last executing test programs:

1.019307835s ago: executing program 2 (id=905):
socket$kcm(0x10, 0x7, 0x10)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
close(0x3)

920.946767ms ago: executing program 2 (id=909):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1})
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef)

920.553471ms ago: executing program 2 (id=911):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x18, 0x0, 0x2)
close(r0)

861.617728ms ago: executing program 2 (id=914):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x4)

792.490628ms ago: executing program 1 (id=915):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

792.194891ms ago: executing program 2 (id=916):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

742.255047ms ago: executing program 1 (id=917):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

642.0194ms ago: executing program 2 (id=920):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0xfdef)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000500)=0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00'], 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fff32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

562.079686ms ago: executing program 1 (id=922):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x2, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073cd273bd15b3a115b0000000000851000000200000085000003009500a5050100"/51], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94)

511.417921ms ago: executing program 1 (id=924):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18)

511.108598ms ago: executing program 1 (id=925):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000850000007b00000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0x0, 0x8, 0x0, 0x10000, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001ede000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14d05, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20)

382.3567ms ago: executing program 0 (id=927):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

381.981236ms ago: executing program 0 (id=928):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f4, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"})

331.945146ms ago: executing program 0 (id=929):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8)

281.610207ms ago: executing program 1 (id=930):
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x8, 0x6, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94)
r4 = socket$kcm(0x2, 0x1, 0x84)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1a000}], 0x1}, 0x0)
socket$kcm(0x2, 0x5, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20)

220.701745ms ago: executing program 0 (id=931):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f0000004c00", @ANYRES32, @ANYBLOB="0000b856f31f9a", @ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1404, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0x18}, 0xfc00)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB], 0xfdef)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, @perf_bp={&(0x7f00000000c0), 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={0x0, 0x0, 0x4008}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffefc, &(0x7f0000000080)=[{&(0x7f0000000280)="e03f03003d000b648c740d64fe5bfd1304873601005df33694f90324fc600800000000000000053582c1", 0x33fe0}], 0x1}, 0x0)

327.279µs ago: executing program 0 (id=932):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, 0x0, 0x0)

