribute type 2 has an invalid length.
[   75.638555][ T6579] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[   75.641243][ T6579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.285'.
[   75.906956][ T6594] netlink: 156 bytes leftover after parsing attributes in process `syz.1.290'.
[   75.966800][ T5895] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   75.970121][ T5895] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   76.225181][ T6614] netlink: 'syz.0.299': attribute type 27 has an invalid length.
[   76.227851][ T6614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.299'.
[   76.552792][ T6627] netlink: 'syz.1.305': attribute type 13 has an invalid length.
[   76.555810][ T6627] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.305'.
[   76.707843][ T6638] netlink: 'syz.0.310': attribute type 10 has an invalid length.
[   76.762149][ T6638] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   76.777948][ T6638] team0: Port device wlan1 added
[   76.974942][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.315'.
[   76.978538][ T6648] team0: entered promiscuous mode
[   76.980670][ T6648] C: entered promiscuous mode
[   76.986211][ T6648] team_slave_1: entered promiscuous mode
[   76.989070][ T6648] geneve1: entered promiscuous mode
[   76.991700][ T6648] team0: entered allmulticast mode
[   76.996881][ T6648] C: entered allmulticast mode
[   76.998630][ T6648] team_slave_1: entered allmulticast mode
[   77.000561][ T6648] geneve1: entered allmulticast mode
[   77.006219][ T6648] bridge0: port 3(team0) entered blocking state
[   77.009050][ T6648] bridge0: port 3(team0) entered disabled state
[   77.023040][ T6648] bridge0: port 3(team0) entered blocking state
[   77.026018][ T6648] bridge0: port 3(team0) entered forwarding state
[   77.168839][ T6662] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.171703][ T6662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.174520][ T6662] IPv6: NLM_F_CREATE should be set when creating new route
[   77.176926][ T6662] IPv6: NLM_F_CREATE should be set when creating new route
[   77.179315][ T6662] IPv6: NLM_F_CREATE should be set when creating new route
[   77.193456][ T6664] netlink: 144 bytes leftover after parsing attributes in process `syz.2.323'.
[   78.125989][ T6705] validate_nla: 6 callbacks suppressed
[   78.128258][ T6705] netlink: 'syz.0.342': attribute type 1 has an invalid length.
[   79.439412][ T6771] netlink: 'syz.0.373': attribute type 21 has an invalid length.
[   79.466004][ T5867] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[   79.849253][ T6781] __nla_validate_parse: 5 callbacks suppressed
[   79.849274][ T6781] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.377'.
[   79.866134][ T6781] tc_dump_action: action bad kind
[   79.891711][ T6785] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[   79.895898][ T6785] bridge0: port 3(team0) entered disabled state
[   79.898736][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.902438][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.934145][ T6785] bridge0: port 3(team0) entered blocking state
[   79.936642][ T6785] bridge0: port 3(team0) entered forwarding state
[   79.939929][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.942497][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.945754][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.948397][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.961405][ T6785] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   80.032754][ T6791] netlink: 22 bytes leftover after parsing attributes in process `syz.2.381'.
[   80.371477][ T6811] netlink: 'syz.2.389': attribute type 7 has an invalid length.
[   80.429086][ T6815] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   80.489160][ T6822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[   80.492421][ T6819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[   80.500672][ T6822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'.
[   80.580468][ T5867] Bluetooth: hci1: Malformed LE Event: 0x1d
[   80.610480][ T6833] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.399'.
[   80.711408][ T2970] wlan1: Trigger new scan to find an IBSS to join
[   80.894848][ T6855] netlink: 'syz.0.409': attribute type 1 has an invalid length.
[   80.897799][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'.
[   80.902097][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'.
[   81.003944][ T6870] netlink: 14 bytes leftover after parsing attributes in process `syz.0.416'.
[   81.210755][ T6891] can: request_module (can-proto-5) failed.
[   81.281058][ T6902] netlink: 'syz.1.429': attribute type 41 has an invalid length.
[   81.287695][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'.
[   81.437444][  T790] cfg80211: failed to load regulatory.db
[   82.888571][ T6947] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   82.891072][ T6947] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   82.899108][ T6943] netlink: 'syz.1.445': attribute type 39 has an invalid length.
[   82.928479][ T6951] netlink: 'syz.2.449': attribute type 21 has an invalid length.
