last executing test programs:

1.253027561s ago: executing program 0 (id=1118):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x2)

1.252755761s ago: executing program 0 (id=1119):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0xf, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xc, 0x1}]}]}}, 0x0, 0x42}, 0x28)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
unlink(&(0x7f0000000200)='./cgroup\x00')
r3 = socket$kcm(0xa, 0x1, 0x106)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r3, 0x6, 0xc, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
perf_event_open(0x0, 0x0, 0xd, r1, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6)
close(0xffffffffffffffff)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7, 0x12000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x84, 0x1, @perf_config_ext={0x694, 0xa2}, 0x76fdc7004c3ef8f5, 0x7, 0x6, 0x3, 0x8000000000000000, 0x806, 0x0, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)

1.182951211s ago: executing program 2 (id=1120):
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000200)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)

1.083201391s ago: executing program 0 (id=1121):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000440)="a8ad55006b698c37263613f82888516fdfa0c28350af3cc455bb", 0x0, 0x0, 0x0, 0x10}, 0x38)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)

1.083007491s ago: executing program 2 (id=1122):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='?', 0x1}], 0x1}, 0x0)

1.082830459s ago: executing program 2 (id=1123):
r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000f00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

589.557553ms ago: executing program 1 (id=1125):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

213.019044ms ago: executing program 1 (id=1126):
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x5, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x122)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

212.781379ms ago: executing program 2 (id=1127):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @volatile={0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000280)=""/46, 0x40, 0x2e, 0x0, 0x9, 0x10000, @value=r2}, 0x28)

139.674725ms ago: executing program 0 (id=1128):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x1, 0x0, 0x0, 0x8, 0x3fe, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x97ff}, {&(0x7f0000000240)="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", 0x5bb}], 0x1}, 0x4000000)

138.389858ms ago: executing program 1 (id=1129):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

138.136281ms ago: executing program 1 (id=1130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

80.719122ms ago: executing program 2 (id=1131):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f00000002c0)=r0, 0x4)

80.242297ms ago: executing program 1 (id=1132):
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x401, 0x110}, 0x0, 0xca, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

78.940604ms ago: executing program 0 (id=1133):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

78.756171ms ago: executing program 2 (id=1134):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x800000000000003, 0x2505, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f0000, 0x7f}, 0x80, 0x4, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x40c0ac4d)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0)