0s ago: executing program 0 (id=933):
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r5}, 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r2, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55974' (ED25519) to the list of known hosts.
syzkaller login: [   48.043687][ T5811] cgroup: Unknown subsys name 'net'
[   48.233408][ T5811] cgroup: Unknown subsys name 'cpuset'
[   48.237309][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.661318][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.522988][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.525937][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.528714][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.531933][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.535193][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.604254][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.607109][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.609791][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.612863][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.615553][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.627888][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.631955][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.634928][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.637882][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.641535][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.726257][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   53.816227][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.819102][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.822293][ T5825] bridge_slave_0: entered allmulticast mode
[   53.825189][ T5825] bridge_slave_0: entered promiscuous mode
[   53.848283][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.850816][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.853279][ T5825] bridge_slave_1: entered allmulticast mode
[   53.856223][ T5825] bridge_slave_1: entered promiscuous mode
[   53.899757][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.911079][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.939171][ T5825] team0: Port device team_slave_0 added
[   53.948492][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   53.957355][ T5825] team0: Port device team_slave_1 added
[   54.039974][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.043068][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.051822][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.062879][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.065755][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.074368][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.118189][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.141153][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.144185][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.147133][ T5829] bridge_slave_0: entered allmulticast mode
[   54.151337][ T5829] bridge_slave_0: entered promiscuous mode
[   54.188412][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.192020][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.195124][ T5829] bridge_slave_1: entered allmulticast mode
[   54.198968][ T5829] bridge_slave_1: entered promiscuous mode
[   54.207377][ T5825] hsr_slave_0: entered promiscuous mode
[   54.209694][ T5825] hsr_slave_1: entered promiscuous mode
[   54.252124][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.277380][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.290168][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.292733][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.295285][ T5832] bridge_slave_0: entered allmulticast mode
[   54.297943][ T5832] bridge_slave_0: entered promiscuous mode
[   54.318327][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.321655][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.324646][ T5832] bridge_slave_1: entered allmulticast mode
[   54.328303][ T5832] bridge_slave_1: entered promiscuous mode
[   54.369434][ T5829] team0: Port device team_slave_0 added
[   54.392580][ T5829] team0: Port device team_slave_1 added
[   54.401759][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.419329][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.449585][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.452377][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.463244][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.482978][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.485569][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.496129][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.510916][ T5832] team0: Port device team_slave_0 added
[   54.519306][ T5832] team0: Port device team_slave_1 added
[   54.579454][ T5829] hsr_slave_0: entered promiscuous mode
[   54.583137][ T5829] hsr_slave_1: entered promiscuous mode
[   54.586479][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.589819][ T5829] Cannot create hsr debugfs directory
[   54.594669][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.596961][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.606631][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.628024][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.630784][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.638814][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.678802][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.702886][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.729331][ T5832] hsr_slave_0: entered promiscuous mode
[   54.733218][ T5832] hsr_slave_1: entered promiscuous mode
[   54.736051][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.739110][ T5832] Cannot create hsr debugfs directory
[   54.741863][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.754699][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.947097][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.971636][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.976545][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.991631][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.058396][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.064125][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.069142][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.073735][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.086319][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.126546][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   55.151609][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.158342][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.161123][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.181867][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.184803][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.204277][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   55.225776][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.228395][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.244280][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.250069][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.252928][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.278683][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.291833][  T680] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.294536][  T680] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.322765][  T680] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.325121][  T680] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.359194][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.371958][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.476421][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.500028][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.524056][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.549439][ T5832] veth0_vlan: entered promiscuous mode
