last executing test programs:

990.712216ms ago: executing program 1 (id=159):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

939.756012ms ago: executing program 1 (id=162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="911008000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0x5, &(0x7f0000000040)=r6, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00bc3295ec46050000e9ffffffffffffff00000014c262abb4ce48c5aea0b9c1487ee7ed9508be18e4e000800000e425a86000a44a6a4814fdd66b989695bef4d499f679f120d89dc1b22bf2cbe1978db3ae5077c03fa9fb046f6845760a241a31ca51e81be0a0784ceb004c9cd6cddccc4c1c6846066faa9ec31014cdc4df9c3aab2078b893ec6b5dfe"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ea}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]})

888.78172ms ago: executing program 0 (id=163):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = getpid()
r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x12, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r5)

669.447933ms ago: executing program 1 (id=165):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000e40)=""/291, 0x123}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f0000000f80)=""/196, 0xc4}, {&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000540)=""/212, 0xd4}], 0x8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

510.086006ms ago: executing program 1 (id=166):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000002000000010000130400000004000000000000f00900000000305f005f0100"], 0x0, 0x38, 0x0, 0x1, 0x1}, 0x28)

509.963039ms ago: executing program 1 (id=167):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x4040844}, 0x0)

509.565228ms ago: executing program 1 (id=168):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="130300005500911fdabcf8b30771a54a07"], 0xfe33)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e3d17b25bfe730000000400000004000000050083a3e51bb8a3344879b33efa9e8e308094", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
close(0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007000c00028008000140ac1414280c000180080001400b010102050014000200000005000500020000e60400010006000000b96e11371882d3177ab4d4915df07e00f8a1ad85f55ff64ff538ee4d082647308de8cd6faa824f3f25d0fdaa7fdc9dde4ef4c30ff9067c401b734509010b92f7ace65dfab0ad9f778d7ed51dd3903b6155474b48cb2661862a3a2eab20e4bcab72c7513104959200"], 0x6c}}, 0x0)

379.073564ms ago: executing program 0 (id=169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210a, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, 0x0, 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001800))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18)
r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/35])
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
recvmsg$unix(r3, 0x0, 0x100)
r8 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r9)
ioctl$SIOCSIFHWADDR(r9, 0x8b25, &(0x7f0000000000)={'wlan1\x00', @random="c30020001400"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

298.962597ms ago: executing program 2 (id=170):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055)

267.47668ms ago: executing program 2 (id=171):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d"], 0x34}}, 0x0)

265.769958ms ago: executing program 0 (id=172):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016"], 0x48)

222.868428ms ago: executing program 0 (id=173):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"})

222.583829ms ago: executing program 2 (id=174):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x41, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

146.041089ms ago: executing program 2 (id=175):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x2, 0xca, 0x3, 0x0, 0x2, 0x28400, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_config_ext={0x8, 0x2006}, 0x40, 0xc078, 0x7, 0x3, 0xbafb, 0xc65d, 0x8, 0x0, 0x9, 0x0, 0xe0c}, r0, 0x8, r1, 0x8)

145.659947ms ago: executing program 0 (id=176):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f0000000640)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @exit], &(0x7f0000000280)='GPL\x00', 0x8, 0xdd, &(0x7f0000000a40)=""/221, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

89.498714ms ago: executing program 0 (id=177):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e00f6f775e453b1800000121f00", 0x2e}], 0x1}, 0x40000)

136.637µs ago: executing program 2 (id=178):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x10, 0x8}, 0x20)

