last executing test programs:

1m30.131330503s ago: executing program 0 (id=99):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791c00000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)

1m30.039314699s ago: executing program 0 (id=101):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001040), 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f00000010c0), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000001100), 0x9)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x8000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f0000000000), 0x4)
recvmsg$kcm(r8, 0x0, 0x0)
r9 = perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2)
r10 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000017c0), 0x2, 0x0)
syz_clone(0x8ca000, &(0x7f0000001800), 0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900))
r12 = getpid()
perf_event_open(0x0, r12, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(r7, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000013c0)="df80609b758f962a5e5b43e968a49079b5c45dcd74b1ff37213dfffa21", 0x1d}], 0x1, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [r10, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r11, r3]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r11, r1, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xc8, 0x1}, 0x5)

1m29.399842473s ago: executing program 0 (id=116):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x2412, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00')

1m29.313085781s ago: executing program 0 (id=120):
socket$kcm(0xa, 0x3, 0x87)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(r0, 0x0, 0x4000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2d, &(0x7f00000000c0), 0xfdb8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff06, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="660a00000000000061113400010000001800000000000000000000000000000095000000000000003eacad62a52b0280fba6bf9686783ddef08b343842bb30a0481c9c67d70f41428c21cb9b3873c0118c8004726aa92f2a02ba698dc3d54c722e2136258bdf6d5c1d85034ec4d44d4e358a4845ed0e56618fd3d7c81f60c82b81d239655fad4994bff5a4ee22d19817ee188fe6587e92d452f8ef485571"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={0x0, 0x0, 0x8}, 0x18)
r5 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x100}, {0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x49}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, 0x0)

1m28.890159741s ago: executing program 0 (id=129):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000000000000008003e8b9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)

1m28.70326407s ago: executing program 1 (id=133):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000017000000020000000700000000000000cbd7b8e3837378890e2a1be4fa04309baea7e459db", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8660, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x2490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40080, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080))
close(0xffffffffffffffff)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

1m28.421155536s ago: executing program 1 (id=138):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8)

1m28.420988692s ago: executing program 1 (id=139):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m28.362948358s ago: executing program 1 (id=141):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="2c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200", 0x2c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc004)

1m28.314284579s ago: executing program 1 (id=142):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1m28.13331852s ago: executing program 1 (id=143):
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000dc0)="8ad4", 0x5dc}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800)

1m28.071807979s ago: executing program 32 (id=143):
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000dc0)="8ad4", 0x5dc}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800)

1m27.74988017s ago: executing program 0 (id=145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)

1m27.747328617s ago: executing program 33 (id=145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)

1.992262542s ago: executing program 4 (id=1735):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x48, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000000c0)=""/18, 0x5}], 0x1}, 0x112)

1.462979224s ago: executing program 3 (id=1740):
perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)

1.363125631s ago: executing program 2 (id=1741):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1}, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)=ANY=[])

1.362966715s ago: executing program 3 (id=1742):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x94)

1.232755994s ago: executing program 3 (id=1743):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.232212907s ago: executing program 3 (id=1744):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x2f, 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, &(0x7f00000002c0)=[0x0, 0x0]}, 0x40)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28)

1.171440702s ago: executing program 2 (id=1745):
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4)
sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854)
recvmsg(r0, &(0x7f0000000100)={0x0, 0xfffffd0a, 0x0}, 0x40)

1.171197467s ago: executing program 2 (id=1746):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x11}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

1.170886854s ago: executing program 2 (id=1747):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)="48000000140081fb7059ae08060c04000aff0f0300000400003a000000006fabca1b4e7d06a6bd7c493872f7", 0x2c}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x17, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu<-+||!')
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)

1.127765055s ago: executing program 4 (id=1748):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000181c0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.061396787s ago: executing program 4 (id=1749):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.061155592s ago: executing program 4 (id=1750):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)

551.798419ms ago: executing program 4 (id=1751):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500031101400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)

551.499648ms ago: executing program 4 (id=1752):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)

442.973643ms ago: executing program 2 (id=1753):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000e70300"})

383.353772ms ago: executing program 2 (id=1754):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000080))

277.987251ms ago: executing program 34 (id=1754):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000080))

229.350959ms ago: executing program 3 (id=1756):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r1}, 0xc)
close(r2)

100.85µs ago: executing program 3 (id=1757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000002c0)='sys_exit\x00', r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)