[   55.561069][ T5834] Bluetooth: hci0: command tx timeout
[   55.575914][ T5832] veth1_vlan: entered promiscuous mode
[   55.593114][ T5825] veth0_vlan: entered promiscuous mode
[   55.622845][ T5832] veth0_macvtap: entered promiscuous mode
[   55.626474][ T5829] veth0_vlan: entered promiscuous mode
[   55.630082][ T5832] veth1_macvtap: entered promiscuous mode
[   55.637908][ T5825] veth1_vlan: entered promiscuous mode
[   55.640529][ T5834] Bluetooth: hci1: command tx timeout
[   55.651083][ T5829] veth1_vlan: entered promiscuous mode
[   55.656373][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.665791][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.676847][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.679708][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.682849][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.685577][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.720918][ T5834] Bluetooth: hci2: command tx timeout
[   55.733605][ T5825] veth0_macvtap: entered promiscuous mode
[   55.744581][ T5829] veth0_macvtap: entered promiscuous mode
[   55.754657][ T5825] veth1_macvtap: entered promiscuous mode
[   55.781817][ T5829] veth1_macvtap: entered promiscuous mode
[   55.792950][  T680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.796834][  T680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.808094][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.822145][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.842788][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.845715][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.848704][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.849796][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.854739][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.859742][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.863323][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.866026][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.875391][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.878217][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.882417][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.885299][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.934448][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.982077][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.986485][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.046681][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.050001][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.139394][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.152892][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.199829][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.207687][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.517868][ T5908] netlink: 'syz.0.4': attribute type 11 has an invalid length.
[   56.660216][    C1] hrtimer: interrupt took 31039 ns
[   57.037984][ T5917] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   57.097259][ T5917] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   57.229376][ T5926] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.640814][ T5834] Bluetooth: hci0: command tx timeout
[   57.721033][ T5834] Bluetooth: hci1: command tx timeout
[   57.801396][ T5834] Bluetooth: hci2: command tx timeout
[   58.515685][ T5946] netlink: 'syz.2.25': attribute type 21 has an invalid length.
[   58.602191][ T5952] netlink: 'syz.2.28': attribute type 28 has an invalid length.
[   58.747434][ T5956] netlink: 26 bytes leftover after parsing attributes in process `syz.1.30'.
[   58.818583][ T5958] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   59.065922][ T5834] Bluetooth: hci2: Malformed Event: 0x13
[   59.723678][ T5834] Bluetooth: hci0: command tx timeout
[   59.811017][ T5834] Bluetooth: hci1: command tx timeout
[   59.880741][ T5834] Bluetooth: hci2: command tx timeout
[   60.523551][ T6016] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.55'.
[   60.563807][ T6020] netlink: 22 bytes leftover after parsing attributes in process `syz.0.54'.
[   60.592691][ T6023] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[   60.819696][ T6036] syzkaller0: entered promiscuous mode
[   60.829165][ T6036] syzkaller0: entered allmulticast mode
[   60.887445][ T6040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.890809][ T6040] IPv6: NLM_F_CREATE should be set when creating new route
[   60.893958][ T6040] IPv6: NLM_F_CREATE should be set when creating new route
[   61.819374][ T5834] Bluetooth: hci0: command tx timeout
[   61.880450][ T5834] Bluetooth: hci1: command tx timeout
[   61.960543][ T5834] Bluetooth: hci2: command tx timeout
[   62.343403][ T6087] netlink: 208424 bytes leftover after parsing attributes in process `syz.0.87'.
[   62.347305][ T6087] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   62.354311][ T6087] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   62.357516][ T6087] netlink: 'syz.0.87': attribute type 3 has an invalid length.
[   62.362916][ T6087] netlink: 'syz.0.87': attribute type 4 has an invalid length.
[   62.544556][ T6100] netlink: 'syz.0.91': attribute type 21 has an invalid length.
[   62.900628][ T6116] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.101'.
[   63.087976][ T6122] : renamed from vlan0 (while UP)
[   63.266495][ T6135] netlink: 'syz.0.110': attribute type 11 has an invalid length.
[   63.269370][ T6135] netlink: 'syz.0.110': attribute type 11 has an invalid length.
[   63.272835][ T6135] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.110'.
[   63.583041][ T6156] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[   63.585661][ T6156] netlink: 112 bytes leftover after parsing attributes in process `syz.2.120'.
[   63.635040][ T6158] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   63.691454][ T6162] netlink: 'syz.2.123': attribute type 10 has an invalid length.
[   63.694586][ T6162] netlink: 2 bytes leftover after parsing attributes in process `syz.2.123'.
[   63.697733][ T6162] bond0: entered promiscuous mode
[   63.719982][ T6162] bond_slave_0: entered promiscuous mode
[   63.722697][ T6162] bond_slave_1: entered promiscuous mode
[   63.730423][ T6162] bridge0: port 3(bond0) entered blocking state
[   63.732849][ T6162] bridge0: port 3(bond0) entered disabled state
[   63.736386][ T6162] bond0: entered allmulticast mode