0s ago: executing program 2 (id=179):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0x1d, 0x2, 0x6)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34491' (ED25519) to the list of known hosts.
syzkaller login: [   56.078749][ T5831] cgroup: Unknown subsys name 'net'
[   56.222379][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.226342][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.580002][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.614713][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.031591][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   67.107103][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.110616][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.113050][ T5877] bridge_slave_0: entered allmulticast mode
[   67.116850][ T5877] bridge_slave_0: entered promiscuous mode
[   67.128869][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.132125][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.134566][ T5877] bridge_slave_1: entered allmulticast mode
[   67.139962][ T5877] bridge_slave_1: entered promiscuous mode
[   67.203800][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.208495][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.228355][ T5877] team0: Port device team_slave_0 added
[   67.232062][ T5877] team0: Port device team_slave_1 added
[   67.257175][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.259683][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.268159][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.277327][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.280668][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.289124][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.314843][ T5877] hsr_slave_0: entered promiscuous mode
[   67.317372][ T5877] hsr_slave_1: entered promiscuous mode
[   67.413857][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.421812][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.426526][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.434377][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.452600][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.455109][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.457830][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.460295][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.496727][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.506863][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.510793][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.518772][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   67.525218][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.527652][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.534435][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.536812][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.626947][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.651768][ T5877] veth0_vlan: entered promiscuous mode
[   67.656836][ T5877] veth1_vlan: entered promiscuous mode
[   67.674002][ T5877] veth0_macvtap: entered promiscuous mode
[   67.678002][ T5877] veth1_macvtap: entered promiscuous mode
[   67.688923][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.696097][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.703647][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.707634][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.713935][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.716885][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.235592][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.246389][ T5919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.260659][ T5919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.265504][ T5919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.268530][ T5919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.284766][ T5920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.294899][ T5919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.303581][ T5919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.307298][ T5919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.310429][ T5919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.341491][ T5919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.345864][ T5919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.353292][ T5919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.356827][ T5919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.362372][ T5919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.623015][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.653813][ T5914] chnl_net:caif_netlink_parms(): no params data found
[   68.726322][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.754730][ T5918] chnl_net:caif_netlink_parms(): no params data found
[   68.818640][ T5922] chnl_net:caif_netlink_parms(): no params data found
[   68.824888][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.827785][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.831712][ T5914] bridge_slave_0: entered allmulticast mode
[   68.834671][ T5914] bridge_slave_0: entered promiscuous mode
[   68.859499][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.861961][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.864730][ T5914] bridge_slave_1: entered allmulticast mode
[   68.868377][ T5914] bridge_slave_1: entered promiscuous mode
[   68.922105][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.934770][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.983066][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.986138][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.989506][ T5918] bridge_slave_0: entered allmulticast mode
[   68.993598][ T5918] bridge_slave_0: entered promiscuous mode
[   68.998268][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.002523][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.005540][ T5918] bridge_slave_1: entered allmulticast mode
[   69.009087][ T5918] bridge_slave_1: entered promiscuous mode
[   69.023571][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.025925][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.028505][ T5922] bridge_slave_0: entered allmulticast mode
[   69.032920][ T5922] bridge_slave_0: entered promiscuous mode
[   69.038398][ T5914] team0: Port device team_slave_0 added
[   69.042857][ T5914] team0: Port device team_slave_1 added
[   69.063561][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.066773][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.071339][ T5922] bridge_slave_1: entered allmulticast mode
[   69.075249][ T5922] bridge_slave_1: entered promiscuous mode