1.264937ms ago: executing program 0 (id=1135):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038561d001931a0e69ee517d34460bcfd00000066cb36fefe861edf0800af4a3857d8369fd0c7bfb705251e6182949a3651f60a84c94e5277d9", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000f00)=""/260, 0x104}, {&(0x7f0000000a00)=""/223, 0xdf}, {0x0}, {0x0}], 0x4}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 1 (id=1136):
r0 = socket$kcm(0x25, 0x1, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11881' (ED25519) to the list of known hosts.
syzkaller login: [   48.219644][ T5809] cgroup: Unknown subsys name 'net'
[   48.325170][ T5809] cgroup: Unknown subsys name 'cpuset'
[   48.331711][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.126141][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.593110][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.596541][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.599634][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.602433][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.604991][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.611752][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.620044][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.622806][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.626195][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.629431][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.659614][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.663442][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.666251][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.670419][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.673627][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.809593][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   53.912287][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.915419][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.917794][ T5826] bridge_slave_0: entered allmulticast mode
[   53.920430][ T5826] bridge_slave_0: entered promiscuous mode
[   53.936075][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   53.954663][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.961219][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.964123][ T5826] bridge_slave_1: entered allmulticast mode
[   53.967095][ T5826] bridge_slave_1: entered promiscuous mode
[   54.008310][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.016485][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.028838][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.086853][ T5826] team0: Port device team_slave_0 added
[   54.089559][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.093124][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.095415][ T5830] bridge_slave_0: entered allmulticast mode
[   54.098013][ T5830] bridge_slave_0: entered promiscuous mode
[   54.105921][ T5826] team0: Port device team_slave_1 added
[   54.125365][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.127674][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.130040][ T5830] bridge_slave_1: entered allmulticast mode
[   54.132800][ T5830] bridge_slave_1: entered promiscuous mode
[   54.163146][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.167751][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.177744][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.180067][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.182683][ T5835] bridge_slave_0: entered allmulticast mode
[   54.185351][ T5835] bridge_slave_0: entered promiscuous mode
[   54.188844][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.192501][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.200726][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.213059][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.215468][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.217836][ T5835] bridge_slave_1: entered allmulticast mode
[   54.220530][ T5835] bridge_slave_1: entered promiscuous mode
[   54.223568][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.225932][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.234807][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.239621][ T5830] team0: Port device team_slave_0 added
[   54.253044][ T5830] team0: Port device team_slave_1 added
[   54.278416][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.288389][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.290671][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.300392][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.305376][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.307841][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.318565][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.325090][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.356568][ T5826] hsr_slave_0: entered promiscuous mode
[   54.359358][ T5826] hsr_slave_1: entered promiscuous mode
[   54.363559][ T5835] team0: Port device team_slave_0 added
[   54.384345][ T5835] team0: Port device team_slave_1 added
[   54.416971][ T5830] hsr_slave_0: entered promiscuous mode
[   54.420256][ T5830] hsr_slave_1: entered promiscuous mode
[   54.423839][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   54.426410][ T5830] Cannot create hsr debugfs directory
[   54.436634][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.438923][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.447476][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.462585][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.464939][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.474740][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.555683][ T5835] hsr_slave_0: entered promiscuous mode
[   54.558604][ T5835] hsr_slave_1: entered promiscuous mode
[   54.561272][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   54.563168][ T5835] Cannot create hsr debugfs directory