[   63.738662][ T6162] bond_slave_0: entered allmulticast mode
[   63.753081][ T6162] bond_slave_1: entered allmulticast mode
[   63.758456][ T6162] bridge0: port 3(bond0) entered blocking state
[   63.761557][ T6162] bridge0: port 3(bond0) entered forwarding state
[   64.188740][ T6177] netlink: 'syz.0.131': attribute type 2 has an invalid length.
[   64.192489][ T6177] netlink: 51 bytes leftover after parsing attributes in process `syz.0.131'.
[   64.260524][ T6180] delete_channel: no stack
[   64.467508][ T6197] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   64.470152][ T6197] netlink: 156 bytes leftover after parsing attributes in process `syz.1.140'.
[   64.729774][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.065331][ T5834] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[   65.490913][   T36] wlan1: Trigger new scan to find an IBSS to join
[   65.666685][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'.
[   65.759189][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.815036][ T6236] bridge_slave_0 (unregistering): left allmulticast mode
[   65.817663][ T6236] bridge_slave_0 (unregistering): left promiscuous mode
[   65.823237][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.290641][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.926673][ T6283] validate_nla: 2 callbacks suppressed
[   67.926687][ T6283] netlink: 'syz.1.179': attribute type 10 has an invalid length.
[   67.932076][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.179'.
[   68.522849][ T6315] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[   68.824651][ T6315] team0: Port device wlan1 added
[   68.857698][ T6326] netlink: 67 bytes leftover after parsing attributes in process `syz.2.201'.
[   68.976853][ T6315] syz.1.196 (6315) used greatest stack depth: 19584 bytes left
[   69.009941][ T6338] IPv6: Can't replace route, no match found
[   69.546266][ T6367] Zero length message leads to an empty skb
[   70.530509][ T1224] wlan1: Trigger new scan to find an IBSS to join
[   70.613103][ T6385] netlink: 10 bytes leftover after parsing attributes in process `syz.2.228'.
[   71.005084][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.007933][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.424891][  T680] wlan1: Creating new IBSS network, BSSID aa:21:ce:83:29:0d
[   72.195412][ T6429] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[   73.418281][ T6457] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   73.422560][ T6457] netlink: 17 bytes leftover after parsing attributes in process `syz.2.261'.
[   73.808676][ T6477] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   73.812769][ T6477] netlink: 'syz.1.270': attribute type 4 has an invalid length.
[   73.815813][ T6477] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.270'.
[   73.855110][ T6470] raw_sendmsg: syz.0.267 forgot to set AF_INET. Fix it!
[   73.879835][ T6482] delete_channel: no stack
[   74.006650][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'.
[   74.187324][ T6502] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.281'.
[   74.194123][ T6507] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.281'.
[   74.569727][ T6523] netlink: 'syz.2.291': attribute type 10 has an invalid length.
[   74.583241][ T6523] bond0: (slave bond_slave_0): Releasing backup interface
[   74.587213][ T6523] bond_slave_0: left promiscuous mode
[   74.589520][ T6523] bond_slave_0: left allmulticast mode
[   75.067650][ T6538] netlink: 830 bytes leftover after parsing attributes in process `syz.1.297'.
[   75.074181][ T6536] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[   75.077213][ T6536] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.296'.
[   75.275600][ T6554] netlink: 'syz.2.305': attribute type 21 has an invalid length.
[   75.949003][ T6594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.320'.
[   75.969089][ T6596] netlink: 'syz.1.321': attribute type 13 has an invalid length.
[   75.972654][ T6596] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.321'.
[   76.216992][ T6614] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   76.753204][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[   77.569638][ T6644] netlink: 830 bytes leftover after parsing attributes in process `syz.0.343'.
[   77.589772][ T6656] pim6reg1: entered allmulticast mode
[   77.642208][ T6662] netlink: 'syz.2.349': attribute type 39 has an invalid length.
[   77.647465][ T6662] netlink: 'syz.2.349': attribute type 4 has an invalid length.
[   77.658430][ T6662] netlink: 152 bytes leftover after parsing attributes in process `syz.2.349'.
[   77.683065][ T6662] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   79.508699][ T6740] netlink: 'syz.2.384': attribute type 11 has an invalid length.
[   79.512376][ T6748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.529192][ T6740] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.384'.
[   79.543727][ T6740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.588683][ T5834] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13
[   79.613003][ T6757] netlink: 'syz.1.390': attribute type 10 has an invalid length.
[   79.645129][ T6757] bond0: (slave netdevsim0): Releasing backup interface
[   79.650463][ T6757] bridge0: port 3(netdevsim0) entered blocking state
[   79.658743][ T6757] bridge0: port 3(netdevsim0) entered disabled state
[   79.668888][ T6757] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   79.672711][ T6763] netlink: 'syz.0.394': attribute type 10 has an invalid length.
[   79.677279][ T6757] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   79.685112][ T6763] batman_adv: batadv0: Adding interface: team0
[   79.687380][ T6763] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.701272][ T6763] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   81.149268][ T6811] netlink: 3 bytes leftover after parsing attributes in process `syz.1.416'.
[   81.241725][   T10] cfg80211: failed to load regulatory.db
[   81.367782][ T6826] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.424'.
[   81.547419][ T6841] netlink: 'syz.2.431': attribute type 10 has an invalid length.
[   81.551073][ T6841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.431'.
[   81.557435][ T6841] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   81.654040][ T6847] netlink: 809 bytes leftover after parsing attributes in process `syz.2.434'.
[   81.662131][ T6847] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.434'.
[   81.738268][ T6853] netlink: 'syz.1.437': attribute type 10 has an invalid length.
[   81.748754][ T6853] batman_adv: batadv0: Adding interface: team0
[   81.752032][ T6853] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.762194][ T6853] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   81.901808][ T6860] netlink: 'syz.1.440': attribute type 10 has an invalid length.
[   81.959442][ T6868] netlink: 17 bytes leftover after parsing attributes in process `syz.0.443'.
[   81.965780][ T6868] netlink: zone id is out of range
[   81.968149][ T6868] netlink: zone id is out of range
[   81.971247][ T6868] netlink: zone id is out of range