[   83.002048][ T6958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   83.006431][ T6958] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   83.050227][ T6961] netlink: 'syz.2.452': attribute type 21 has an invalid length.
[   83.105882][ T6961] netlink: 'syz.2.452': attribute type 5 has an invalid length.
[   83.664536][ T1086] wlan1: Trigger new scan to find an IBSS to join
[   84.468655][ T7007] netlink: 'syz.0.475': attribute type 39 has an invalid length.
[   84.475771][ T7007] veth0_macvtap: left promiscuous mode
[   84.718976][   T59] wlan1: Creating new IBSS network, BSSID b6:05:7d:41:53:78
[   85.034329][ T7062] delete_channel: no stack
[   85.040863][ T7062] delete_channel: no stack
[   85.046155][ T7064] sock: sock_timestamping_bind_phc: sock not bind to device
[   85.425125][ T7084] netlink: 'syz.1.511': attribute type 10 has an invalid length.
[   85.432401][ T7084] team0: Port device macvlan0 added
[   85.459550][ T7086] netlink: 'syz.1.512': attribute type 29 has an invalid length.
[   85.462716][ T7086] netlink: 'syz.1.512': attribute type 29 has an invalid length.
[   85.951629][ T7095] __nla_validate_parse: 4 callbacks suppressed
[   85.951689][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[   86.507906][ T7106] syz.0.521 uses obsolete (PF_INET,SOCK_PACKET)
[   86.729452][ T7113] bridge0: port 3(bond0) entered blocking state
[   86.732725][ T7113] bridge0: port 3(bond0) entered disabled state
[   86.738195][ T7113] bond0: entered allmulticast mode
[   86.740267][ T7113] bond_slave_0: entered allmulticast mode
[   86.742375][ T7113] bond_slave_1: entered allmulticast mode
[   86.758247][ T7113] bond0: entered promiscuous mode
[   86.760282][ T7113] bond_slave_0: entered promiscuous mode
[   86.762748][ T7113] bond_slave_1: entered promiscuous mode
[   86.772519][ T7113] bridge0: port 3(bond0) entered blocking state
[   86.775829][ T7113] bridge0: port 3(bond0) entered forwarding state
[   86.894846][ T5867] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[   86.976783][ T7125] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   86.979190][ T7125] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   91.770332][ T7205] syzkaller0: entered promiscuous mode
[   91.773285][ T7205] syzkaller0: entered allmulticast mode
[   92.605257][ T7230] netdevsim netdevsim0 +: renamed from netdevsim0 (while UP)
[   92.830876][ T7247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'.
[   92.837119][ T7242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'.
[   92.845564][ T7242] netlink: 44 bytes leftover after parsing attributes in process `syz.2.572'.
[   93.601816][ T7295] netlink: 'syz.0.597': attribute type 39 has an invalid length.
[   94.266667][ T7305] netlink: 'syz.1.602': attribute type 25 has an invalid length.
[   94.483109][ T7316] netlink: 'syz.1.607': attribute type 29 has an invalid length.
[   94.486779][ T7316] netlink: 'syz.1.607': attribute type 29 has an invalid length.
[   94.490335][ T7316] netlink: 'syz.1.607': attribute type 29 has an invalid length.
[   94.500589][ T7316] netlink: 'syz.1.607': attribute type 29 has an invalid length.
[   94.569173][ T7320] netlink: 'syz.2.610': attribute type 9 has an invalid length.
[   94.797831][ T7339] netlink: 'syz.1.617': attribute type 15 has an invalid length.
[   95.233609][ T7350] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.622'.
[   95.336422][ T7359] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   95.339789][ T7359] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   95.560482][ T7377] syzkaller0: entered promiscuous mode
[   95.562686][ T7377] syzkaller0: entered allmulticast mode
[   95.695357][ T7385] syzkaller0: entered promiscuous mode
[   95.697216][ T7385] syzkaller0: entered allmulticast mode
[   96.860853][ T7425] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.653'.
[   96.864384][ T7424] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.653'.
[   96.867636][ T7425] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.653'.
[   97.086884][ T7436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.658'.
[   98.014303][ T7474] netlink: 'syz.1.674': attribute type 2 has an invalid length.
[   98.017561][ T7474] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[   98.020785][ T7474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.674'.