[   69.118886][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.121856][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.133764][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.140929][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.157742][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.160777][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.174949][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.182768][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.189961][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.209416][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.235129][ T5918] team0: Port device team_slave_0 added
[   69.259186][ T5918] team0: Port device team_slave_1 added
[   69.262954][ T5922] team0: Port device team_slave_0 added
[   69.285997][ T5914] hsr_slave_0: entered promiscuous mode
[   69.288711][ T5914] hsr_slave_1: entered promiscuous mode
[   69.294195][ T5914] debugfs: 'hsr0' already exists in 'hsr'
[   69.296376][ T5914] Cannot create hsr debugfs directory
[   69.300168][ T5922] team0: Port device team_slave_1 added
[   69.312944][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.315531][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.324759][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.357281][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.359877][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.368670][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.386162][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.388866][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.397161][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.412405][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.415104][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.424758][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.495715][ T5918] hsr_slave_0: entered promiscuous mode
[   69.498394][ T5918] hsr_slave_1: entered promiscuous mode
[   69.502248][ T5918] debugfs: 'hsr0' already exists in 'hsr'
[   69.504624][ T5918] Cannot create hsr debugfs directory
[   69.573605][ T5922] hsr_slave_0: entered promiscuous mode
[   69.576855][ T5922] hsr_slave_1: entered promiscuous mode
[   69.580853][ T5922] debugfs: 'hsr0' already exists in 'hsr'
[   69.583222][ T5922] Cannot create hsr debugfs directory
[   69.823522][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.831573][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.850671][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.856997][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.918263][ T5918] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.931215][ T5918] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.937746][ T5918] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.946501][ T5918] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.013263][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.030047][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.070567][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[   70.080619][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.083459][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.095745][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.098527][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.105710][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.128669][ T5918] 8021q: adding VLAN 0 to HW filter on device team0
[   70.145636][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.148425][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.165591][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.168287][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.207686][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.334365][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.370637][ T5916] Bluetooth: hci1: command tx timeout
[   70.373371][ T5916] Bluetooth: hci0: command tx timeout
[   70.385138][ T5914] veth0_vlan: entered promiscuous mode
[   70.394405][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.403964][ T5914] veth1_vlan: entered promiscuous mode
[   70.441881][ T5914] veth0_macvtap: entered promiscuous mode
[   70.448053][ T5918] veth0_vlan: entered promiscuous mode
[   70.452903][ T5920] Bluetooth: hci2: command tx timeout
[   70.456858][ T5914] veth1_macvtap: entered promiscuous mode
[   70.468636][ T5918] veth1_vlan: entered promiscuous mode
[   70.477086][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.491635][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.508789][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.516081][ T5918] veth0_macvtap: entered promiscuous mode
[   70.522188][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.525747][ T5918] veth1_macvtap: entered promiscuous mode
[   70.528868][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.532978][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.555556][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.573450][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.584376][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.603271][ T5718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.614173][ T5718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.616915][ T5718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.664999][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.678053][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.702141][  T317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.705148][  T317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.749925][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.753448][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.791498][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.795702][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.856970][ T5969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'.
[   71.066315][ T5975] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.19'.
[   71.415352][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.418098][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.442675][ T5991] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27'.
[   71.589569][ T5993] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   71.599801][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.794307][ T5993] Zero length message leads to an empty skb
[   71.816396][ T6000] netlink: 277 bytes leftover after parsing attributes in process `syz.1.31'.
[   71.968554][   T12] bridge_slave_1: left allmulticast mode
[   71.978624][   T12] bridge_slave_1: left promiscuous mode
[   71.990873][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.005709][   T12] bridge_slave_0: left allmulticast mode
[   72.008202][   T12] bridge_slave_0: left promiscuous mode
[   72.011405][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.315638][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.321743][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.326334][   T12] bond0 (unregistering): Released all slaves