[   81.973645][ T6868] netlink: zone id is out of range
[   81.976073][ T6868] netlink: zone id is out of range
[   81.978633][ T6868] netlink: zone id is out of range
[   81.988771][ T6868] netlink: zone id is out of range
[   82.188692][ T6881] netlink: 'syz.2.449': attribute type 29 has an invalid length.
[   82.315403][ T6887] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.451'.
[   82.669382][ T6892] netlink: 'syz.2.454': attribute type 15 has an invalid length.
[   82.721032][ T6902] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.459'.
[   82.806432][ T6906] netlink: 'syz.1.461': attribute type 1 has an invalid length.
[   82.811359][ T6906] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.461'.
[   83.916874][ T6942] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.476'.
[   84.694661][ T6995] netlink: 'syz.1.502': attribute type 25 has an invalid length.
[   84.697354][ T6995] netlink: 'syz.1.502': attribute type 1 has an invalid length.
[   84.711024][ T6996] netlink: 'syz.2.500': attribute type 10 has an invalid length.
[   84.734519][ T7000] syz.1.504 uses obsolete (PF_INET,SOCK_PACKET)
[   87.401413][ T5834] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[   89.939995][ T7191] __nla_validate_parse: 5 callbacks suppressed
[   89.940006][ T7191] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.591'.
[   90.203844][ T7213] netlink: 'syz.0.599': attribute type 29 has an invalid length.
[   90.211936][ T7213] netlink: 'syz.0.599': attribute type 3 has an invalid length.
[   90.214896][ T7213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.599'.
[   90.326265][ T5834] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8
[   91.973463][ T7278] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[   92.535137][ T7308] netlink: 'syz.0.645': attribute type 10 has an invalid length.
[   92.537888][ T7308] netlink: 55 bytes leftover after parsing attributes in process `syz.0.645'.
[   94.327642][ T7350] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.663'.
[   94.332206][ T7350] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.663'.
[   94.425999][ T7356] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[   94.476543][ T7361] netlink: 'syz.2.668': attribute type 10 has an invalid length.
[   94.478979][ T7361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.668'.
[   94.567930][ T5825] cgroup: fork rejected by pids controller in /syz0
[   94.778509][ T5825] syz-executor (5825) used greatest stack depth: 19192 bytes left
[   95.264479][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.269237][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.276021][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.279989][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.286634][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.589506][ T7390] chnl_net:caif_netlink_parms(): no params data found
[   95.652585][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.655413][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.657914][ T7390] bridge_slave_0: entered allmulticast mode
[   95.662172][ T7390] bridge_slave_0: entered promiscuous mode
[   95.666734][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.669139][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.672266][ T7390] bridge_slave_1: entered allmulticast mode
[   95.675065][ T7390] bridge_slave_1: entered promiscuous mode
[   95.697779][ T7390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.702801][ T7390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.727599][ T7390] team0: Port device team_slave_0 added
[   95.731413][ T7390] team0: Port device team_slave_1 added
[   95.762369][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.765049][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.775647][ T7390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.786654][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.789204][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.798257][ T7390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.807877][ T7420] bridge0: port 3(bond0) entered disabled state
[   95.811000][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.814475][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.819034][ T7420] bridge0: entered allmulticast mode
[   95.836763][ T7420] bridge0: port 3(bond0) entered blocking state
[   95.839338][ T7420] bridge0: port 3(bond0) entered forwarding state
[   95.842157][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.844453][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.846942][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.849231][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.854314][ T7420] bridge0: entered promiscuous mode
[   95.932621][ T7390] hsr_slave_0: entered promiscuous mode
[   95.937290][ T7390] hsr_slave_1: entered promiscuous mode
[   95.946471][ T7390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.951543][ T7390] Cannot create hsr debugfs directory
[   96.274126][ T7390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.371036][ T7390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.428055][ T7390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.513889][ T7390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.793767][ T7390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.798914][ T7390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.804455][ T7390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.808822][ T7390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.903220][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.919234][ T7390] 8021q: adding VLAN 0 to HW filter on device team0
[   96.927292][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.930452][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.952602][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.955619][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.097539][ T7390] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.139005][ T7390] veth0_vlan: entered promiscuous mode
[   97.146849][ T7390] veth1_vlan: entered promiscuous mode
[   97.163727][ T7390] veth0_macvtap: entered promiscuous mode
[   97.172622][ T7390] veth1_macvtap: entered promiscuous mode
[   97.187796][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.197481][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.203112][ T7390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.206408][ T7390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.209244][ T7390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.213900][ T7390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.219512][ T7454] IPv6: Can't replace route, no match found
[   97.284623][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.287973][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.322405][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.325407][ T5218] Bluetooth: hci0: command tx timeout
[   97.325745][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.455057][ T7474] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.711'.