0s ago: executing program 35 (id=1757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000002c0)='sys_exit\x00', r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57189' (ED25519) to the list of known hosts.
syzkaller login: [   41.202640][ T5755] cgroup: Unknown subsys name 'net'
[   41.327249][ T5755] cgroup: Unknown subsys name 'cpuset'
[   41.331382][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.654643][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.034289][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.037552][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.040426][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.044262][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.059751][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.062629][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.074537][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.083170][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.085978][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.092184][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.107088][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.113657][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.121013][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.124719][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.129569][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.317838][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.381266][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.410873][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.414035][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.416598][ T5827] bridge_slave_0: entered allmulticast mode
[   46.419433][ T5827] bridge_slave_0: entered promiscuous mode
[   46.435069][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.437425][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.439851][ T5827] bridge_slave_1: entered allmulticast mode
[   46.442737][ T5827] bridge_slave_1: entered promiscuous mode
[   46.457634][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   46.486566][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.500948][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.533498][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.536163][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.538495][ T5831] bridge_slave_0: entered allmulticast mode
[   46.541156][ T5831] bridge_slave_0: entered promiscuous mode
[   46.561970][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.564621][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.566938][ T5831] bridge_slave_1: entered allmulticast mode
[   46.569755][ T5831] bridge_slave_1: entered promiscuous mode
[   46.574486][ T5827] team0: Port device team_slave_0 added
[   46.578124][ T5827] team0: Port device team_slave_1 added
[   46.609669][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.612044][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.615510][ T5835] bridge_slave_0: entered allmulticast mode
[   46.618310][ T5835] bridge_slave_0: entered promiscuous mode
[   46.621438][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.624315][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.626715][ T5835] bridge_slave_1: entered allmulticast mode
[   46.629462][ T5835] bridge_slave_1: entered promiscuous mode
[   46.638821][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.641232][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.650202][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.664160][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.667624][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.670028][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.678982][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.691106][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.708621][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.721527][ T5831] team0: Port device team_slave_0 added
[   46.725723][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.730029][ T5831] team0: Port device team_slave_1 added
[   46.770194][ T5835] team0: Port device team_slave_0 added
[   46.782401][ T5827] hsr_slave_0: entered promiscuous mode
[   46.784892][ T5827] hsr_slave_1: entered promiscuous mode
[   46.788386][ T5835] team0: Port device team_slave_1 added
[   46.790963][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.793349][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.802830][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.822314][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.824960][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.833362][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.849085][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.851469][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.861234][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.884666][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.887005][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.895614][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.917489][ T5831] hsr_slave_0: entered promiscuous mode
[   46.919981][ T5831] hsr_slave_1: entered promiscuous mode
[   46.922256][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.925677][ T5831] Cannot create hsr debugfs directory
[   46.996301][ T5835] hsr_slave_0: entered promiscuous mode
[   46.998656][ T5835] hsr_slave_1: entered promiscuous mode
[   47.000797][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.003262][ T5835] Cannot create hsr debugfs directory
[   47.121520][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.136098][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.144900][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.158523][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.189305][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.197864][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.204357][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.206913][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.209986][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.212573][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.217331][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.222667][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.273227][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.279078][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.290179][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.292682][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.295342][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.297757][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.302769][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.307793][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.348966][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.351541][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.354301][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.356775][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.375627][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.381127][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.386336][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.389996][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.393487][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.398369][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.401184][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.417587][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.432497][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.446694][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.449094][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.456708][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   47.462264][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.464899][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.475839][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.478270][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.490696][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.493128][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.526075][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.547755][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   47.557655][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.560080][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.576376][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.578838][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.690307][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.713133][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.742292][ T5827] veth0_vlan: entered promiscuous mode
[   47.749008][ T5827] veth1_vlan: entered promiscuous mode
[   47.766168][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.771452][ T5831] veth0_vlan: entered promiscuous mode
[   47.786180][ T5831] veth1_vlan: entered promiscuous mode
[   47.795737][ T5827] veth0_macvtap: entered promiscuous mode
[   47.804675][ T5827] veth1_macvtap: entered promiscuous mode
[   47.823357][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.832672][ T5831] veth0_macvtap: entered promiscuous mode
[   47.846005][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.850605][ T5831] veth1_macvtap: entered promiscuous mode
[   47.854998][ T5835] veth0_vlan: entered promiscuous mode
[   47.858539][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.861543][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.865613][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.868550][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.880479][ T5835] veth1_vlan: entered promiscuous mode
[   47.910378][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.922569][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.940692][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.943684][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.947813][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.950626][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.956995][ T5835] veth0_macvtap: entered promiscuous mode
[   47.962427][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.962676][ T5835] veth1_macvtap: entered promiscuous mode
[   47.967189][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.015038][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.023146][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.025035][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.029075][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.031618][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.035982][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.038922][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.041750][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.067415][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.070054][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.102011][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.108556][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.110321][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.134429][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.138863][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.154558][ T5219] Bluetooth: hci0: command tx timeout
[   48.156606][ T5832] Bluetooth: hci2: command tx timeout
[   48.158603][ T5834] Bluetooth: hci1: command tx timeout
[   48.174363][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.177045][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.275547][ T5904] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6'.
[   48.428789][ T5913] netlink: 'syz.2.10': attribute type 29 has an invalid length.
[   48.631690][ T5933] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.20'.
[   48.669733][ T5935] netlink: 'syz.1.21': attribute type 21 has an invalid length.