[   54.671609][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.692397][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.711425][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.715862][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.751355][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.755603][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.764406][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.768737][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.788179][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.790596][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.793329][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.795647][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.831896][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.841904][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.848993][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.854504][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.871964][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.877581][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.935463][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.963220][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   54.976847][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.979159][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.992775][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.995107][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.012171][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.043942][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.049546][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.056372][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.075348][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.077752][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.082432][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.085301][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.094104][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.131916][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.135354][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.146888][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.149906][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.167248][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.169509][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.190813][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.195265][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.224302][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.268222][ T5826] veth0_vlan: entered promiscuous mode
[   55.297088][ T5826] veth1_vlan: entered promiscuous mode
[   55.324336][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.328513][ T5826] veth0_macvtap: entered promiscuous mode
[   55.333671][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.337279][ T5826] veth1_macvtap: entered promiscuous mode
[   55.352059][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.364145][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.382157][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.394340][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.406388][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.410288][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.443400][ T5835] veth0_vlan: entered promiscuous mode
[   55.464416][ T5830] veth0_vlan: entered promiscuous mode
[   55.467326][ T5835] veth1_vlan: entered promiscuous mode
[   55.470627][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.475922][ T5830] veth1_vlan: entered promiscuous mode
[   55.480445][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.508523][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.513578][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.533982][ T5835] veth0_macvtap: entered promiscuous mode
[   55.539373][ T5830] veth0_macvtap: entered promiscuous mode
[   55.546844][ T5835] veth1_macvtap: entered promiscuous mode
[   55.552743][ T5830] veth1_macvtap: entered promiscuous mode
[   55.568814][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.574572][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.580131][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.589117][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.597161][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.631399][   T54] Bluetooth: hci0: command tx timeout
[   55.648579][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.658739][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.670631][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.674389][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.677135][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.689526][    C1] hrtimer: interrupt took 30974 ns
[   55.700478][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.709831][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.714377][   T54] Bluetooth: hci2: command tx timeout
[   55.715531][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.716832][   T54] Bluetooth: hci1: command tx timeout
[   55.794539][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.797590][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.813488][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.816018][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.836760][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.840725][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.871669][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.874799][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.945229][ T5905] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.359105][ T5936] netlink: 'syz.1.21': attribute type 5 has an invalid length.
[   56.483336][ T5942] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   56.554285][ T5942] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   56.561759][ T5942] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   56.566226][ T5942] netlink: 'syz.2.24': attribute type 29 has an invalid length.
[   56.749242][ T5961] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.33'.
[   56.765039][ T5962] netlink: 'syz.1.31': attribute type 40 has an invalid length.
[   56.784463][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.705747][ T6029] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.40'.
[   57.711051][   T54] Bluetooth: hci0: command tx timeout
[   57.791085][   T54] Bluetooth: hci1: command tx timeout
[   57.794815][ T6038] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.801663][   T54] Bluetooth: hci2: command tx timeout
[   57.813504][ T6038] Zero length message leads to an empty skb
[   58.076453][   T54] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[   59.007701][ T6089] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.318059][ T6095] Illegal XDP return value 4294967274 on prog  (id 24) dev N/A, expect packet loss!
[   59.672255][ T6116] C: renamed from team_slave_0 (while UP)
[   59.675653][ T6116] netlink: 'syz.1.66': attribute type 3 has an invalid length.
[   59.678303][ T6116] netlink: 144 bytes leftover after parsing attributes in process `syz.1.66'.
[   59.683237][ T6116] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   59.683744][ T6117] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[   59.725861][ T6117] team0: Device ipvlan1 failed to register rx_handler
[   59.790450][ T6117] netlink: 'syz.2.65': attribute type 29 has an invalid length.