[   97.598048][ T7484] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   98.685070][ T7499] netlink: 132 bytes leftover after parsing attributes in process `syz.0.721'.
[   98.718742][ T7505] netlink: 10 bytes leftover after parsing attributes in process `syz.2.722'.
[   98.753216][ T5218] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   98.758276][ T7509] netlink: 'syz.2.724': attribute type 10 has an invalid length.
[   98.764686][ T7509] bridge0: port 3(bond0) entered disabled state
[   98.766943][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.769676][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.775294][ T7509] bridge0: left promiscuous mode
[   98.777547][ T7509] bridge0: left allmulticast mode
[   98.781844][ T7509] bridge0: port 3(bond0) entered blocking state
[   98.784309][ T7509] bridge0: port 3(bond0) entered forwarding state
[   98.787191][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.789984][ T7509] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.792904][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.795457][ T7509] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.803839][ T7509] team0: Port device bridge0 added
[   98.887531][ T7513] netdevsim netdevsim1 : renamed from netdevsim0
[   98.918879][ T7515] netlink: 'syz.2.725': attribute type 2 has an invalid length.
[   98.928512][ T7515] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.725'.
[   99.400618][ T5834] Bluetooth: hci0: command tx timeout
[   99.583031][ T7506] delete_channel: no stack
[  100.053274][ T7552] netlink: 'syz.1.744': attribute type 29 has an invalid length.
[  100.057594][ T7552] netlink: 'syz.1.744': attribute type 29 has an invalid length.
[  100.070714][ T7552] netlink: 'syz.1.744': attribute type 29 has an invalid length.
[  100.136858][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.139750][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.145702][ T7561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.148158][ T7561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.314691][ T7578] net_ratelimit: 75 callbacks suppressed
[  100.314703][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.909505][ T7615] netlink: 'syz.2.774': attribute type 10 has an invalid length.
[  100.918075][ T7615] dummy0: entered promiscuous mode
[  100.920118][ T7615] dummy0: entered allmulticast mode
[  101.524112][   T68] .3c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  101.529609][ T5834] Bluetooth: hci0: command tx timeout
[  101.569017][ T7653] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.792'.
[  102.846217][ T7693] netlink: 'syz.0.809': attribute type 46 has an invalid length.
[  103.377015][ T7730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  103.402951][ T7730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  103.560935][ T5834] Bluetooth: hci0: command tx timeout
[  104.333473][ T7730] syz.2.826 (7730) used greatest stack depth: 18640 bytes left
[  105.039418][ T5834] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  105.316845][ T7780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.849'.
[  105.385563][ T7782] netlink: 'syz.2.850': attribute type 10 has an invalid length.
[  105.393218][ T7782] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  106.530900][ T7813] netlink: 17 bytes leftover after parsing attributes in process `syz.0.865'.
[  106.534725][ T7813] netlink: zone id is out of range
[  106.537009][ T7813] netlink: zone id is out of range
[  106.539258][ T7813] netlink: zone id is out of range
[  106.544450][ T7813] netlink: zone id is out of range
[  106.546716][ T7813] netlink: zone id is out of range
[  106.549111][ T7813] netlink: zone id is out of range
[  106.551875][ T7813] netlink: zone id is out of range
[  106.554145][ T7813] netlink: zone id is out of range
[  106.556306][ T7813] netlink: zone id is out of range
[  106.558411][ T7813] netlink: zone id is out of range
[  106.802133][ T7828] netlink: 'syz.1.871': attribute type 3 has an invalid length.
[  106.805180][ T7828] netlink: 'syz.1.871': attribute type 1 has an invalid length.
[  106.807746][ T7828] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.871'.
[  109.371600][ T5834] Bluetooth: hci1: Malformed HCI Event
[  109.452149][ T5834] Bluetooth: hci1: unexpected event 0x3d length: 151 > 14
[  109.574293][ T7862] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.884'.
[  109.581602][ T7862] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  109.699874][ T5834] Bluetooth: Frame is too long (len 13, expected len 4)
[  109.758812][ T7865] syz.0.886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  109.777820][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: syz.0.886 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  109.777836][ T7865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.777841][ T7865] Call Trace:
[  109.777846][ T7865]  <TASK>
[  109.777849][ T7865]  dump_stack_lvl+0x189/0x250
[  109.777865][ T7865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.777876][ T7865]  ? __pfx__printk+0x10/0x10
[  109.777888][ T7865]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  109.777899][ T7865]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  109.777910][ T7865]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  109.777922][ T7865]  warn_alloc+0x214/0x310
[  109.777931][ T7865]  ? stack_depot_save_flags+0x445/0x900
[  109.777943][ T7865]  ? __pfx_warn_alloc+0x10/0x10
[  109.777953][ T7865]  ? kasan_save_track+0x4f/0x80
[  109.777964][ T7865]  ? xskq_create+0x56/0x170
[  109.777974][ T7865]  ? xsk_init_queue+0xb0/0x110
[  109.777982][ T7865]  ? xsk_setsockopt+0x4de/0x710
[  109.777990][ T7865]  ? do_sock_setsockopt+0x17c/0x1b0
[  109.777998][ T7865]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  109.778006][ T7865]  ? do_syscall_64+0xfa/0x3b0
[  109.778017][ T7865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.778028][ T7865]  __vmalloc_node_range_noprof+0x125/0x12f0
[  109.778048][ T7865]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  109.778059][ T7865]  ? __kasan_kmalloc+0x93/0xb0
[  109.778068][ T7865]  vmalloc_user_noprof+0xad/0xf0
[  109.778077][ T7865]  ? xskq_create+0xbf/0x170
[  109.778086][ T7865]  xskq_create+0xbf/0x170
[  109.778097][ T7865]  xsk_init_queue+0xb0/0x110
[  109.778107][ T7865]  xsk_setsockopt+0x4de/0x710
[  109.778116][ T7865]  ? __pfx_xsk_setsockopt+0x10/0x10
[  109.778126][ T7865]  ? __fget_files+0x2a/0x420
[  109.778137][ T7865]  ? aa_sock_opt_perm+0x74/0x110
[  109.778149][ T7865]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  109.778159][ T7865]  ? __pfx_xsk_setsockopt+0x10/0x10
[  109.778194][ T7865]  do_sock_setsockopt+0x17c/0x1b0
[  109.778206][ T7865]  __x64_sys_setsockopt+0x13f/0x1b0
[  109.778217][ T7865]  do_syscall_64+0xfa/0x3b0
[  109.778227][ T7865]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.778237][ T7865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.778246][ T7865]  ? exc_page_fault+0x9f/0xf0
[  109.778257][ T7865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.778265][ T7865] RIP: 0033:0x7fdaa118eb69