[   98.102239][ T7480] netlink: 152 bytes leftover after parsing attributes in process `syz.2.676'.
[   98.137060][ T7483] netlink: 164 bytes leftover after parsing attributes in process `syz.2.678'.
[   98.189731][ T7486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.680'.
[   98.382226][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[   99.636831][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.640678][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.650259][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.662287][ T7563] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.734686][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'.
[  100.271702][   T53] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  100.645254][ T7587] validate_nla: 2 callbacks suppressed
[  100.645269][ T7587] netlink: 'syz.1.724': attribute type 33 has an invalid length.
[  100.651697][ T7587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.724'.
[  102.045092][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.729'.
[  102.251265][ T7623] netlink: 'syz.2.741': attribute type 21 has an invalid length.
[  102.255003][ T7623] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  102.257596][ T7623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.741'.
[  102.315608][   T53] Bluetooth: hci2: command tx timeout
[  102.486542][   T53] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  102.864401][ T7657] syzkaller0: entered promiscuous mode
[  102.866338][ T7657] syzkaller0: entered allmulticast mode
[  103.538643][ T7659] netlink: 'syz.0.757': attribute type 29 has an invalid length.
[  103.958240][ T7683] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.768'.
[  104.092050][ T7696] netlink: 'syz.2.774': attribute type 29 has an invalid length.
[  104.100787][ T7696] netlink: 'syz.2.774': attribute type 29 has an invalid length.
[  104.356677][ T7716] netlink: 180 bytes leftover after parsing attributes in process `syz.2.784'.
[  104.365701][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.784'.
[  104.374300][ T7718] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.785'.
[  104.379465][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.784'.
[  104.569806][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.572596][ T7735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.612835][ T7735] bridge0: port 3(batadv0) entered disabled state
[  104.962913][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.967613][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.974528][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.977023][ T7762] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.528859][ T7795] netlink: 'syz.0.819': attribute type 6 has an invalid length.
[  105.531477][ T7795] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.819'.
[  105.576768][ T7797] netlink: 'syz.0.820': attribute type 3 has an invalid length.
[  105.579563][ T7797] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.820'.
[  105.610442][ T7799] netlink: 'syz.0.821': attribute type 12 has an invalid length.
[  105.614394][ T7799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.821'.
[  105.759608][ T7803] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[  105.996045][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.825'.
[  106.135221][ T7829] netlink: 'syz.2.834': attribute type 3 has an invalid length.
[  106.137984][ T7829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.834'.
[  106.330869][ T7839] netlink: 'syz.1.839': attribute type 21 has an invalid length.
[  106.338428][ T7839] netlink: 'syz.1.839': attribute type 4 has an invalid length.
[  106.414311][ T7841] netlink: 'syz.1.840': attribute type 10 has an invalid length.
[  107.087797][ T7861] netlink: 'syz.2.849': attribute type 10 has an invalid length.
[  107.091993][ T7861] veth1_vlan: entered allmulticast mode
[  107.123093][ T7861] team0: Device veth1_vlan failed to register rx_handler
[  107.195601][ T7861] syz.2.849 (7861) used greatest stack depth: 17552 bytes left
[  108.016569][ T7927] netlink: 'syz.1.879': attribute type 10 has an invalid length.
[  108.019562][ T7927] macvlan0: entered promiscuous mode
[  108.021874][ T7927] macvlan0: entered allmulticast mode
[  108.029488][ T7927] team0: Port device macvlan0 removed
[  108.032466][ T7927] veth1_vlan: entered allmulticast mode
[  108.039206][ T7927] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  108.335455][ T7954] netlink: 'syz.1.891': attribute type 22 has an invalid length.
[  108.530085][ T7966] sit0: entered allmulticast mode
[  108.568334][ T7966] sit0: entered promiscuous mode
[  109.359360][ T7976] __nla_validate_parse: 5 callbacks suppressed
[  109.359429][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.900'.
[  109.526391][ T7993] netlink: 'syz.1.907': attribute type 21 has an invalid length.
[  110.242647][ T8011] veth1_macvtap: left promiscuous mode
[  110.245033][ T8011] macsec0: entered promiscuous mode
[  110.560076][ T8025] netlink: 'syz.2.922': attribute type 2 has an invalid length.
[  110.570050][ T8025] netlink: 777 bytes leftover after parsing attributes in process `syz.2.922'.