[   48.851575][ T5948] netlink: 140 bytes leftover after parsing attributes in process `syz.1.28'.
[   48.856874][ T5948] netlink: 6 bytes leftover after parsing attributes in process `syz.1.28'.
[   48.932890][ T5952] Zero length message leads to an empty skb
[   48.940099][ T5952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29'.
[   49.033136][ T5962] netlink: 'syz.2.34': attribute type 21 has an invalid length.
[   49.047622][ T5962] IPv6: NLM_F_CREATE should be specified when creating new route
[   49.050316][ T5962] IPv6: Can't replace route, no match found
[   49.126143][ T5964] netlink: 'syz.1.35': attribute type 29 has an invalid length.
[   49.155512][ T5964] netlink: 'syz.1.35': attribute type 29 has an invalid length.
[   49.164937][ T5964] netlink: 'syz.1.35': attribute type 29 has an invalid length.
[   49.170708][ T5964] netlink: 'syz.1.35': attribute type 29 has an invalid length.
[   49.282523][ T5980] netlink: 'syz.2.42': attribute type 21 has an invalid length.
[   49.336465][ T5980] netlink: 'syz.2.42': attribute type 22 has an invalid length.
[   49.339515][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   49.783729][    C0] hrtimer: interrupt took 33261 ns
[   50.244522][ T5834] Bluetooth: hci1: command tx timeout
[   50.246428][ T5834] Bluetooth: hci2: command tx timeout
[   50.248279][ T5834] Bluetooth: hci0: command tx timeout
[   52.324076][ T5832] Bluetooth: hci0: command tx timeout
[   52.325920][ T5832] Bluetooth: hci2: command tx timeout
[   52.326372][ T5834] Bluetooth: hci1: command tx timeout
[   52.611548][ T6008] netlink: 'syz.2.53': attribute type 10 has an invalid length.
[   52.626321][ T6008] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.53'.
[   52.668007][ T6011] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.819312][ T6025] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.61'.
[   52.831601][ T5834] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[   52.882500][ T6027] Illegal XDP return value 4294967274 on prog  (id 19) dev N/A, expect packet loss!
[   52.896086][ T6027] veth0_vlan: entered allmulticast mode
[   52.937212][ T6027] : renamed from vlan0
[   52.964974][ T6029] netlink: 11206 bytes leftover after parsing attributes in process `syz.1.63'.
[   53.032341][ T6031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.65'.
[   53.044455][ T6035] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET)
[   53.283664][ T5834] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[   53.303155][ T6051] __nla_validate_parse: 1 callbacks suppressed
[   53.303165][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   53.394358][ T5834] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[   53.470064][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.485057][ T6068] validate_nla: 5 callbacks suppressed
[   53.485066][ T6068] netlink: 'syz.2.80': attribute type 2 has an invalid length.
[   53.489470][ T6068] netlink: 'syz.2.80': attribute type 9 has an invalid length.
[   53.492412][ T6068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.80'.
[   53.551455][ T6064] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   54.393870][ T5834] Bluetooth: hci1: command tx timeout
[   54.394299][ T5219] Bluetooth: hci2: command tx timeout
[   54.395970][ T5834] Bluetooth: hci0: command tx timeout
[   54.397981][ T6091] netlink: 'syz.2.91': attribute type 21 has an invalid length.
[   54.401934][ T6091] netlink: 100 bytes leftover after parsing attributes in process `syz.2.91'.
[   54.488518][ T6099] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'.
[   54.783361][ T6115] raw_sendmsg: syz.2.103 forgot to set AF_INET. Fix it!
[   55.324376][ T6135] bond_slave_1: mtu less than device minimum
[   55.509860][ T6155] syzkaller0: entered promiscuous mode
[   55.515599][ T6155] syzkaller0: entered allmulticast mode
[   56.123223][ T6186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'.
[   56.616527][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.679678][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.743380][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.781728][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.876923][ T5858] bridge_slave_1: left allmulticast mode
[   56.879466][ T5858] bridge_slave_1: left promiscuous mode
[   56.882355][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.888829][ T5858] bridge_slave_0: left allmulticast mode
[   56.890808][ T5858] bridge_slave_0: left promiscuous mode
[   56.892752][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.100834][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.105922][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.109456][ T5858] bond0 (unregistering): Released all slaves
[   57.317670][ T5858] hsr_slave_0: left promiscuous mode
[   57.319950][ T5858] hsr_slave_1: left promiscuous mode
[   57.322059][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.324766][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.327934][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.330397][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.339502][ T5858] veth1_macvtap: left promiscuous mode
[   57.341421][ T5858] veth0_macvtap: left promiscuous mode
[   57.343297][ T5858] veth1_vlan: left promiscuous mode
[   57.345588][ T5858] veth0_vlan: left promiscuous mode
[   57.575944][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   57.591583][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.595950][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.599337][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.603199][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.607383][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.622772][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   57.907818][ T6221] chnl_net:caif_netlink_parms(): no params data found
[   57.955796][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.958178][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.960601][ T6221] bridge_slave_0: entered allmulticast mode
[   57.964534][ T6221] bridge_slave_0: entered promiscuous mode
[   57.967883][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.970214][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.972529][ T6221] bridge_slave_1: entered allmulticast mode
[   57.975732][ T6221] bridge_slave_1: entered promiscuous mode
[   57.995524][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.000208][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.020841][ T6221] team0: Port device team_slave_0 added
[   58.024755][ T6221] team0: Port device team_slave_1 added
[   58.045661][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.048049][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.056927][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.061462][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.063674][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.071785][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.097129][ T6221] hsr_slave_0: entered promiscuous mode
[   58.099466][ T6221] hsr_slave_1: entered promiscuous mode
[   58.308268][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.311407][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.315228][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.318421][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.321053][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.958151][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.010920][ T6221] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   59.034924][ T6221] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   59.041558][ T6221] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   59.057921][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.080565][ T6221] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   59.128863][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.207575][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.217762][ T6232] chnl_net:caif_netlink_parms(): no params data found
[   59.319944][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.322386][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.328217][ T6232] bridge_slave_0: entered allmulticast mode
[   59.332299][ T6232] bridge_slave_0: entered promiscuous mode
[   59.364441][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.366999][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.369975][ T6232] bridge_slave_1: entered allmulticast mode
[   59.373539][ T6232] bridge_slave_1: entered promiscuous mode
[   59.396032][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.399428][ T6260] netlink: 'syz.2.154': attribute type 29 has an invalid length.
[   59.417814][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.462807][ T6232] team0: Port device team_slave_0 added
[   59.478804][ T6232] team0: Port device team_slave_1 added
[   59.482573][ T5858] bridge_slave_1: left allmulticast mode
[   59.485467][ T5858] bridge_slave_1: left promiscuous mode
[   59.487422][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.491710][ T5858] bridge_slave_0: left allmulticast mode
[   59.493684][ T5858] bridge_slave_0: left promiscuous mode
[   59.496721][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.661650][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.666362][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.670496][ T5858] bond0 (unregistering): Released all slaves
[   59.673995][ T5834] Bluetooth: hci0: command tx timeout
[   59.704434][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.706727][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.716280][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.720921][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.723228][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.732920][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.777966][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.783234][ T6264] netlink: 'syz.2.156': attribute type 21 has an invalid length.
[   59.806888][ T6264] netlink: 'syz.2.156': attribute type 6 has an invalid length.
[   59.809502][ T6264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.156'.
[   59.824562][ T6232] hsr_slave_0: entered promiscuous mode
[   59.827227][ T6232] hsr_slave_1: entered promiscuous mode
[   59.829358][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.831777][ T6232] Cannot create hsr debugfs directory
[   59.887422][ T6221] 8021q: adding VLAN 0 to HW filter on device team0
[   59.942650][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.945602][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.966897][ T5858] hsr_slave_0: left promiscuous mode
[   59.969119][ T5858] hsr_slave_1: left promiscuous mode
[   59.971288][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.975325][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.978484][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.980916][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.992317][ T5858] veth1_macvtap: left promiscuous mode
[   59.995031][ T5858] veth0_macvtap: left promiscuous mode
[   59.997698][ T5858] veth1_vlan: left promiscuous mode
[   60.301047][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   60.319572][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   60.393998][ T5834] Bluetooth: hci1: command tx timeout
[   60.512908][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.515388][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.531736][ T6279] syzkaller0: entered promiscuous mode
[   60.533582][ T6279] syzkaller0: entered allmulticast mode
[   60.648611][ T6287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.724684][ T6232] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   60.733136][ T6232] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   60.755941][ T6232] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   60.766746][ T6232] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   60.815721][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.852158][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.863565][ T6232] 8021q: adding VLAN 0 to HW filter on device team0