[  109.778273][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.778280][ T7865] RSP: 002b:00007fdaa1f3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  109.778290][ T7865] RAX: ffffffffffffffda RBX: 00007fdaa13b5fa0 RCX: 00007fdaa118eb69
[  109.778296][ T7865] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  109.778301][ T7865] RBP: 00007fdaa1211df1 R08: 0000000000000004 R09: 0000000000000000
[  109.778305][ T7865] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  109.778310][ T7865] R13: 0000000000000000 R14: 00007fdaa13b5fa0 R15: 00007ffe5909e0c8
[  109.778322][ T7865]  </TASK>
[  109.778326][ T7865] Mem-Info:
[  109.856770][ T7879] netlink: 'syz.1.893': attribute type 2 has an invalid length.
[  109.866714][ T7865] active_anon:5015 inactive_anon:0 isolated_anon:0
[  109.866714][ T7865]  active_file:10628 inactive_file:38231 isolated_file:0
[  109.866714][ T7865]  unevictable:1768 dirty:134 writeback:0
[  109.866714][ T7865]  slab_reclaimable:9372 slab_unreclaimable:55549
[  109.866714][ T7865]  mapped:18010 shmem:2444 pagetables:1054
[  109.866714][ T7865]  sec_pagetables:0 bounce:0
[  109.866714][ T7865]  kernel_misc_reclaimable:0
[  109.866714][ T7865]  free:291400 free_pcp:16005 free_cma:0
[  109.869956][ T7879] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.893'.
[  109.876266][ T7865] Node 0 active_anon:11144kB inactive_anon:0kB active_file:14896kB inactive_file:145736kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:14632kB dirty:364kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8528kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.949389][ T7865] Node 1 active_anon:8916kB inactive_anon:0kB active_file:27616kB inactive_file:7188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:57408kB dirty:172kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3096kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.965129][ T7865] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.978561][ T7865] lowmem_reserve[]: 0 812 812 812 812
[  109.981832][ T7865] Node 0 DMA32 free:277580kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11144kB inactive_anon:0kB active_file:14896kB inactive_file:145736kB unevictable:3536kB writepending:364kB present:1556484kB managed:831912kB mlocked:0kB bounce:0kB free_pcp:35328kB local_pcp:19820kB free_cma:0kB
[  110.006948][ T7865] lowmem_reserve[]: 0 0 0 0 0
[  110.009106][ T7865] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.024055][ T7865] lowmem_reserve[]: 0 0 854 854 854
[  110.026562][ T7865] Node 1 Normal free:413644kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8916kB inactive_anon:0kB active_file:27616kB inactive_file:7188kB unevictable:3536kB writepending:172kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30360kB local_pcp:13172kB free_cma:0kB
[  110.045665][ T7865] lowmem_reserve[]: 0 0 0 0 0
[  110.049559][ T7865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  110.055987][ T7865] Node 0 DMA32: 1789*4kB (UM) 983*8kB (UME) 452*16kB (UME) 212*32kB (UME) 214*64kB (UME) 63*128kB (UM) 28*256kB (UME) 14*512kB (UME) 5*1024kB (UME) 3*2048kB (UME) 49*4096kB (M) = 277100kB
[  110.064499][ T7865] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  110.075339][ T7865] Node 1 Normal: 1053*4kB (UME) 99*8kB (UME) 372*16kB (UME) 600*32kB (UME) 260*64kB (UME) 34*128kB (UME) 14*256kB (UME) 9*512kB (UME) 10*1024kB (UME) 6*2048kB (UM) 81*4096kB (UM) = 413644kB
[  110.084376][ T7865] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.088718][ T7865] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.092190][ T7865] 51303 total pagecache pages
[  110.093952][ T7865] 0 pages in swap cache
[  110.095464][ T7865] Free swap  = 124996kB
[  110.096919][ T7865] Total swap = 124996kB
[  110.098470][ T7865] 786301 pages RAM
[  110.099825][ T7865] 0 pages HighMem/MovableOnly
[  110.102273][ T7865] 241075 pages reserved
[  110.103798][ T7865] 0 pages cma reserved
[  110.261634][ T7896] netlink: 'syz.2.900': attribute type 30 has an invalid length.
[  110.587040][ T7916] netlink: 'syz.0.908': attribute type 10 has an invalid length.
[  110.605952][ T7916] team0: Port device dummy0 added
[  110.843615][ T7937] netlink: 830 bytes leftover after parsing attributes in process `syz.1.917'.
[  111.223653][ T7961] sctp: [Deprecated]: syz.0.929 (pid 7961) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.223653][ T7961] Use struct sctp_sack_info instead
[  111.284119][ T7963] netlink: 'syz.1.930': attribute type 10 has an invalid length.
[  111.347855][ T7963] team0: Device ipvlan1 failed to register rx_handler
[  111.496225][ T7969] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.931'.
[  114.248672][ T7963] syz.1.930 (7963) used greatest stack depth: 17528 bytes left
[  216.570266][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  216.572583][    C1] rcu: 	1-....: (10499 ticks this GP) idle=44cc/1/0x4000000000000000 softirq=22646/22647 fqs=5250
[  216.577161][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  216.579311][    C1] rcu: 	 number:   993565          0            0
[  216.581475][    C1] rcu: 	cputime:    24174      28305           89   ==> 52490(ms)
[  216.584087][    C1] rcu: 	(t=10501 jiffies g=15161 q=756 ncpus=2)
[  216.586540][    C1] CPU: 1 UID: 0 PID: 7973 Comm: syz.0.933 Not tainted 6.16.0-rc6-syzkaller-00434-gcd7c97f4584a-dirty #0 PREEMPT(full) 
[  216.586556][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.586587][    C1] RIP: 0010:rcu_read_unlock_special+0x87/0x4c0
[  216.586612][    C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 92 37 f8 10 41 f7 c6 00 00 f0 00 74 49 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b
[  216.586621][    C1] RSP: 0018:ffffc900001e0600 EFLAGS: 00000206
[  216.586632][    C1] RAX: d82c793cdf03d200 RBX: 1ffff9200003c0c8 RCX: d82c793cdf03d200
[  216.586640][    C1] RDX: 0000000000000000 RSI: ffffffff8d998701 RDI: ffffffff8be29f80
[  216.586648][    C1] RBP: ffffc900001e06f8 R08: ffffffff8fa1e8f7 R09: 1ffffffff1f43d1e
[  216.586656][    C1] R10: dffffc0000000000 R11: fffffbfff1f43d1f R12: ffffffff8e144400
[  216.586664][    C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002
[  216.586672][    C1] FS:  00007fdaa1f3c6c0(0000) GS:ffff8881a3c1f000(0000) knlGS:0000000000000000
[  216.586681][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.586688][    C1] CR2: 00007fdaa1f3bfc8 CR3: 0000000024aba000 CR4: 00000000000006f0
[  216.586721][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  216.586729][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  216.586735][    C1] Call Trace:
[  216.586743][    C1]  <IRQ>
[  216.586749][    C1]  ? unwind_next_frame+0xa5/0x2390
[  216.586766][    C1]  ? unwind_next_frame+0xa5/0x2390
[  216.586779][    C1]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  216.586797][    C1]  ? __pfx_debug_smp_processor_id+0x10/0x10
[  216.586814][    C1]  ? unwind_next_frame+0xa5/0x2390
[  216.586841][    C1]  __rcu_read_unlock+0x84/0xe0
[  216.586859][    C1]  ? unwind_next_frame+0xa5/0x2390
[  216.586870][    C1]  unwind_next_frame+0x19ae/0x2390
[  216.586889][    C1]  ? unwind_next_frame+0xa5/0x2390