[  110.580089][ T8025] netlink: 129904 bytes leftover after parsing attributes in process `syz.2.922'.
[  110.583663][ T8025] netlink: 777 bytes leftover after parsing attributes in process `syz.2.922'.
[  110.587008][ T8021] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.919'.
[  110.737897][ T8042] 0: renamed from bond_slave_1 (while UP)
[  110.768996][   T53] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  111.325730][ T8070] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.941'.
[  112.333717][   T53] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  112.536351][ T8110] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.960'.
[  113.218874][ T8171] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.988'.
[  113.699667][ T8194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.998'.
[  114.251003][ T8255] validate_nla: 5 callbacks suppressed
[  114.251015][ T8255] netlink: 'syz.2.1026': attribute type 64 has an invalid length.
[  114.372010][ T8269] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1032'.
[  114.449514][   T53] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  114.515066][ T8275] cgroup: fork rejected by pids controller in /syz2
[  115.667730][  T349] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  115.945772][ T8303] netlink: 'syz.1.1047': attribute type 10 has an invalid length.
[  116.034023][ T8303] hsr_slave_0 (unregistering): left promiscuous mode
[  116.141240][ T5849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.254339][ T5849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.341480][ T5849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.385543][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.389019][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.392162][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.396262][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.399618][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.429684][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.625860][ T8324] chnl_net:caif_netlink_parms(): no params data found
[  116.635999][ T5849] bridge0: port 3(team0) entered disabled state
[  116.649466][ T5849] bridge_slave_1: left allmulticast mode
[  116.652601][ T5849] bridge_slave_1: left promiscuous mode
[  116.657730][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.664813][ T5849] bridge_slave_0: left allmulticast mode
[  116.667894][ T5849] bridge_slave_0: left promiscuous mode
[  116.672114][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.937021][ T5849] geneve1 (unregistering): left promiscuous mode
[  116.940958][ T5849] geneve1 (unregistering): left allmulticast mode
[  116.947251][ T5849] team0: Port device geneve1 removed
[  116.964704][ T5849] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  117.092952][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.104962][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.116421][ T5849] bond0 (unregistering): Released all slaves
[  117.177761][ T8347] syzkaller0: entered promiscuous mode
[  117.180665][ T8347] syzkaller0: entered allmulticast mode
[  117.364993][ T8354] netlink: 'syz.1.1062': attribute type 6 has an invalid length.
[  117.367972][ T8354] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1062'.
[  118.027233][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.029589][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.031948][ T8324] bridge_slave_0: entered allmulticast mode
[  118.045358][ T8324] bridge_slave_0: entered promiscuous mode
[  118.050257][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.052608][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.060641][ T8324] bridge_slave_1: entered allmulticast mode
[  118.063501][ T8324] bridge_slave_1: entered promiscuous mode
[  118.340754][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.355688][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.361660][ T5849] hsr_slave_0: left promiscuous mode
[  118.364404][ T5849] hsr_slave_1: left promiscuous mode
[  118.371785][ T5849] veth1_macvtap: left promiscuous mode
[  118.373944][ T5849] veth0_macvtap: left promiscuous mode
[  118.375873][ T5849] veth0_vlan: left promiscuous mode
[  118.464333][ T5867] Bluetooth: hci2: command tx timeout
[  118.588782][ T5849] team_slave_1 (unregistering): left promiscuous mode
[  118.591123][ T5849] team_slave_1 (unregistering): left allmulticast mode
[  118.594447][ T5849] team0 (unregistering): Port device team_slave_1 removed
[  118.615386][ T5849] C (unregistering): left promiscuous mode
[  118.617363][ T5849] C (unregistering): left allmulticast mode
[  118.619981][ T5849] team0 (unregistering): Port device C removed
[  118.895804][ T8324] team0: Port device team_slave_0 added
[  118.909679][ T8324] team0: Port device team_slave_1 added
[  119.034252][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.037072][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.061702][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.067120][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.069420][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.078457][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.128449][ T8324] hsr_slave_0: entered promiscuous mode
[  119.133664][ T8324] hsr_slave_1: entered promiscuous mode
[  119.336643][ T8396] netlink: 'syz.0.1070': attribute type 21 has an invalid length.
[  119.776283][ T8324] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  119.806119][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1077'.