[   60.869346][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.871714][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.884710][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.887527][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.926222][ T6232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.991628][ T6221] veth0_vlan: entered promiscuous mode
[   61.009576][ T6221] veth1_vlan: entered promiscuous mode
[   61.017361][ T5834] Bluetooth: hci2: Malformed HCI Event: 0x22
[   61.030487][ T6221] veth0_macvtap: entered promiscuous mode
[   61.037676][ T6221] veth1_macvtap: entered promiscuous mode
[   61.050225][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.060653][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.069680][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.072705][ T6221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.076657][ T6221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.079432][ T6221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.082142][ T6221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.142763][ T6232] veth0_vlan: entered promiscuous mode
[   61.167998][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.172008][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.172638][ T6232] veth1_vlan: entered promiscuous mode
[   61.217005][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.219884][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.225896][ T6232] veth0_macvtap: entered promiscuous mode
[   61.230995][ T6232] veth1_macvtap: entered promiscuous mode
[   61.242126][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.258011][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.269390][ T6232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.274964][ T6232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.277761][ T6232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.285857][ T6232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.324958][ T6323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.354562][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.357668][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.386323][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.388958][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.422898][ T6325] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.173'.
[   61.561397][ T6336] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.177'.
[   61.566134][ T6336] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   61.568809][ T6336] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[   61.691210][ T6344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   61.707170][ T6341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   61.711194][ T6344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.179'.
[   61.755222][ T5834] Bluetooth: hci0: command tx timeout
[   61.759068][ T6346] netlink: 'syz.3.181': attribute type 17 has an invalid length.
[   61.761831][ T6346] netlink: 'syz.3.181': attribute type 16 has an invalid length.
[   61.768316][ T6346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.181'.
[   62.062638][ T6369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.192'.
[   62.474172][ T5834] Bluetooth: hci1: command tx timeout
[   63.835910][ T5832] Bluetooth: hci0: command tx timeout
[   63.965435][ T6494] netlink: 144 bytes leftover after parsing attributes in process `syz.2.252'.
[   64.113641][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.257'.
[   64.557716][ T5832] Bluetooth: hci1: command tx timeout
[   64.869145][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.262'.
[   64.872541][ T6519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.262'.
[   64.884711][ T6520] netlink: 60 bytes leftover after parsing attributes in process `syz.3.262'.
[   64.995739][ T6523] netlink: 'syz.3.263': attribute type 10 has an invalid length.
[   65.033869][ T5834] Bluetooth: hci1: Opcode 0x206a failed: -110
[   65.914273][ T5834] Bluetooth: hci0: command tx timeout
[   66.634300][ T5834] Bluetooth: hci1: command 0x0419 tx timeout
[   67.714057][ T6523] batman_adv: batadv0: Adding interface: netdevsim0
[   67.716577][ T6523] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.725881][ T6523] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   67.882845][ T6526] netlink: 96168 bytes leftover after parsing attributes in process `syz.2.264'.
[   67.987198][ T5834] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   68.200583][ T6537] netlink: 'syz.4.269': attribute type 10 has an invalid length.
[   68.203264][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.269'.
[   68.206891][ T6537] batadv0: entered promiscuous mode
[   68.208664][ T6537] batadv0: entered allmulticast mode
[   68.211056][ T6537] bridge0: port 3(batadv0) entered blocking state
[   68.213244][ T6537] bridge0: port 3(batadv0) entered disabled state
[   68.219545][ T6537] bridge0: port 3(batadv0) entered blocking state
[   68.221831][ T6537] bridge0: port 3(batadv0) entered forwarding state
[   68.662134][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'.
[   68.671931][ T6578] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   68.673896][ T6237] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   68.677762][ T6237] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   68.683342][ T6578] netlink: 'syz.2.288': attribute type 1 has an invalid length.
[   68.687276][ T6578] netlink: 'syz.2.288': attribute type 2 has an invalid length.
[   68.689760][ T6578] netlink: 129968 bytes leftover after parsing attributes in process `syz.2.288'.
[   68.692767][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'.
[   68.715975][ T5834] Bluetooth: hci1: command 0x0419 tx timeout
[   68.904591][ T6596] syzkaller0: entered promiscuous mode
[   68.906547][ T6596] syzkaller0: entered allmulticast mode
[   69.038224][ T6605] delete_channel: no stack
[   69.071931][ T6610] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.304'.
[   69.117971][ T6612] netlink: 'syz.2.305': attribute type 7 has an invalid length.
[   69.145627][ T6614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.306'.
[   69.267192][ T6622] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   69.703449][ T6656] syzkaller0: tun_chr_ioctl cmd 2148553947
[   69.841656][ T6659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.017079][ T6661] netlink: 'syz.2.329': attribute type 10 has an invalid length.
[   70.019588][ T6661] netlink: 'syz.2.329': attribute type 19 has an invalid length.
[   70.022054][ T6661] __nla_validate_parse: 4 callbacks suppressed
[   70.022059][ T6661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.329'.
[   70.560322][ T6695] netlink: 'syz.4.345': attribute type 21 has an invalid length.
[   70.668002][ T6703] veth1_vlan: entered allmulticast mode
[   70.794074][ T5834] Bluetooth: hci1: command 0x0419 tx timeout
[   70.878067][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.880365][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.895899][ T6723] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   70.897172][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.357'.
[   70.938733][ T6723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.949722][ T6725] netlink: 'syz.3.359': attribute type 21 has an invalid length.
[   70.959091][ T6725] netlink: 'syz.3.359': attribute type 6 has an invalid length.
[   70.961594][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.359'.
[   71.231321][ T6746] netlink: 'syz.3.368': attribute type 10 has an invalid length.
[   71.253158][ T6746] veth0_vlan: entered allmulticast mode
[   71.349905][ T6746] veth0_vlan: left promiscuous mode
[   71.378174][ T6746] veth0_vlan: entered promiscuous mode
[   71.420579][ T6746] team0: Device veth0_vlan failed to register rx_handler
[   71.529217][ T6746] syz.3.368 (6746) used greatest stack depth: 18256 bytes left
[   72.130689][ T6769] netlink: 'syz.4.377': attribute type 1 has an invalid length.
[   72.133328][ T6769] netlink: 17 bytes leftover after parsing attributes in process `syz.4.377'.
[   72.166290][ T6766] netlink: 188 bytes leftover after parsing attributes in process `syz.3.376'.
[   72.295191][ T6783] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.383'.
[   72.363667][ T6792] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.384'.
[   72.368179][ T6785] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.384'.
[   72.728963][ T6815] syzkaller0: entered promiscuous mode
[   72.731076][ T6815] syzkaller0: entered allmulticast mode
[   73.494355][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.586396][ T6834] delete_channel: no stack
[   73.588170][ T6834] delete_channel: no stack
[   73.798140][ T6841] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.408'.
[   73.884654][ T6844] netlink: 'syz.2.409': attribute type 3 has an invalid length.
[   73.887536][ T6844] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.409'.
[   74.551140][ T6854] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   74.554238][ T6854] openvswitch: netlink: Key type 256 is out of range max 32
[   74.556458][ T6852] netlink: 'syz.3.412': attribute type 10 has an invalid length.
[   74.559641][ T6852] batman_adv: batadv0: Removing interface: netdevsim0
[   74.617683][ T6852] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   74.699352][ T6863] netlink: 'syz.2.418': attribute type 8 has an invalid length.
[   74.818333][ T6864] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   74.821426][ T6864] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   75.563517][ T6865] delete_channel: no stack
[   75.679047][ T5834] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[   76.806145][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1002360518 wd_nsec: 1002360485
[   77.410741][ T6944] __nla_validate_parse: 3 callbacks suppressed
[   77.410751][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'.
[   77.417363][ T6941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'.
[   77.430659][ T6941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'.
[   77.567775][ T6957] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.458'.
[   77.570774][ T6957] bridge: RTM_NEWNEIGH with invalid state 0x1
[   77.585233][ T6955] pim6reg1: entered allmulticast mode
[   77.588523][ T6955] pim6reg1: left allmulticast mode
[   77.754640][ T5834] Bluetooth: hci1: command 0x0419 tx timeout
[   77.899402][ T6980] validate_nla: 3 callbacks suppressed
[   77.899465][ T6980] netlink: 'syz.3.470': attribute type 39 has an invalid length.
[   77.907890][ T6980] veth0_macvtap: left promiscuous mode
[   79.196784][ T7008] netlink: 'syz.4.483': attribute type 39 has an invalid length.
[   79.738870][ T7045] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.500'.
[   79.742732][ T7045] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   80.027620][ T7065] netlink: 'syz.4.510': attribute type 10 has an invalid length.
[   80.068999][ T7065] team0: Device ipvlan1 failed to register rx_handler
[   80.974489][ T7124] netlink: 825 bytes leftover after parsing attributes in process `syz.4.538'.
[   80.977497][ T7124] netlink: 130144 bytes leftover after parsing attributes in process `syz.4.538'.
[   81.122867][ T1270] cfg80211: failed to load regulatory.db
[   81.235056][ T7148] netlink: 'syz.3.550': attribute type 1 has an invalid length.
[   81.237600][ T7148] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.550'.
[   81.562885][ T7176] netlink: 'syz.3.563': attribute type 21 has an invalid length.
[   81.628645][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'.
[   81.631735][ T7180] netlink: 152 bytes leftover after parsing attributes in process `syz.4.564'.