[   72.453981][ T5920] Bluetooth: hci0: command tx timeout
[   72.458371][ T5920] Bluetooth: hci1: command tx timeout
[   72.529512][ T5920] Bluetooth: hci2: command tx timeout
[   72.544660][   T12] hsr_slave_0: left promiscuous mode
[   72.547542][   T12] hsr_slave_1: left promiscuous mode
[   72.552932][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.556299][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.558201][ T6012] netlink: 'syz.1.36': attribute type 9 has an invalid length.
[   72.570126][ T6012] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.36'.
[   72.572101][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.578288][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.597530][   T12] veth1_macvtap: left promiscuous mode
[   72.602883][   T12] veth0_macvtap: left promiscuous mode
[   72.605287][   T12] veth1_vlan: left promiscuous mode
[   72.608171][   T12] veth0_vlan: left promiscuous mode
[   72.763627][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   72.872277][ T6016] netlink: 2 bytes leftover after parsing attributes in process `syz.1.38'.
[   73.094393][   T12] team0 (unregistering): Port device team_slave_1 removed
[   73.127750][   T12] team0 (unregistering): Port device team_slave_0 removed
[   73.684110][ T6024] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.41'.
[   73.733616][ T5922] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.815432][ T5922] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.839685][ T5922] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.893935][ T5922] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.975738][ T6043] netlink: 'syz.1.46': attribute type 21 has an invalid length.
[   74.054411][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.098529][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[   74.116278][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.119952][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.142501][ T5920] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[   74.150862][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.156877][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.335923][ T6059] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   74.485998][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.527532][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'.
[   74.541975][ T5920] Bluetooth: hci1: command tx timeout
[   74.544149][ T5920] Bluetooth: hci0: command tx timeout
[   74.547110][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'.
[   74.549692][ T5922] veth0_vlan: entered promiscuous mode
[   74.567625][ T5922] veth1_vlan: entered promiscuous mode
[   74.594004][ T5922] veth0_macvtap: entered promiscuous mode
[   74.601158][ T5922] veth1_macvtap: entered promiscuous mode
[   74.609411][ T5916] Bluetooth: hci2: command tx timeout
[   74.617498][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.636167][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.650007][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.653853][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.675361][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.716495][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.797786][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.802731][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.837291][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.842916][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.933549][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.154373][ T6096] lo speed is unknown, defaulting to 1000
[   75.168307][ T6096] lo speed is unknown, defaulting to 1000
[   75.196394][ T6096] lo speed is unknown, defaulting to 1000
[   75.218825][ T6096] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.265766][ T6096] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   75.331433][ T6096] lo speed is unknown, defaulting to 1000
[   75.336365][ T6096] lo speed is unknown, defaulting to 1000
[   75.352131][ T6096] lo speed is unknown, defaulting to 1000
[   75.536777][ T6116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.701884][ T6126] warning: `syz.0.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.760582][ T6126] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   75.783730][    C0] hrtimer: interrupt took 16310 ns
[   76.614342][ T5916] Bluetooth: hci0: command tx timeout
[   76.616454][ T5916] Bluetooth: hci1: command tx timeout
[   76.689568][ T5920] Bluetooth: hci2: command tx timeout
[   76.760592][ T6148] netlink: 'syz.2.88': attribute type 10 has an invalid length.
[   76.990299][ T6148] team0 (unregistering): Port device team_slave_0 removed
[   76.998058][ T6148] team0 (unregistering): Port device team_slave_1 removed
[   77.194568][ T6174] syz.0.99 uses obsolete (PF_INET,SOCK_PACKET)
[   77.890314][   T53] wlan1: Trigger new scan to find an IBSS to join
[   79.499852][ T6209] netlink: 'syz.1.113': attribute type 10 has an invalid length.
[   79.525732][ T6209] veth0_vlan: left promiscuous mode
[   79.532010][ T6209] veth0_vlan: entered promiscuous mode
[   79.552357][ T6209] team0: Device veth0_vlan failed to register rx_handler
[   79.962661][ T6201] debugfs: '!' already exists in 'ieee80211'
[   80.405233][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.486318][ T6232] netlink: 'syz.1.120': attribute type 10 has an invalid length.
[   80.517459][ T6232] macvlan0: entered allmulticast mode
[   80.822109][ T6232] veth1_vlan: entered allmulticast mode
[   80.847187][ T6232] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   81.245703][ T6259] __nla_validate_parse: 8 callbacks suppressed
[   81.245716][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'.
[   81.356634][ T6260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.360450][ T6260] IPv6: NLM_F_CREATE should be set when creating new route
[   81.363890][ T6260] IPv6: NLM_F_CREATE should be set when creating new route
[   81.519399][ T6232] syz.1.120 (6232) used greatest stack depth: 18680 bytes left
[   82.097596][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'.
[   82.124344][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'.
[   82.254005][ T6288] syzkaller0: entered promiscuous mode
[   82.256166][ T6288] syzkaller0: entered allmulticast mode
[   82.740191][ T6297] =======================================================
[   82.740191][ T6297] WARNING: The mand mount option has been deprecated and
[   82.740191][ T6297]          and is ignored by this kernel. Remove the mand
[   82.740191][ T6297]          option from the mount to silence this warning.