[  119.809329][ T8324] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  119.814767][ T8324] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  119.821022][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1077'.
[  119.829055][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1077'.
[  119.837575][ T8324] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  119.997579][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.024831][ T8324] 8021q: adding VLAN 0 to HW filter on device team0
[  120.037546][  T349] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.040019][  T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.070332][  T349] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.072725][  T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.346662][ T8461] syzkaller0: entered promiscuous mode
[  120.350880][ T8461] syzkaller0: entered allmulticast mode
[  120.406419][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.442224][ T8324] veth0_vlan: entered promiscuous mode
[  120.448134][ T8324] veth1_vlan: entered promiscuous mode
[  120.467386][ T8324] veth0_macvtap: entered promiscuous mode
[  120.472610][ T8324] veth1_macvtap: entered promiscuous mode
[  120.486239][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.494332][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.499228][ T8324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.502114][ T8324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.506291][ T8324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.509163][ T8324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.553599][ T5867] Bluetooth: hci2: command tx timeout
[  120.556164][  T349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.562552][  T349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.577656][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.580596][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.664723][ T8477] : port 1(vlan0) entered blocking state
[  120.670616][ T8477] : port 1(vlan0) entered disabled state
[  120.673133][ T8477] vlan0: entered allmulticast mode
[  120.675644][ T8477] veth0_vlan: entered allmulticast mode
[  120.678308][ T8477] vlan0: entered promiscuous mode
[  120.821516][ T8487] sctp: [Deprecated]: syz.2.1090 (pid 8487) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.821516][ T8487] Use struct sctp_sack_info instead
[  120.832604][ T8488] netlink: 'syz.0.1088': attribute type 12 has an invalid length.
[  120.835825][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1088'.
[  121.598733][ T8492] netlink: 'syz.1.1092': attribute type 49 has an invalid length.
[  121.756508][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  122.637963][ T5867] Bluetooth: hci2: command tx timeout
[  122.838272][ T8550] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1115'.
[  122.878443][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'.
[  122.881523][ T8554] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1116'.
[  123.065347][ T8566] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1123'.
[  124.072475][ T8580] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1129'.
[  124.282719][ T8601] net_ratelimit: 76 callbacks suppressed
[  124.282731][ T8601] netlink: zone id is out of range
[  124.290585][ T8601] netlink: zone id is out of range
[  124.292316][ T8601] netlink: zone id is out of range
[  124.326939][ T8601] netlink: zone id is out of range
[  124.345656][ T8601] netlink: zone id is out of range
[  124.347474][ T8601] netlink: zone id is out of range
[  124.353636][ T8601] netlink: zone id is out of range
[  124.358248][ T8601] netlink: zone id is out of range
[  124.362830][ T8601] netlink: zone id is out of range
[  124.367579][ T8601] netlink: zone id is out of range
[  124.627958][ T8615] sit0: entered allmulticast mode
[  124.685874][ T8629] sit0: entered promiscuous mode
[  124.705871][ T5867] Bluetooth: hci2: command tx timeout
[  125.557222][ T8645] netlink: 'syz.2.1153': attribute type 21 has an invalid length.
[  125.576505][ T8645] netlink: 'syz.2.1153': attribute type 4 has an invalid length.
[  125.579111][ T8645] __nla_validate_parse: 2 callbacks suppressed
[  125.579118][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1153'.
[  125.812197][ T8663] netlink: 'syz.1.1161': attribute type 10 has an invalid length.
[  126.198836][ T8692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1174'.
[  126.202493][ T8692] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1174'.
[  126.206710][ T8690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1174'.
[  126.635992][ T8725] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  126.638950][ T8725] netlink: 'syz.0.1188': attribute type 4 has an invalid length.
[  126.641730][ T8725] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1188'.
[  126.741096][ T8733] netlink: 'syz.0.1193': attribute type 10 has an invalid length.
[  127.891664][ T5867] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  127.892577][ T8767] @: renamed from bond_slave_0 (while UP)
[  127.998578][ T8773] netlink: 'syz.0.1209': attribute type 10 has an invalid length.
[  128.004185][ T8773] bond0: (slave c@): Releasing backup interface
[  128.007476][ T8773] @: left promiscuous mode
[  128.362351][ T8802] netlink: 'syz.2.1221': attribute type 11 has an invalid length.