[   82.218004][ T7204] netlink: 'syz.4.576': attribute type 39 has an invalid length.
[   82.275424][ T7208] netlink: 'syz.3.578': attribute type 64 has an invalid length.
[   82.344320][ T7215] netlink: 'syz.3.580': attribute type 3 has an invalid length.
[   82.434901][ T7223] __nla_validate_parse: 1 callbacks suppressed
[   82.434913][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.585'.
[   82.440430][ T7223] tc_dump_action: action bad kind
[   82.713150][ T7251] netlink: 'syz.3.597': attribute type 10 has an invalid length.
[   82.720750][ T7251] team0: Cannot enslave team device to itself
[   82.840209][ T7257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'.
[   82.843849][ T7257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'.
[   82.847268][ T7257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.600'.
[   83.223324][ T7277] netlink: 'syz.3.610': attribute type 28 has an invalid length.
[   83.228099][ T7277] netlink: 2 bytes leftover after parsing attributes in process `syz.3.610'.
[   83.552126][ T7299] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.621'.
[   83.792982][ T7326] : renamed from vlan0 (while UP)
[   83.864704][ T7333] netlink: 10 bytes leftover after parsing attributes in process `syz.2.638'.
[   83.988111][ T7350] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[   84.280498][ T7362] netlink: 'syz.2.652': attribute type 46 has an invalid length.
[   85.106282][ T7379] netlink: 'syz.3.660': attribute type 11 has an invalid length.
[   85.108859][ T7379] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.660'.
[   85.113236][ T7379] netlink: 'syz.3.660': attribute type 11 has an invalid length.
[   85.116463][ T7379] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.660'.
[   85.120930][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.147930][ T7382] netlink: 'syz.4.662': attribute type 2 has an invalid length.
[   85.150603][ T7382] netlink: 119 bytes leftover after parsing attributes in process `syz.4.662'.
[   86.117714][ T7410] netlink: 'syz.2.676': attribute type 10 has an invalid length.
[   86.129325][ T7410] team0: Port device .3c added
[   86.343265][ T7434] netlink: 'syz.3.688': attribute type 21 has an invalid length.
[   87.360664][ T7476] sctp: [Deprecated]: syz.4.705 (pid 7476) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.360664][ T7476] Use struct sctp_sack_info instead
[   88.339477][ T7509] __nla_validate_parse: 2 callbacks suppressed
[   88.339489][ T7509] netlink: 3787 bytes leftover after parsing attributes in process `syz.4.720'.
[   88.371115][ T5834] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[   88.446400][ T7516] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.723'.
[   88.633419][ T5834] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[   88.681385][ T7530] veth1_macvtap: left promiscuous mode
[   89.897862][ T7567] netlink: 'syz.3.747': attribute type 3 has an invalid length.
[   89.901189][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[   90.080641][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.752'.
[   90.112004][ T7579] netlink: 'syz.3.754': attribute type 33 has an invalid length.
[   90.114908][ T7579] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.754'.
[   90.121521][ T7581] netlink: 'syz.2.755': attribute type 2 has an invalid length.
[   90.127096][ T7581] netlink: 'syz.2.755': attribute type 8 has an invalid length.
[   90.134325][ T7581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.755'.
[   90.187091][ T7589] netlink: 'syz.3.759': attribute type 8 has an invalid length.
[   90.189597][ T7589] netlink: 'syz.3.759': attribute type 9 has an invalid length.
[   90.192083][ T7589] netlink: 'syz.3.759': attribute type 10 has an invalid length.
[   90.195837][ T7589] netlink: 'syz.3.759': attribute type 11 has an invalid length.
[   90.198404][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'.
[   90.264906][ T7599] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.764'.
[   90.448784][ T7619] netlink: 'syz.2.774': attribute type 10 has an invalid length.
[   90.528531][ T7619] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   90.730756][ T7648] netlink: 'syz.3.788': attribute type 6 has an invalid length.
[   90.733275][ T7648] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.788'.
[   90.789443][ T7651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.790'.
[   91.012385][ T5834] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12
[   91.110579][ T5834] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   92.285283][ T7711] bridge: RTM_NEWNEIGH with invalid state 0x1
[   92.373669][ T7722] pim6reg1: entered allmulticast mode
[   92.385647][ T7722] pim6reg1: left allmulticast mode
[   93.613839][ T5832] Bluetooth: hci0: Opcode 0x206a failed: -110
[   93.616163][ T5832] Bluetooth: hci2: command tx timeout
[   93.617976][ T5832] Bluetooth: hci0: command 0x206a tx timeout
[   96.248559][ T7816] validate_nla: 4 callbacks suppressed
[   96.248571][ T7816] netlink: 'syz.2.857': attribute type 11 has an invalid length.
[   96.439122][ T7808] netlink: 'syz.4.853': attribute type 10 has an invalid length.
[   96.441827][ T7808] __nla_validate_parse: 10 callbacks suppressed
[   96.441839][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.853'.
[   96.447329][ T7808] dummy0: entered promiscuous mode
[   96.450495][ T7808] bridge0: port 4(dummy0) entered blocking state
[   96.475553][ T7808] bridge0: port 4(dummy0) entered disabled state
[   96.477748][ T7808] dummy0: entered allmulticast mode
[   96.481036][ T7808] bridge0: port 4(dummy0) entered blocking state
[   96.483317][ T7808] bridge0: port 4(dummy0) entered forwarding state
[   97.626560][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'.
[   97.651500][ T7867] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.006173][ T7934] netlink: 830 bytes leftover after parsing attributes in process `syz.3.908'.
[   99.667939][ T7968] syzkaller0: entered promiscuous mode
[   99.842063][ T7985] netlink: 'syz.2.933': attribute type 29 has an invalid length.
[   99.879801][ T7987] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.937'.
[  100.084357][ T7997] netlink: 'syz.4.936': attribute type 10 has an invalid length.
[  100.095069][ T7997] team0: Port device wlan1 added
[  100.145654][ T8001] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.939'.
[  100.194269][ T8004] netlink: 'syz.4.940': attribute type 29 has an invalid length.
[  100.200479][ T8004] netlink: 'syz.4.940': attribute type 29 has an invalid length.
[  100.221344][ T8004] netlink: 'syz.4.940': attribute type 29 has an invalid length.
[  100.229365][ T8004] netlink: 'syz.4.940': attribute type 29 has an invalid length.
[  101.208787][ T8030] netlink: 14 bytes leftover after parsing attributes in process `syz.3.953'.
[  101.439458][ T8055] delete_channel: no stack
[  101.671503][ T8088] syzkaller0: entered promiscuous mode
[  101.674936][ T8088] syzkaller0: entered allmulticast mode
[  101.974233][ T8128] netlink: 'syz.3.1002': attribute type 31 has an invalid length.
[  101.976859][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'.
[  101.980786][ T8130] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1004'.
[  102.174260][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1016'.
[  102.177875][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1016'.
[  102.183396][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1016'.
[  102.396397][ T8186] netlink: 'syz.2.1031': attribute type 10 has an invalid length.
[  102.404285][ T8186] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  102.414200][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1030'.
[  102.427640][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1030'.
[  102.669153][ T8220] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1047'.
[  102.743647][ T8226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'.
[  102.751750][ T8226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'.
[  102.983437][ T8256] netlink: 'syz.4.1065': attribute type 25 has an invalid length.
[  103.000374][ T8256] netlink: 'syz.4.1065': attribute type 1 has an invalid length.
[  103.003663][ T8256] bridge0: port 1(bridge_slave_0) entered learning state
[  103.372892][ T8290] netlink: 'syz.3.1081': attribute type 29 has an invalid length.
[  103.378048][ T8290] netlink: 'syz.3.1081': attribute type 29 has an invalid length.
[  103.381285][ T8290] netlink: 'syz.3.1081': attribute type 29 has an invalid length.
[  103.384930][ T8290] netlink: 'syz.3.1081': attribute type 29 has an invalid length.
[  104.945643][ T8324] netlink: 'syz.3.1097': attribute type 21 has an invalid length.
[  104.949562][ T8324] netlink: 'syz.3.1097': attribute type 5 has an invalid length.
[  105.827873][ T5832] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  106.157170][ T8452] team0: Port device syz_tun added
[  106.161794][ T8453] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  106.556296][ T8474] team0: Port device geneve1 added
[  106.809726][ T8488] syzkaller0: entered allmulticast mode
[  107.064704][ T8456] delete_channel: no stack
[  107.377494][ T8509] __nla_validate_parse: 11 callbacks suppressed
[  107.377529][ T8509] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1185'.
[  107.536878][ T8518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1189'.
[  107.540641][ T8518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1189'.
[  107.546960][ T8518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1189'.
[  107.778867][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1194'.
[  107.783291][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1194'.
[  107.838637][ T5834] Bluetooth: hci0: command 0x206a tx timeout
[  107.880404][ T8534] -1: renamed from syzkaller0
[  108.849692][ T8553] validate_nla: 6 callbacks suppressed
[  108.849704][ T8553] netlink: 'syz.4.1204': attribute type 21 has an invalid length.
[  108.984390][ T8563] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1207'.
[  108.990852][ T8563] netlink: zone id is out of range
[  108.992513][ T8563] netlink: zone id is out of range
[  109.002826][ T8563] netlink: zone id is out of range
[  109.004955][ T8563] netlink: zone id is out of range
[  109.006864][ T8563] netlink: zone id is out of range
[  109.008561][ T8563] netlink: zone id is out of range
[  109.010244][ T8563] netlink: zone id is out of range
[  109.011940][ T8563] netlink: zone id is out of range
[  109.014863][ T8563] netlink: zone id is out of range
[  109.017037][ T8563] netlink: zone id is out of range
[  109.020952][ T8565] netlink: 'syz.3.1209': attribute type 5 has an invalid length.
[  109.876545][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'.
[  109.901589][ T8599] netlink: 'syz.4.1224': attribute type 41 has an invalid length.
[  109.905976][ T8599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1224'.
[  110.065123][ T8621] netlink: 'syz.2.1235': attribute type 1 has an invalid length.
[  110.353545][ T8657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1249'.
[  110.856638][ T8707] netlink: 'syz.2.1274': attribute type 10 has an invalid length.
[  111.401221][ T8752] netlink: 'syz.2.1295': attribute type 39 has an invalid length.
[  111.422222][ T8752] bond0: (slave syz_tun): Releasing backup interface
[  111.591621][ T8765] netlink: 'syz.4.1299': attribute type 13 has an invalid length.
[  111.619238][ T5834] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  111.818521][ T8779] netlink: 'syz.2.1306': attribute type 21 has an invalid length.
[  111.824886][ T8779] netlink: 'syz.2.1306': attribute type 1 has an invalid length.
[  112.547007][ T8800] __nla_validate_parse: 9 callbacks suppressed
[  112.547017][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1312'.
[  112.563411][ T5834] Bluetooth: hci2: ISO packet for unknown connection handle 3327