[   59.791143][   T54] Bluetooth: hci0: command tx timeout
[   59.795709][ T6117] netlink: 'syz.2.65': attribute type 3 has an invalid length.
[   59.798699][ T6117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'.
[   59.832752][ T6117] syz.2.65 (6117) used greatest stack depth: 18616 bytes left
[   59.871357][   T54] Bluetooth: hci2: command tx timeout
[   59.871377][ T5829] Bluetooth: hci1: command tx timeout
[   60.204153][ T5829] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[   60.645100][ T6160] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.83'.
[   60.903821][ T6180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.93'.
[   61.354088][ T6201] team0: Device ipvlan1 failed to register rx_handler
[   61.457166][ T6210] validate_nla: 4 callbacks suppressed
[   61.457176][ T6210] netlink: 'syz.1.107': attribute type 21 has an invalid length.
[   61.871229][ T5829] Bluetooth: hci0: command tx timeout
[   61.951131][ T5829] Bluetooth: hci2: command tx timeout
[   61.961199][ T5829] Bluetooth: hci1: command tx timeout
[   62.038678][ T6242] netlink: 'syz.1.122': attribute type 39 has an invalid length.
[   62.041386][ T6242] netlink: 'syz.1.122': attribute type 4 has an invalid length.
[   62.043918][ T6242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.122'.
[   62.054767][ T6242] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   62.109820][ T6244] netlink: 10 bytes leftover after parsing attributes in process `syz.1.123'.
[   62.132580][ T6246] netlink: 'syz.1.124': attribute type 21 has an invalid length.
[   62.356011][ T6271] delete_channel: no stack
[   62.357794][ T6271] delete_channel: no stack
[   62.475805][ T6281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.141'.
[   62.724172][ T6285] netlink: 'syz.1.142': attribute type 21 has an invalid length.
[   62.726758][ T6285] netlink: 'syz.1.142': attribute type 4 has an invalid length.
[   63.009123][ T6281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.013988][ T6281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.017979][ T6281] bond0 (unregistering): Released all slaves
[   63.659875][ T6339] netlink: 'syz.1.168': attribute type 10 has an invalid length.
[   63.726021][ T6339] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   63.934845][ T6369] netlink: 'syz.0.183': attribute type 11 has an invalid length.
[   63.937926][ T6369] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.183'.
[   63.948994][ T6369] netlink: 'syz.0.183': attribute type 11 has an invalid length.
[   63.951933][ T6369] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.183'.
[   63.955481][ T6368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.978733][ T6373] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.185'.
[   64.424692][ T6402] netlink: 'syz.0.196': attribute type 40 has an invalid length.
[   64.440366][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.573120][ T6406] netlink: 52663 bytes leftover after parsing attributes in process `syz.2.201'.
[   65.170217][ T5829] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[   65.624959][ T6453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.222'.
[   65.781977][ T6465] delete_channel: no stack
[   65.783846][ T6465] delete_channel: no stack
[   65.833506][ T6469] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.229'.
[   65.842963][ T5829] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[   65.997140][ T6483] syzkaller0: entered promiscuous mode
[   65.998877][ T6483] syzkaller0: entered allmulticast mode
[   66.494975][ T6531] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.257'.
[   66.718044][ T6537] netlink: 'syz.0.261': attribute type 11 has an invalid length.
[   66.723201][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.727834][ T6537] netlink: 'syz.0.261': attribute type 21 has an invalid length.
[   66.924094][ T6544] netlink: 'syz.2.264': attribute type 10 has an invalid length.
[   67.262900][ T6564] __nla_validate_parse: 3 callbacks suppressed
[   67.262909][ T6564] netlink: 830 bytes leftover after parsing attributes in process `syz.0.274'.
[   68.001032][ T6605] netlink: 'syz.1.294': attribute type 3 has an invalid length.
[   68.230255][ T6622] netlink: 'syz.2.302': attribute type 3 has an invalid length.
[   68.233583][ T6622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.302'.
[   68.392414][ T6638] netlink: 'syz.1.310': attribute type 29 has an invalid length.
[   68.395532][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[   68.424084][ T6640] netlink: 'syz.0.311': attribute type 4 has an invalid length.
[   68.427252][ T6640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.311'.
[   69.243977][ T6681] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.328'.
[   69.273233][ T6685] netlink: 'syz.2.330': attribute type 13 has an invalid length.
[   69.275717][ T6685] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.330'.
[   71.074076][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.076905][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.134567][ T6741] netlink: 'syz.0.354': attribute type 13 has an invalid length.
[   71.138770][ T6741] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.354'.
[   71.312978][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[   71.839043][ T6785] netlink: 'syz.0.374': attribute type 10 has an invalid length.
[   71.842830][ T6785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.374'.
[   71.846027][ T6785] ipvlan1: entered promiscuous mode
[   71.847858][ T6785] ipvlan1: entered allmulticast mode
[   71.849732][ T6785] veth0_vlan: entered allmulticast mode
[   71.855299][ T6785] bridge0: port 3(ipvlan1) entered blocking state
[   71.857929][ T6785] bridge0: port 3(ipvlan1) entered disabled state
[   71.861989][ T6785] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   72.102444][ T6810] netlink: 14 bytes leftover after parsing attributes in process `syz.2.386'.
[   72.168209][ T6810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.173536][ T6810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.177626][ T6810] bond0 (unregistering): Released all slaves
[   73.147688][ T6857] netlink: 'syz.2.408': attribute type 4 has an invalid length.
[   73.150280][ T6857] netlink: 'syz.2.408': attribute type 3 has an invalid length.
[   73.155244][ T6857] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.408'.
[   73.248342][ T6865] netlink: 'syz.0.412': attribute type 21 has an invalid length.
[   73.252067][ T6865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.412'.
[   73.297831][ T6870] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.414'.