[  128.401374][ T8807] netlink: 'syz.1.1222': attribute type 21 has an invalid length.
[  128.413345][ T8807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1222'.
[  128.566069][ T8823] netlink: 'syz.1.1231': attribute type 6 has an invalid length.
[  128.568654][ T8823] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1231'.
[  128.588885][ T8827] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1233'.
[  128.601695][ T8829] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1234'.
[  128.788688][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.796788][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.799251][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.342186][ T8892] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1265'.
[  129.775209][ T8922] block nbd5: not configured, cannot reconfigure
[  130.836418][ T8955] validate_nla: 6 callbacks suppressed
[  130.836429][ T8955] netlink: 'syz.2.1295': attribute type 33 has an invalid length.
[  130.840801][ T8955] __nla_validate_parse: 8 callbacks suppressed
[  130.840808][ T8955] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1295'.
[  130.854571][ T8955] net_ratelimit: 72 callbacks suppressed
[  130.854581][ T8955] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  131.369440][ T8990] netlink: 'syz.1.1313': attribute type 2 has an invalid length.
[  131.372075][ T8990] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1313'.
[  131.404172][ T8990] nbd: must specify a device to reconfigure
[  131.424636][ T8996] netlink: 'syz.0.1314': attribute type 6 has an invalid length.
[  131.497591][ T8999] netlink: 'syz.1.1316': attribute type 21 has an invalid length.
[  131.678892][ T9008] netlink: 'syz.1.1318': attribute type 10 has an invalid length.
[  131.682352][ T9008] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1318'.
[  131.821337][ T9017] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  132.024562][ T9027] syzkaller0: tun_chr_ioctl cmd 1074025677
[  132.026568][ T9027] syzkaller0: Linktype set failed because interface is up
[  132.030496][ T5849] syzkaller0: tun_net_xmit 76
[  132.032337][ T5849] syzkaller0: tun_net_xmit 48
[  132.061549][  T790] syzkaller0: tun_net_xmit 76
[  132.563864][  T790] syzkaller0: tun_net_xmit 76
[  132.627279][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.629380][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.730253][ T9036] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1329'.
[  132.987760][ T9053] netlink: 'syz.1.1337': attribute type 27 has an invalid length.
[  133.472597][ T9055] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1338'.
[  133.476684][ T9055] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1338'.
Connection to localhost closed by remote host.
[  134.306017][ T5849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.366390][ T5849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.425584][ T5849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.463775][ T5849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.550710][ T5849] bridge_slave_1: left allmulticast mode
[  134.552684][ T5849] bridge_slave_1: left promiscuous mode
[  134.555514][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.559683][ T5849] bridge_slave_0: left allmulticast mode
[  134.561574][ T5849] bridge_slave_0: left promiscuous mode
[  134.568154][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.573355][ T5849] vlan0: left allmulticast mode
[  134.575031][ T5849] veth0_vlan: left allmulticast mode
[  134.576791][ T5849] vlan0: left promiscuous mode
[  134.578543][ T5849] : port 1(vlan0) entered disabled state
[  134.847749][ T5849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.852269][ T5849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.856071][ T5849] bond0 (unregistering): Released all slaves
[  135.071737][ T5849] hsr_slave_0: left promiscuous mode
[  135.074643][ T5849] hsr_slave_1: left promiscuous mode
[  135.077183][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.080228][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.090204][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.093667][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.104954][ T5849] veth1_macvtap: left promiscuous mode
[  135.107309][ T5849] veth0_macvtap: left promiscuous mode
[  135.110159][ T5849] veth1_vlan: left promiscuous mode
[  135.112036][ T5849] veth0_vlan: left promiscuous mode
[  135.329362][ T5849] team0 (unregistering): Port device team_slave_1 removed
[  135.351026][ T5849] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
22:54:44  Registers:
info registers vcpu 0

CPU#0
RAX=866923175a072c00 RBX=ffffffff81975f18 RCX=866923175a072c00 RDX=0000000000000001
RSI=ffffffff8d998727 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e5b8a51288 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000500000075 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=60a4f6368a66a100 RBX=ffffffff81975f18 RCX=60a4f6368a66a100 RDX=0000000000000001
RSI=ffffffff8d998727 RDI=ffffffff8be29f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa1e8f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e5aea4c680 CR3=0000000110ef6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