[  112.567749][ T5834] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  112.662781][ T8810] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1320'.
[  112.777207][ T8821] netlink: 'syz.2.1324': attribute type 10 has an invalid length.
[  112.801363][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1324'.
[  113.588178][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1327'.
[  117.981968][ T8907] validate_nla: 3 callbacks suppressed
[  117.982043][ T8907] netlink: 'syz.3.1361': attribute type 40 has an invalid length.
[  117.996793][ T8907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'.
[  118.635629][ T8976] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.1373'.
[  119.166347][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1383'.
[  119.550060][ T9046] C: renamed from team_slave_0 (while UP)
[  119.557449][ T9046] netlink: 'syz.3.1390': attribute type 3 has an invalid length.
[  119.560882][ T9046] netlink: 'syz.3.1390': attribute type 1 has an invalid length.
[  119.565645][ T9046] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1390'.
[  119.569409][ T9046] net_ratelimit: 76 callbacks suppressed
[  119.569425][ T9046] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  120.166107][ T9065] syzkaller0: tun_chr_ioctl cmd 1074025681
[  120.326807][ T5834] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  120.329388][ T5834] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  120.729647][ T9093] nbd: must specify an index to disconnect
[  120.961464][ T9095] netlink: 'syz.3.1409': attribute type 21 has an invalid length.
[  120.966382][ T9095] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1409'.
[  121.282202][ T9109] netlink: 'syz.3.1416': attribute type 1 has an invalid length.
[  121.286905][ T9109] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1416'.
[  121.298933][ T9109] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  121.519239][ T9128] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1425'.
[  121.871235][ T9158] netlink: 'syz.2.1440': attribute type 11 has an invalid length.
[  121.880814][ T9158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1440'.
[  123.582427][ T9219] netlink: 'syz.4.1468': attribute type 22 has an invalid length.
[  123.585760][ T9219] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1468'.
[  124.128496][ T9253] netlink: 'syz.2.1473': attribute type 29 has an invalid length.
[  125.676556][ T9313] netlink: 'syz.2.1477': attribute type 2 has an invalid length.
[  125.679624][ T9313] netlink: 'syz.2.1477': attribute type 8 has an invalid length.
[  125.685932][ T9313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1477'.
[  126.679967][ T9334] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1487'.
[  126.822967][ T9350] netlink: 'syz.3.1495': attribute type 10 has an invalid length.
[  126.832959][ T9350] team0: Port device dummy0 added
[  127.190355][ T9364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1500'.
[  127.868600][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'.
[  127.871774][ T9376] tc_dump_action: action bad kind
[  129.703326][ T9390] netlink: 'syz.4.1512': attribute type 21 has an invalid length.
[  129.791018][ T9398] netlink: 'syz.3.1517': attribute type 37 has an invalid length.
[  129.883889][ T9412] delete_channel: no stack
[  129.886471][ T9412] delete_channel: no stack
[  130.008206][ T9423] delete_channel: no stack
[  130.715991][ T9430] syz.2.1531: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  130.722073][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.2.1531 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  130.722087][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.722092][ T9430] Call Trace:
[  130.722097][ T9430]  <TASK>
[  130.722102][ T9430]  dump_stack_lvl+0x189/0x250
[  130.722118][ T9430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.722129][ T9430]  ? __pfx__printk+0x10/0x10
[  130.722142][ T9430]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  130.722153][ T9430]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  130.722164][ T9430]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  130.722175][ T9430]  warn_alloc+0x214/0x310
[  130.722184][ T9430]  ? stack_depot_save_flags+0x429/0x900
[  130.722196][ T9430]  ? __pfx_warn_alloc+0x10/0x10
[  130.722205][ T9430]  ? kasan_save_track+0x4f/0x80
[  130.722217][ T9430]  ? xskq_create+0x56/0x170
[  130.722227][ T9430]  ? xsk_init_queue+0xb0/0x110
[  130.722256][ T9430]  ? xsk_setsockopt+0x4de/0x710
[  130.722265][ T9430]  ? do_sock_setsockopt+0x17c/0x1b0
[  130.722273][ T9430]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  130.722280][ T9430]  ? do_syscall_64+0xfa/0x3b0
[  130.722290][ T9430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.722301][ T9430]  __vmalloc_node_range_noprof+0x125/0x12f0
[  130.722323][ T9430]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  130.722334][ T9430]  ? __kasan_kmalloc+0x93/0xb0
[  130.722343][ T9430]  vmalloc_user_noprof+0xad/0xf0
[  130.722352][ T9430]  ? xskq_create+0xbf/0x170
[  130.722361][ T9430]  xskq_create+0xbf/0x170
[  130.722371][ T9430]  xsk_init_queue+0xb0/0x110
[  130.722383][ T9430]  xsk_setsockopt+0x4de/0x710
[  130.722393][ T9430]  ? __pfx_xsk_setsockopt+0x10/0x10
[  130.722403][ T9430]  ? __fget_files+0x2a/0x420
[  130.722411][ T9430]  ? aa_sock_opt_perm+0x74/0x110
[  130.722422][ T9430]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  130.722431][ T9430]  ? __pfx_xsk_setsockopt+0x10/0x10
[  130.722440][ T9430]  do_sock_setsockopt+0x17c/0x1b0
[  130.722450][ T9430]  __x64_sys_setsockopt+0x13f/0x1b0
[  130.722460][ T9430]  do_syscall_64+0xfa/0x3b0
[  130.722469][ T9430]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.722478][ T9430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.722485][ T9430]  ? exc_page_fault+0x9f/0xf0
[  130.722495][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.722501][ T9430] RIP: 0033:0x7f76f838eb69
[  130.722509][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.722515][ T9430] RSP: 002b:00007f76f9142038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  130.722523][ T9430] RAX: ffffffffffffffda RBX: 00007f76f85b5fa0 RCX: 00007f76f838eb69
[  130.722529][ T9430] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  130.722533][ T9430] RBP: 00007f76f8411df1 R08: 0000000000000004 R09: 0000000000000000
[  130.722537][ T9430] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  130.722542][ T9430] R13: 0000000000000000 R14: 00007f76f85b5fa0 R15: 00007fff804eaa88
[  130.722553][ T9430]  </TASK>
[  130.722557][ T9430] Mem-Info:
[  130.853841][ T9430] active_anon:5082 inactive_anon:0 isolated_anon:0
[  130.853841][ T9430]  active_file:13521 inactive_file:38244 isolated_file:0
[  130.853841][ T9430]  unevictable:1768 dirty:231 writeback:0
[  130.853841][ T9430]  slab_reclaimable:9389 slab_unreclaimable:54343
[  130.853841][ T9430]  mapped:18062 shmem:2461 pagetables:935
[  130.853841][ T9430]  sec_pagetables:0 bounce:0
[  130.853841][ T9430]  kernel_misc_reclaimable:0
[  130.853841][ T9430]  free:284937 free_pcp:17092 free_cma:0
[  130.870588][ T9430] Node 0 active_anon:11608kB inactive_anon:0kB active_file:17620kB inactive_file:21660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36476kB dirty:632kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4720kB pagetables:1804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  130.883377][ T9430] Node 1 active_anon:8720kB inactive_anon:0kB active_file:36464kB inactive_file:131316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35772kB dirty:292kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6716kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  130.896851][ T9430] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  130.907627][ T9430] lowmem_reserve[]: 0 812 812 812 812
[  130.909639][ T9430] Node 0 DMA32 free:415352kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11608kB inactive_anon:0kB active_file:17620kB inactive_file:21660kB unevictable:3536kB writepending:632kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:23612kB local_pcp:17388kB free_cma:0kB
[  130.922116][ T9430] lowmem_reserve[]: 0 0 0 0 0
[  130.924078][ T9430] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  130.938499][ T9430] lowmem_reserve[]: 0 0 854 854 854
[  130.940388][ T9430] Node 1 Normal free:250136kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8720kB inactive_anon:0kB active_file:36464kB inactive_file:131316kB unevictable:3536kB writepending:292kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45920kB local_pcp:30792kB free_cma:0kB
[  130.951989][ T9430] lowmem_reserve[]: 0 0 0 0 0
[  130.955181][ T9430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  130.959584][ T9430] Node 0 DMA32: 444*4kB (UM) 436*8kB (UM) 272*16kB (UME) 198*32kB (UME) 174*64kB (UME) 79*128kB (UM) 31*256kB (UM) 10*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 88*4096kB (UM) = 414800kB
[  130.966157][ T9430] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  130.971633][ T9430] Node 1 Normal: 1750*4kB (UME) 710*8kB (UME) 381*16kB (UME) 839*32kB (UME) 300*64kB (UM) 62*128kB (UME) 21*256kB (U) 10*512kB (UM) 9*1024kB (UME) 3*2048kB (UM) 37*4096kB (UM) = 250168kB
[  130.981374][ T9430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  130.984876][ T9430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  130.988120][ T9430] 54226 total pagecache pages
[  130.989884][ T9430] 0 pages in swap cache
[  130.991445][ T9430] Free swap  = 124996kB
[  130.992926][ T9430] Total swap = 124996kB
[  130.996132][ T9430] 786301 pages RAM
[  130.997548][ T9430] 0 pages HighMem/MovableOnly
[  130.999277][ T9430] 241075 pages reserved
[  131.000824][ T9430] 0 pages cma reserved
[  132.317354][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.319506][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.206025][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1533'.
[  133.209547][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1533'.
[  133.212797][ T9434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1533'.
[  133.318964][ T9444] netlink: 'syz.3.1538': attribute type 10 has an invalid length.
[  133.360453][ T9444] team0: Port device geneve1 added
[  133.412540][ T9450] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  133.414855][ T9450] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  134.617870][ T9479] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1553'.
[  134.650129][ T9481] netlink: 531 bytes leftover after parsing attributes in process `syz.3.1555'.
[  134.865725][ T9505] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1567'.
[  134.976434][ T9521] netlink: 'syz.2.1575': attribute type 4 has an invalid length.
[  134.980845][ T9521] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1575'.
[  135.042600][ T5832] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  135.045518][ T5832] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff
[  135.711536][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1583'.
[  135.717537][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1583'.
[  135.721124][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1583'.
[  135.998879][ T9578] netlink: 'syz.4.1601': attribute type 10 has an invalid length.
[  136.090006][ T9588] syzkaller0: left promiscuous mode
[  136.092617][ T9588] syzkaller0: left allmulticast mode
[  136.209639][ T9596] netlink: 'syz.2.1609': attribute type 21 has an invalid length.
[  136.212930][ T9596] IPv6: NLM_F_CREATE should be specified when creating new route
[  136.311106][ T9603] netlink: 'syz.2.1612': attribute type 4 has an invalid length.
[  136.339148][ T9606] netlink: 'syz.3.1613': attribute type 2 has an invalid length.
[  138.584059][ T9683] netlink: 'syz.3.1648': attribute type 1 has an invalid length.
[  138.588871][ T9683] netlink: 'syz.3.1648': attribute type 4 has an invalid length.
[  138.592294][ T9683] __nla_validate_parse: 2 callbacks suppressed