[   73.347341][ T6872] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[   73.357925][ T6863] netlink: 'syz.1.411': attribute type 10 has an invalid length.
[   73.475467][ T6863] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.518008][ T6863] team0: Port device bond0 added
[   73.705470][ T6899] netlink: 'syz.1.428': attribute type 2 has an invalid length.
[   73.708164][ T6899] netlink: 51 bytes leftover after parsing attributes in process `syz.1.428'.
[   73.720317][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[   73.726368][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[   73.730104][ T6907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[   73.903466][ T6921] netlink: 180 bytes leftover after parsing attributes in process `syz.0.438'.
[   73.908338][ T6921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.438'.
[   73.938794][ T6921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.438'.
[   73.986848][ T6925] syz.1.440 uses obsolete (PF_INET,SOCK_PACKET)
[   74.176329][ T6933] netlink: 'syz.2.444': attribute type 6 has an invalid length.
[   74.500446][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   74.611482][ T6975] netlink: 'syz.2.463': attribute type 64 has an invalid length.
[   75.358332][ T7041] netlink: 'syz.1.493': attribute type 3 has an invalid length.
[   76.670019][ T7095] wg2: entered promiscuous mode
[   76.683586][ T7095] wg2: entered allmulticast mode
[   77.352566][ T7125] : renamed from pim6reg1
[   77.774674][ T7133] validate_nla: 6 callbacks suppressed
[   77.774797][ T7133] netlink: 'syz.2.534': attribute type 10 has an invalid length.
[   77.961734][ T7143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.752463][ T7163] delete_channel: no stack
[   78.764633][ T7178] netlink: 'syz.0.555': attribute type 3 has an invalid length.
[   78.768393][ T7178] netlink: 'syz.0.555': attribute type 6 has an invalid length.
[   78.781028][ T7178] __nla_validate_parse: 13 callbacks suppressed
[   78.781071][ T7178] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.555'.
[   79.040590][ T7194] netlink: 'syz.0.562': attribute type 10 has an invalid length.
[   79.676716][ T7246] netlink: 'syz.0.585': attribute type 21 has an invalid length.
[   79.679420][ T7246] netlink: 14045 bytes leftover after parsing attributes in process `syz.0.585'.
[   79.707254][ T7248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.586'.
[   80.276232][  T789] cfg80211: failed to load regulatory.db
[   80.341567][ T7270] netlink: 'syz.2.596': attribute type 4 has an invalid length.
[   80.344204][ T7270] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.596'.
[   80.389978][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.597'.
[   80.463319][ T7280] netlink: 'syz.1.601': attribute type 4 has an invalid length.
[   80.576991][ T7285] netlink: 'syz.2.604': attribute type 4 has an invalid length.
[   80.579582][ T7285] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.604'.
[   80.836601][ T7295] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.608'.
[   80.937964][ T7301] netlink: 'syz.1.611': attribute type 10 has an invalid length.
[   80.984168][ T7301] team0: Port device wlan1 added
[   81.077253][ T7310] netlink: 'syz.1.615': attribute type 21 has an invalid length.
[   81.080003][ T7310] netlink: 156 bytes leftover after parsing attributes in process `syz.1.615'.
[   82.752745][ T7384] syzkaller1: tun_chr_ioctl cmd 1074812118
[   82.860793][ T7394] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.654'.
[   83.640384][ T7406] netdevsim netdevsim2: Direct firmware load for  failed with error -2
[   83.647662][ T7406] netdevsim netdevsim2: Falling back to sysfs fallback for: 
[   83.807039][ T7416] bridge0: port 3(hsr_slave_1) entered blocking state
[   83.810117][ T7416] bridge0: port 3(hsr_slave_1) entered disabled state
[   83.814713][ T7416] hsr_slave_1: entered allmulticast mode
[   83.819151][ T7416] hsr_slave_1: left allmulticast mode
[   83.948120][   T54] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[   83.995458][ T7430] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.671'.
[   84.039120][ T7436] netlink: 'syz.0.674': attribute type 11 has an invalid length.
[   84.048429][ T7436] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.674'.
[   84.321561][   T54] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   84.544013][ T7471] validate_nla: 4 callbacks suppressed
[   84.544024][ T7471] netlink: 'syz.2.691': attribute type 21 has an invalid length.
[   84.550506][ T7471] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.691'.
[   84.585258][ T7475] netlink: 'syz.1.692': attribute type 1 has an invalid length.
[   84.587740][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'.
[   84.711230][ T7479] netlink: 'syz.2.694': attribute type 2 has an invalid length.
[   84.851358][ T7499] netlink: 'syz.1.705': attribute type 13 has an invalid length.
[   84.856162][ T7499] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.705'.
[   84.937443][ T7509] netlink: 'syz.2.709': attribute type 3 has an invalid length.
[   84.940432][ T7509] netlink: 'syz.2.709': attribute type 10 has an invalid length.
[   85.041128][ T7516] netlink: 'syz.1.713': attribute type 29 has an invalid length.
[   85.044633][ T7516] netlink: 'syz.1.713': attribute type 29 has an invalid length.
[   85.223215][ T7534] netlink: 'syz.2.723': attribute type 29 has an invalid length.
[   85.531584][ T7560] netlink: 'syz.1.732': attribute type 19 has an invalid length.
[   85.898354][   T54] Bluetooth: hci2: Malformed LE Event: 0x1b
[   86.371350][ T7594] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.750'.
[   86.374307][ T7596] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.749'.
[   86.378883][ T7597] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.749'.
[   86.450652][ T7605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.755'.
[   86.587881][ T7614] netlink: 176 bytes leftover after parsing attributes in process `syz.1.758'.
[   88.178684][ T7718] syzkaller0: entered promiscuous mode
[   88.180530][ T7718] syzkaller0: entered allmulticast mode
[   89.590148][ T7768] pim6reg1: entered allmulticast mode
[   89.602855][ T7769] pim6reg1: left allmulticast mode
[   89.705989][ T7777] validate_nla: 10 callbacks suppressed
[   89.705998][ T7777] netlink: 'syz.2.832': attribute type 29 has an invalid length.
[   89.713676][ T7777] netlink: 'syz.2.832': attribute type 29 has an invalid length.
[   89.900484][ T7786] netlink: 'syz.2.836': attribute type 12 has an invalid length.
[   89.915856][ T7786] __nla_validate_parse: 5 callbacks suppressed
[   89.915865][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'.