[  216.586902][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.586919][    C1]  ? rcu_core+0xc34/0x1710
[  216.586929][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  216.586945][    C1]  arch_stack_walk+0x11c/0x150
[  216.586965][    C1]  ? stack_depot_save_flags+0x168/0x900
[  216.586984][    C1]  stack_trace_save+0x9c/0xe0
[  216.586998][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  216.587014][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  216.587027][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  216.587044][    C1]  kasan_save_track+0x3e/0x80
[  216.587060][    C1]  ? kasan_save_track+0x3e/0x80
[  216.587074][    C1]  ? kasan_save_free_info+0x46/0x50
[  216.587086][    C1]  ? __kasan_slab_free+0x62/0x70
[  216.587095][    C1]  ? slab_free_after_rcu_debug+0x129/0x2a0
[  216.587109][    C1]  ? rcu_core+0xca8/0x1710
[  216.587119][    C1]  ? handle_softirqs+0x286/0x870
[  216.587129][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  216.587138][    C1]  ? irq_exit_rcu+0x9/0x30
[  216.587147][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  216.587159][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.587208][    C1]  kasan_save_free_info+0x46/0x50
[  216.587223][    C1]  __kasan_slab_free+0x62/0x70
[  216.587234][    C1]  slab_free_after_rcu_debug+0x129/0x2a0
[  216.587248][    C1]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  216.587262][    C1]  ? rcu_core+0xc34/0x1710
[  216.587273][    C1]  rcu_core+0xca8/0x1710
[  216.587303][    C1]  ? __pfx_rcu_core+0x10/0x10
[  216.587313][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.587336][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  216.587352][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  216.587366][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  216.587390][    C1]  handle_softirqs+0x286/0x870
[  216.587406][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  216.587421][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  216.587438][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  216.587456][    C1]  __irq_exit_rcu+0xca/0x1f0
[  216.587470][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  216.587491][    C1]  irq_exit_rcu+0x9/0x30
[  216.587502][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  216.587516][    C1]  </IRQ>
[  216.587520][    C1]  <TASK>
[  216.587525][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.587535][    C1] RIP: 0010:stack_depot_save_flags+0x168/0x900
[  216.587550][    C1] Code: c8 31 c5 c1 c0 18 29 c5 48 8b 05 33 89 e7 14 8b 0d 25 89 e7 14 21 e9 48 c1 e1 04 4c 8d 3c 08 65 ff 05 dc b1 a9 0d 4c 8b 24 08 <4d> 39 fc 0f 84 88 00 00 00 45 89 d5 eb 2d 90 0f 0b 90 31 c0 e9 ce
[  216.587558][    C1] RSP: 0018:ffffc90002b6f888 EFLAGS: 00000282
[  216.587613][    C1] RAX: ffff888135400000 RBX: 000000000000adc0 RCX: 00000000003011e0
[  216.587621][    C1] RDX: 0000000009c5cd14 RSI: 0000000000000001 RDI: 00000000bad61841
[  216.587628][    C1] RBP: 00000000f543011e R08: 0000000045461f4c R09: 00000000b62c0f18
[  216.587635][    C1] R10: 000000000000000c R11: ffffffff81acf520 R12: ffff888029b61b80
[  216.587642][    C1] R13: ffff88810a86dc00 R14: ffffc90002b6f900 R15: ffff8881357011e0
[  216.587655][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  216.587680][    C1]  ? stack_depot_save_flags+0x40/0x900
[  216.587694][    C1]  ? arch_stack_walk+0xfc/0x150
[  216.587714][    C1]  kasan_save_track+0x4f/0x80
[  216.587730][    C1]  ? kasan_save_track+0x3e/0x80
[  216.587744][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  216.587753][    C1]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  216.587764][    C1]  ? ref_tracker_alloc+0x133/0x460
[  216.587776][    C1]  ? sk_alloc+0x1b1/0x370
[  216.587787][    C1]  ? __netlink_create+0x65/0x260
[  216.587802][    C1]  ? netlink_create+0x3ca/0x590
[  216.587812][    C1]  ? __sock_create+0x4b3/0x9f0
[  216.587827][    C1]  ? __sys_socket+0xd7/0x1b0
[  216.587847][    C1]  ? __x64_sys_socket+0x7a/0x90
[  216.587861][    C1]  ? do_syscall_64+0xfa/0x3b0
[  216.587874][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.587927][    C1]  __kasan_kmalloc+0x93/0xb0
[  216.587940][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  216.587952][    C1]  ? ref_tracker_alloc+0x133/0x460
[  216.587970][    C1]  ref_tracker_alloc+0x133/0x460
[  216.587988][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  216.588017][    C1]  ? sock_lock_init+0x41c/0x870
[  216.588029][    C1]  ? sk_prot_alloc+0x161/0x220
[  216.588044][    C1]  sk_alloc+0x1b1/0x370
[  216.588061][    C1]  __netlink_create+0x65/0x260
[  216.588080][    C1]  ? __pfx_genl_release+0x10/0x10
[  216.588093][    C1]  netlink_create+0x3ca/0x590
[  216.588104][    C1]  ? __pfx_genl_unbind+0x10/0x10
[  216.588116][    C1]  ? __pfx_genl_bind+0x10/0x10
[  216.588130][    C1]  __sock_create+0x4b3/0x9f0
[  216.588154][    C1]  __sys_socket+0xd7/0x1b0
[  216.588172][    C1]  __x64_sys_socket+0x7a/0x90
[  216.588189][    C1]  do_syscall_64+0xfa/0x3b0
[  216.588205][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.588215][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.588230][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.588241][    C1] RIP: 0033:0x7fdaa118eb69
[  216.588253][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.588262][    C1] RSP: 002b:00007fdaa1f3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  216.588273][    C1] RAX: ffffffffffffffda RBX: 00007fdaa13b5fa0 RCX: 00007fdaa118eb69
[  216.588280][    C1] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 0000000000000010
[  216.588287][    C1] RBP: 00007fdaa1211df1 R08: 0000000000000000 R09: 0000000000000000
[  216.588294][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.588300][    C1] R13: 0000000000000000 R14: 00007fdaa13b5fa0 R15: 00007ffe5909e0c8
[  216.588323][    C1]  </TASK>
[  216.873224][    C1] sched: DL replenish lagged too much
[  221.561135][ T5218] Bluetooth: hci0: command 0x0406 tx timeout

VM DIAGNOSIS:
09:47:23  Registers:
info registers vcpu 0

CPU#0
RAX=d1e057335c1fa000 RBX=ffffffff81975f18 RCX=d1e057335c1fa000 RDX=0000000000000001
RSI=ffffffff8d998701 RDI=ffffffff8be29f80 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa1e8f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6e84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559e45d54288 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df930
R8 =ffff8881080b0237 R9 =1ffff11021016046 R10=dffffc0000000000 R11=ffffffff85471fa0
R12=dffffc0000000000 R13=ffffffff99af58c6 R14=ffffffff99dfa1e0 R15=0000000000000000
RIP=ffffffff8547201c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdaa1f3c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdaa1f3bfc8 CR3=0000000024aba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0358387498 00007f0358387470 XMM03=00007f03583874a8 00007f03583874a0
XMM04=00007f0358eed100 00007f0358387460 XMM05=00007f0358387478 00007f03583874c0
XMM06=00007f03583874b8 00007f03583874b0 XMM07=00007f03583874a8 00007f03583874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f0358212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