[  138.592305][ T9683] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1648'.
[  138.599311][ T9683] netlink: 'syz.3.1648': attribute type 1 has an invalid length.
[  138.601759][ T9683] netlink: 'syz.3.1648': attribute type 4 has an invalid length.
[  138.604360][ T9683] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1648'.
[  138.658805][ T9688] netlink: 'syz.4.1650': attribute type 1 has an invalid length.
[  138.661745][ T9688] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1650'.
[  138.854797][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1653'.
[  138.911930][ T5834] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  138.915767][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  138.918862][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u11:4 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  138.918876][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.918883][ T5834] Workqueue: hci2 hci_rx_work
[  138.918902][ T5834] Call Trace:
[  138.918907][ T5834]  <TASK>
[  138.918912][ T5834]  dump_stack_lvl+0x189/0x250
[  138.918926][ T5834]  ? kernfs_path_from_node+0x2c/0x260
[  138.918939][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.918950][ T5834]  ? __pfx__printk+0x10/0x10
[  138.918964][ T5834]  ? kernfs_path_from_node+0x2c/0x260
[  138.918973][ T5834]  ? kernfs_path_from_node+0x2c/0x260
[  138.918988][ T5834]  ? kernfs_path_from_node+0x22c/0x260
[  138.918999][ T5834]  ? kernfs_path_from_node+0x2c/0x260
[  138.919010][ T5834]  sysfs_create_dir_ns+0x259/0x280
[  138.919021][ T5834]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  138.919030][ T5834]  ? do_raw_spin_unlock+0x4d/0x240
[  138.919047][ T5834]  kobject_add_internal+0x59f/0xb40
[  138.919062][ T5834]  kobject_add+0x155/0x220
[  138.919075][ T5834]  ? __pfx_kobject_add+0x10/0x10
[  138.919086][ T5834]  ? _raw_spin_unlock+0x28/0x50
[  138.919096][ T5834]  ? get_device_parent+0x366/0x3a0
[  138.919107][ T5834]  device_add+0x408/0xb50
[  138.919117][ T5834]  hci_conn_add_sysfs+0xd5/0x1e0
[  138.919128][ T5834]  le_conn_complete_evt+0xc3a/0x1220
[  138.919166][ T5834]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  138.919179][ T5834]  ? __pfx_bt_warn+0x10/0x10
[  138.919186][ T5834]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  138.919200][ T5834]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  138.919209][ T5834]  ? skb_pull_data+0xfb/0x200
[  138.919224][ T5834]  hci_le_conn_complete_evt+0x187/0x450
[  138.919240][ T5834]  hci_event_packet+0x78f/0x1200
[  138.919253][ T5834]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  138.919267][ T5834]  ? __pfx_hci_event_packet+0x10/0x10
[  138.919279][ T5834]  ? kcov_remote_start+0x4d3/0x7f0
[  138.919291][ T5834]  ? lockdep_hardirqs_on+0x90/0x150
[  138.919302][ T5834]  ? hci_send_to_monitor+0xe2/0x570
[  138.919310][ T5834]  hci_rx_work+0x46a/0xe80
[  138.919323][ T5834]  ? process_scheduled_works+0x9ef/0x17b0
[  138.919335][ T5834]  process_scheduled_works+0xae1/0x17b0
[  138.919356][ T5834]  ? __pfx_process_scheduled_works+0x10/0x10
[  138.919372][ T5834]  worker_thread+0x8a0/0xda0
[  138.919392][ T5834]  kthread+0x711/0x8a0
[  138.919404][ T5834]  ? __pfx_worker_thread+0x10/0x10
[  138.919412][ T5834]  ? __pfx_kthread+0x10/0x10
[  138.919423][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.919432][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.919440][ T5834]  ? __pfx_kthread+0x10/0x10
[  138.919451][ T5834]  ret_from_fork+0x3fc/0x770
[  138.919461][ T5834]  ? __pfx_ret_from_fork+0x10/0x10
[  138.919471][ T5834]  ? __switch_to_asm+0x39/0x70
[  138.919481][ T5834]  ? __switch_to_asm+0x33/0x70
[  138.919489][ T5834]  ? __pfx_kthread+0x10/0x10
[  138.919500][ T5834]  ret_from_fork_asm+0x1a/0x30
[  138.919517][ T5834]  </TASK>
[  138.919536][ T5834] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  139.020893][ T5834] Bluetooth: hci2: failed to register connection device
[  139.678816][ T9751] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1677'.
[  139.682324][ T9751] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1677'.
[  140.152550][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1685'.
[  140.489555][ T9780] syzkaller0: entered promiscuous mode
[  140.491627][ T9780] syzkaller0: entered allmulticast mode
[  140.674891][ T9788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.538582][ T9825] validate_nla: 6 callbacks suppressed
[  141.538594][ T9825] netlink: 'syz.4.1712': attribute type 29 has an invalid length.
[  141.548639][ T9825] netlink: 'syz.4.1712': attribute type 29 has an invalid length.
[  141.559589][ T9825] netlink: 'syz.4.1712': attribute type 29 has an invalid length.
[  141.595023][ T9827] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  141.598505][ T9827] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  141.625627][ T9829] netlink: 'syz.4.1714': attribute type 21 has an invalid length.
[  141.628257][ T9829] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1714'.
[  142.204571][ T9841] netlink: 'syz.4.1719': attribute type 29 has an invalid length.
[  142.207806][ T9841] netlink: 'syz.4.1719': attribute type 29 has an invalid length.
[  142.241829][ T9846] tap0: tun_chr_ioctl cmd 1074025675
[  142.243824][ T9846] tap0: persist disabled
[  142.326943][ T9853] pim6reg1: entered allmulticast mode
[  143.427212][ T9894] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1742'.
[  143.430594][ T9894] hsr_slave_0: left promiscuous mode
[  143.433148][ T9894] hsr_slave_1: left promiscuous mode
[  144.396863][ T6237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.453346][ T6237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.511493][ T6237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.550392][ T6232] team0: Port device syz_tun removed
[  144.571355][ T6237] bond0: (slave netdevsim0): Releasing backup interface
[  144.576270][ T6237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.689316][ T6237] bridge_slave_1: left allmulticast mode
[  144.691225][ T6237] bridge_slave_1: left promiscuous mode
[  144.693268][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.699911][ T6237] bridge_slave_0: left allmulticast mode
[  144.701810][ T6237] bridge_slave_0: left promiscuous mode
[  144.704767][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.831930][ T6237] team0: Port device geneve1 removed
[  145.006053][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.010283][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.014622][ T6237] bond0 (unregistering): Released all slaves
[  145.186286][ T6237] 
[  145.187170][ T6237] ======================================================
[  145.189409][ T6237] WARNING: possible circular locking dependency detected
[  145.191653][ T6237] 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 Not tainted
[  145.195150][ T6237] ------------------------------------------------------
[  145.197412][ T6237] kworker/u8:4/6237 is trying to acquire lock:
[  145.199411][ T6237] ffff888112918e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  145.202490][ T6237] 
[  145.202490][ T6237] but task is already holding lock:
[  145.204855][ T6237] ffff888031d98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  145.208228][ T6237] 
[  145.208228][ T6237] which lock already depends on the new lock.
[  145.208228][ T6237] 
[  145.211789][ T6237] 
[  145.211789][ T6237] the existing dependency chain (in reverse order) is:
[  145.214632][ T6237] 
[  145.214632][ T6237] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  145.217117][ T6237]        lock_acquire+0x120/0x360
[  145.218759][ T6237]        __mutex_lock+0x182/0xe80
[  145.220391][ T6237]        ieee80211_open+0xed/0x1f0
[  145.222033][ T6237]        __dev_open+0x470/0x880
[  145.223601][ T6237]        netif_open+0xaa/0x170
[  145.225157][ T6237]        dev_open+0x125/0x260
[  145.226679][ T6237]        team_add_slave+0xb36/0x2840
[  145.228406][ T6237]        do_set_master+0x533/0x6d0
[  145.230100][ T6237]        do_setlink+0xcf0/0x41c0
[  145.231692][ T6237]        rtnl_newlink+0x160b/0x1c70
[  145.233388][ T6237]        rtnetlink_rcv_msg+0x7cf/0xb70
[  145.235130][ T6237]        netlink_rcv_skb+0x208/0x470
[  145.236881][ T6237]        netlink_unicast+0x75c/0x8e0
[  145.238638][ T6237]        netlink_sendmsg+0x805/0xb30
[  145.240451][ T6237]        __sock_sendmsg+0x21c/0x270
[  145.242202][ T6237]        ____sys_sendmsg+0x505/0x830
[  145.243915][ T6237]        ___sys_sendmsg+0x21f/0x2a0
[  145.245637][ T6237]        __x64_sys_sendmsg+0x19b/0x260
[  145.247446][ T6237]        do_syscall_64+0xfa/0x3b0
[  145.249134][ T6237]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.251248][ T6237] 
[  145.251248][ T6237] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  145.253924][ T6237]        validate_chain+0xb9b/0x2140
[  145.255687][ T6237]        __lock_acquire+0xab9/0xd20
[  145.257410][ T6237]        lock_acquire+0x120/0x360
[  145.258977][ T6237]        __mutex_lock+0x182/0xe80
[  145.260582][ T6237]        team_del_slave+0x32/0x1c0
[  145.262230][ T6237]        team_device_event+0x285/0xa20
[  145.263958][ T6237]        notifier_call_chain+0x1b6/0x3e0
[  145.265759][ T6237]        unregister_netdevice_many_notify+0x15d8/0x2320
[  145.267957][ T6237]        unregister_netdevice_queue+0x33c/0x380
[  145.269919][ T6237]        _cfg80211_unregister_wdev+0x165/0x590
[  145.271905][ T6237]        ieee80211_remove_interfaces+0x49a/0x6d0
[  145.273918][ T6237]        ieee80211_unregister_hw+0x5d/0x2c0
[  145.275837][ T6237]        mac80211_hwsim_del_radio+0x275/0x460
[  145.277767][ T6237]        hwsim_exit_net+0x584/0x640
[  145.279493][ T6237]        ops_undo_list+0x49a/0x990
[  145.281156][ T6237]        cleanup_net+0x4c5/0x800
[  145.282731][ T6237]        process_scheduled_works+0xae1/0x17b0
[  145.284695][ T6237]        worker_thread+0x8a0/0xda0
[  145.286351][ T6237]        kthread+0x711/0x8a0
[  145.287874][ T6237]        ret_from_fork+0x3fc/0x770
[  145.289518][ T6237]        ret_from_fork_asm+0x1a/0x30
[  145.291216][ T6237] 
[  145.291216][ T6237] other info that might help us debug this:
[  145.291216][ T6237] 
[  145.294423][ T6237]  Possible unsafe locking scenario:
[  145.294423][ T6237] 
[  145.296786][ T6237]        CPU0                    CPU1
[  145.298509][ T6237]        ----                    ----
[  145.300207][ T6237]   lock(&rdev->wiphy.mtx);
[  145.301631][ T6237]                                lock(team->team_lock_key#3);
[  145.303988][ T6237]                                lock(&rdev->wiphy.mtx);
[  145.306210][ T6237]   lock(team->team_lock_key#3);
[  145.307791][ T6237] 
[  145.307791][ T6237]  *** DEADLOCK ***
[  145.307791][ T6237] 
[  145.310357][ T6237] 5 locks held by kworker/u8:4/6237:
[  145.312038][ T6237]  #0: ffff88801b2f6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  145.315464][ T6237]  #1: ffffc90004d8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  145.318728][ T6237]  #2: ffffffff8f5101d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  145.321655][ T6237]  #3: ffffffff8f51cdc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  145.324713][ T6237]  #4: ffff888031d98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  145.328061][ T6237] 
[  145.328061][ T6237] stack backtrace:
[  145.329932][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  145.329942][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.329947][ T6237] Workqueue: netns cleanup_net
[  145.329955][ T6237] Call Trace:
[  145.329961][ T6237]  <TASK>
[  145.329965][ T6237]  dump_stack_lvl+0x189/0x250
[  145.329976][ T6237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.329984][ T6237]  ? __pfx__printk+0x10/0x10
[  145.329995][ T6237]  ? print_lock_name+0xde/0x100
[  145.330004][ T6237]  print_circular_bug+0x2ee/0x310
[  145.330014][ T6237]  check_noncircular+0x134/0x160