[   82.740191][ T6297] =======================================================
[   82.930470][ T1089] wlan1: Trigger new scan to find an IBSS to join
[   83.754879][ T6300] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.142'.
[   83.894500][   T36] wlan1: Creating new IBSS network, BSSID 96:6f:7c:64:d5:ba
[   84.171451][ T6337] netlink: 'syz.1.159': attribute type 10 has an invalid length.
[   84.193095][ T6337] team0: Port device netdevsim0 added
[   84.313329][ T6348] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   84.378904][ T6351] netlink: 'syz.1.165': attribute type 29 has an invalid length.
[   84.384959][ T6351] netlink: 'syz.1.165': attribute type 29 has an invalid length.
[   84.391451][ T6351] netlink: 'syz.1.165': attribute type 29 has an invalid length.
[   84.672064][ T6367] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   84.937641][ T6412] openvswitch: netlink: IP tunnel TTL not specified.
[   85.085562][ T6447] netlink: 10 bytes leftover after parsing attributes in process `syz.0.177'.
Connection to localhost closed by remote host.
[   85.775928][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.835448][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.882341][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.918742][   T13] team0: Port device netdevsim0 removed
[   85.922682][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.052568][   T13] bridge_slave_1: left allmulticast mode
[   86.054665][   T13] bridge_slave_1: left promiscuous mode
[   86.057142][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.062586][   T13] bridge_slave_0: left allmulticast mode
[   86.064938][   T13] bridge_slave_0: left promiscuous mode
[   86.067386][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.353242][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.360594][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.366153][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[   86.371869][   T13] veth1_vlan: left allmulticast mode
[   86.375816][   T13] bond0 (unregistering): Released all slaves
[   86.666391][   T13] hsr_slave_0: left promiscuous mode
[   86.668809][   T13] hsr_slave_1: left promiscuous mode
[   86.671487][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.673993][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.677642][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.683842][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.696106][   T13] veth1_macvtap: left promiscuous mode
[   86.698599][   T13] veth0_macvtap: left promiscuous mode
[   86.702313][   T13] veth1_vlan: left promiscuous mode
[   86.772398][  T792] cfg80211: failed to load regulatory.db
[   87.037401][   T13] team0 (unregistering): Port device team_slave_1 removed
[   87.071537][   T13] team0 (unregistering): Port device team_slave_0 removed
[   87.348012][    T9] lo speed is unknown, defaulting to 1000
[   87.351035][    T9] infiniband syz2: ib_query_port failed (-19)
[   87.647419][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.702609][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.749855][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.794772][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.874855][   T13] bridge_slave_1: left allmulticast mode
[   87.877169][   T13] bridge_slave_1: left promiscuous mode
[   87.881664][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.887446][   T13] bridge_slave_0: left allmulticast mode
[   87.890355][   T13] bridge_slave_0: left promiscuous mode
[   87.892364][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.165823][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.171903][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.176934][   T13] bond0 (unregistering): Released all slaves
[   88.521474][   T13] hsr_slave_0: left promiscuous mode
[   88.524886][   T13] hsr_slave_1: left promiscuous mode
[   88.527726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.535146][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.538938][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.542356][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.554570][   T13] veth1_macvtap: left promiscuous mode
[   88.556947][   T13] veth0_macvtap: left promiscuous mode
[   88.560569][   T13] veth1_vlan: left promiscuous mode
[   88.562811][   T13] veth0_vlan: left promiscuous mode
[   88.914431][   T13] team0 (unregistering): Port device team_slave_1 removed
[   88.939336][   T13] team0 (unregistering): Port device team_slave_0 removed
[   89.508618][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.555934][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.611032][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.669632][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.757604][   T13] bridge_slave_1: left allmulticast mode
[   89.761991][   T13] bridge_slave_1: left promiscuous mode
[   89.765121][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.781618][   T13] bridge_slave_0: left allmulticast mode
[   89.784098][   T13] bridge_slave_0: left promiscuous mode
[   89.786648][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.028890][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.034910][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.040545][   T13] bond0 (unregistering): Released all slaves
[   90.269742][   T13] hsr_slave_0: left promiscuous mode
[   90.272104][   T13] hsr_slave_1: left promiscuous mode
[   90.274442][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.277427][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.281888][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.285191][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.297530][   T13] veth1_macvtap: left promiscuous mode
[   90.300561][   T13] veth0_macvtap: left promiscuous mode
[   90.302470][   T13] veth1_vlan: left promiscuous mode
[   90.304314][   T13] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
20:22:14  Registers:
info registers vcpu 0

CPU#0
RAX=0e5a9040410aca00 RBX=ffffffff81969a38 RCX=0e5a9040410aca00 RDX=0000000000000001
RSI=ffffffff8d9baf27 RDI=ffffffff8be34480 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3b530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b13f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1f132fc6c0 CR3=00000001070e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000050000006b 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=387e702c4c198400 RBX=ffffffff81969a38 RCX=387e702c4c198400 RDX=0000000000000001
RSI=ffffffff8d9baf27 RDI=ffffffff8be34480 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3b530 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b7b13f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc44725468 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