[  145.330024][ T6237]  validate_chain+0xb9b/0x2140
[  145.330033][ T6237]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.330045][ T6237]  __lock_acquire+0xab9/0xd20
[  145.330053][ T6237]  ? team_del_slave+0x32/0x1c0
[  145.330060][ T6237]  lock_acquire+0x120/0x360
[  145.330088][ T6237]  ? team_del_slave+0x32/0x1c0
[  145.330097][ T6237]  ? __mutex_trylock_common+0x153/0x260
[  145.330106][ T6237]  __mutex_lock+0x182/0xe80
[  145.330117][ T6237]  ? team_del_slave+0x32/0x1c0
[  145.330123][ T6237]  ? rcu_is_watching+0x15/0xb0
[  145.330132][ T6237]  ? team_del_slave+0x32/0x1c0
[  145.330138][ T6237]  ? __pfx___mutex_lock+0x10/0x10
[  145.330148][ T6237]  ? bond_netdev_event+0xd9/0xe80
[  145.330156][ T6237]  ? __pfx___mutex_lock+0x10/0x10
[  145.330165][ T6237]  ? __pfx_bond_netdev_event+0x10/0x10
[  145.330174][ T6237]  team_del_slave+0x32/0x1c0
[  145.330180][ T6237]  team_device_event+0x285/0xa20
[  145.330189][ T6237]  notifier_call_chain+0x1b6/0x3e0
[  145.330199][ T6237]  unregister_netdevice_many_notify+0x15d8/0x2320
[  145.330211][ T6237]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  145.330221][ T6237]  ? __lock_acquire+0xab9/0xd20
[  145.330231][ T6237]  unregister_netdevice_queue+0x33c/0x380
[  145.330241][ T6237]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  145.330250][ T6237]  _cfg80211_unregister_wdev+0x165/0x590
[  145.330263][ T6237]  ieee80211_remove_interfaces+0x49a/0x6d0
[  145.330273][ T6237]  ? __pfx_synchronize_rcu+0x10/0x10
[  145.330282][ T6237]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  145.330292][ T6237]  ? rcu_is_watching+0x15/0xb0
[  145.330300][ T6237]  ieee80211_unregister_hw+0x5d/0x2c0
[  145.330309][ T6237]  mac80211_hwsim_del_radio+0x275/0x460
[  145.330318][ T6237]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  145.330327][ T6237]  hwsim_exit_net+0x584/0x640
[  145.330338][ T6237]  ? __pfx_hwsim_exit_net+0x10/0x10
[  145.330349][ T6237]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  145.330357][ T6237]  ops_undo_list+0x49a/0x990
[  145.330365][ T6237]  ? __pfx_ops_undo_list+0x10/0x10
[  145.330373][ T6237]  cleanup_net+0x4c5/0x800
[  145.330379][ T6237]  ? __pfx_cleanup_net+0x10/0x10
[  145.330386][ T6237]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.330394][ T6237]  ? process_scheduled_works+0x9ef/0x17b0
[  145.330401][ T6237]  ? process_scheduled_works+0x9ef/0x17b0
[  145.330409][ T6237]  process_scheduled_works+0xae1/0x17b0
[  145.330421][ T6237]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.330431][ T6237]  worker_thread+0x8a0/0xda0
[  145.330439][ T6237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.330448][ T6237]  ? __kthread_parkme+0x7b/0x200
[  145.330458][ T6237]  kthread+0x711/0x8a0
[  145.330468][ T6237]  ? __pfx_worker_thread+0x10/0x10
[  145.330476][ T6237]  ? __pfx_kthread+0x10/0x10
[  145.330485][ T6237]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.330493][ T6237]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.330501][ T6237]  ? __pfx_kthread+0x10/0x10
[  145.330511][ T6237]  ret_from_fork+0x3fc/0x770
[  145.330519][ T6237]  ? __pfx_ret_from_fork+0x10/0x10
[  145.330526][ T6237]  ? __switch_to_asm+0x39/0x70
[  145.330535][ T6237]  ? __switch_to_asm+0x33/0x70
[  145.330544][ T6237]  ? __pfx_kthread+0x10/0x10
[  145.330553][ T6237]  ret_from_fork_asm+0x1a/0x30
[  145.330565][ T6237]  </TASK>
[  145.451702][ T6237] team0: Port device .3c removed
[  145.525404][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.527918][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.530399][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.533215][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.536288][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.570540][ T6237] hsr_slave_0: left promiscuous mode
[  145.572529][ T6237] hsr_slave_1: left promiscuous mode
[  145.574879][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.577510][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.580236][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.582653][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.587485][ T6237] veth1_macvtap: left promiscuous mode
[  145.589316][ T6237] veth0_macvtap: left promiscuous mode
[  145.591160][ T6237] veth0_vlan: left promiscuous mode
[  145.699148][ T6237] team0 (unregistering): Port device team_slave_1 removed
[  145.713921][ T6237] team0 (unregistering): Port device team_slave_0 removed
[  145.821780][ T9939] chnl_net:caif_netlink_parms(): no params data found
[  145.861780][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.868230][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.870597][ T9939] bridge_slave_0: entered allmulticast mode
[  145.873052][ T9939] bridge_slave_0: entered promiscuous mode
[  145.876208][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.878521][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.880824][ T9939] bridge_slave_1: entered allmulticast mode
[  145.883217][ T9939] bridge_slave_1: entered promiscuous mode
[  145.894357][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.898821][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.916431][ T9939] team0: Port device team_slave_0 added
[  145.919377][ T9939] team0: Port device team_slave_1 added
[  145.929741][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.932012][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.942230][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.946637][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.948907][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.959586][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.978828][ T9939] hsr_slave_0: entered promiscuous mode
[  145.980985][ T9939] hsr_slave_1: entered promiscuous mode
[  145.983004][ T9939] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.985612][ T9939] Cannot create hsr debugfs directory
[  146.008607][ T6237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.037818][ T6237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.047163][ T9939] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.051121][ T9939] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.054862][ T9939] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.058439][ T9939] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.067862][ T6237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.079355][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.081702][ T9939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.084242][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.086541][ T9939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.104837][ T6237] bond0: (slave ): Releasing backup interface
[  146.120883][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.127031][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.129596][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.135166][ T9939] 8021q: adding VLAN 0 to HW filter on device team0
[  146.140101][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.142371][ T9293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.157401][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.159909][ T9293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.189320][ T6237] bridge_slave_1: left allmulticast mode
[  146.191495][ T6237] bridge_slave_1: left promiscuous mode
[  146.194892][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.199244][ T6237] bridge_slave_0: left allmulticast mode
[  146.201401][ T6237] bridge_slave_0: left promiscuous mode
[  146.203296][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.249374][ T6237] team0: Port device geneve1 removed
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.488359][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.492197][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.495782][ T6237] bond0 (unregistering): Released all slaves
[  146.781636][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.784931][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.787836][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.790426][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.795022][ T6237] veth1_macvtap: left promiscuous mode
[  146.796953][ T6237] veth1_vlan: left promiscuous mode
[  146.908210][ T6237] team0 (unregistering): Port device team_slave_1 removed
[  146.922003][ T6237] team0 (unregistering): Port device C removed
[  146.987957][ T6237] team0 (unregistering): Port device dummy0 removed
[  147.437468][ T6237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.478122][ T6237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.537468][ T6237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.597749][ T6237] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.654778][ T6237] dummy0: left allmulticast mode
[  147.657467][ T6237] bridge0: port 4(dummy0) entered disabled state
[  147.661626][ T6237] bridge0: port 3(batadv0) entered disabled state
[  147.665599][ T6237] bridge_slave_1: left allmulticast mode
[  147.667945][ T6237] bridge_slave_1: left promiscuous mode
[  147.670338][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.675207][ T6237] bridge_slave_0: left allmulticast mode
[  147.677545][ T6237] bridge_slave_0: left promiscuous mode
[  147.679870][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.761950][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.766148][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.769558][ T6237] bond0 (unregistering): Released all slaves
[  147.881605][ T6237] team0: Port device wlan1 removed
[  147.968775][ T6237] hsr_slave_0: left promiscuous mode
[  147.970815][ T6237] hsr_slave_1: left promiscuous mode
[  147.972751][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.975865][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.978464][ T6237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.980887][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.985185][ T6237] veth0_macvtap: left promiscuous mode
[  147.987063][ T6237] veth1_vlan: left promiscuous mode
[  147.988762][ T6237] veth0_vlan: left promiscuous mode
[  148.072856][ T6237] team0 (unregistering): Port device team_slave_1 removed
[  148.089129][ T6237] team0 (unregistering): Port device team_slave_0 removed
[  148.709011][ T6237] bridge_slave_1: left allmulticast mode
[  148.710923][ T6237] bridge_slave_1: left promiscuous mode
[  148.712757][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.716242][ T6237] bridge_slave_0: left allmulticast mode
[  148.718059][ T6237] bridge_slave_0: left promiscuous mode
[  148.719889][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.777157][ T6237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.780708][ T6237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.784128][ T6237] bond0 (unregistering): Released all slaves
[  148.866576][ T6237] hsr_slave_0: left promiscuous mode
[  148.869191][ T6237] hsr_slave_1: left promiscuous mode
[  148.871588][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.875531][ T6237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.936490][ T6237] team0 (unregistering): Port device team_slave_1 removed
[  148.942830][ T6237] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
23:00:35  Registers:
info registers vcpu 0

CPU#0
RAX=cc735ff385d01800 RBX=ffffffff81975f18 RCX=cc735ff385d01800 RDX=0000000000000001
RSI=ffffffff8d998727 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e45d84198 CR3=0000000110f68000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0e45c12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004d8e750
R8 =ffff888021490237 R9 =1ffff11004292046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58d1 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c318b7f CR3=0000000027d98000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000051 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=696b66722f343179 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