[   89.931470][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'.
[   90.073041][ T7805] netlink: 'syz.1.846': attribute type 10 has an invalid length.
[   90.075737][ T7805] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.846'.
[   90.188063][ T7815] netlink: 'syz.1.851': attribute type 29 has an invalid length.
[   90.593166][ T7826] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.856'.
[   90.638048][ T7832] netlink: 'syz.2.859': attribute type 2 has an invalid length.
[   90.678069][ T7836] netlink: 'syz.2.861': attribute type 2 has an invalid length.
[   90.680619][ T7836] netlink: 'syz.2.861': attribute type 8 has an invalid length.
[   90.684302][ T7836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.861'.
[   91.743264][ T7865] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.874'.
[   91.767205][ T7868] netlink: 'syz.1.876': attribute type 3 has an invalid length.
[   91.770402][ T7868] netlink: 'syz.1.876': attribute type 4 has an invalid length.
[   91.776307][ T7868] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.876'.
[   91.917243][ T5830] cgroup: fork rejected by pids controller in /syz2
[   92.342260][ T7903] wg2: entered promiscuous mode
[   92.344124][ T7903] wg2: entered allmulticast mode
[   92.379248][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.382519][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.385729][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.389275][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.393738][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.500546][ T7904] chnl_net:caif_netlink_parms(): no params data found
[   92.570801][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.574176][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.577265][ T7904] bridge_slave_0: entered allmulticast mode
[   92.581569][ T7904] bridge_slave_0: entered promiscuous mode
[   92.584830][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.587230][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.589710][ T7904] bridge_slave_1: entered allmulticast mode
[   92.592827][ T7904] bridge_slave_1: entered promiscuous mode
[   92.619811][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.626148][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.663102][ T7904] team0: Port device team_slave_0 added
[   92.666733][ T7904] team0: Port device team_slave_1 added
[   92.688083][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.691231][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.701852][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.705706][ T7919] netlink: 152 bytes leftover after parsing attributes in process `syz.0.897'.
[   92.709980][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.713198][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.722740][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.762316][ T7904] hsr_slave_0: entered promiscuous mode
[   92.771431][ T7904] hsr_slave_1: entered promiscuous mode
[   92.775232][ T7904] debugfs: 'hsr0' already exists in 'hsr'
[   92.777128][ T7904] Cannot create hsr debugfs directory
[   92.886875][ T7904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.938091][ T7904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.992367][ T7904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.644441][ T7904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.750812][ T7904] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.759463][ T7904] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.763832][ T7904] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.768805][ T7904] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.826342][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.839525][ T7904] 8021q: adding VLAN 0 to HW filter on device team0
[   93.846531][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.848956][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.865264][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.867567][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.888614][ T7904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.893477][ T7904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.982200][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.008834][ T7904] veth0_vlan: entered promiscuous mode
[   94.014379][ T7904] veth1_vlan: entered promiscuous mode
[   94.029072][ T7904] veth0_macvtap: entered promiscuous mode
[   94.035390][ T7904] veth1_macvtap: entered promiscuous mode
[   94.044119][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.049621][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.056890][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.063881][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.068167][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.075623][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.127050][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.129588][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.146860][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.149480][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.432757][   T54] Bluetooth: hci1: command tx timeout
[   95.216596][ T8006] : renamed from vlan0 (while UP)
[   95.733429][ T8037] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.944'.
[   95.813572][ T8052] validate_nla: 7 callbacks suppressed
[   95.813618][ T8052] netlink: 'syz.0.951': attribute type 10 has an invalid length.
[   95.818371][ T8052] netlink: 2 bytes leftover after parsing attributes in process `syz.0.951'.
[   96.114788][ T8069] delete_channel: no stack
[   96.116454][ T8069] delete_channel: no stack
[   96.323179][ T8075] netlink: 13 bytes leftover after parsing attributes in process `syz.1.960'.
[   96.464120][ T8078] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   96.466833][ T8078] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   96.511207][   T54] Bluetooth: hci1: command tx timeout
[   96.827724][ T8099] syzkaller0: entered promiscuous mode
[   96.835315][ T8099] syzkaller0: entered allmulticast mode
[   97.577455][ T8115] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.978'.
[   98.363554][ T8177] netlink: 'syz.2.1006': attribute type 39 has an invalid length.
[   98.366269][ T8177] netlink: 'syz.2.1006': attribute type 4 has an invalid length.
[   98.368885][ T8177] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1006'.
[   98.520382][ T8189] netlink: 'syz.2.1012': attribute type 2 has an invalid length.
[   98.523537][ T8189] netlink: 'syz.2.1012': attribute type 8 has an invalid length.
[   98.526060][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1012'.
[   98.558367][ T8193] netlink: 'syz.1.1014': attribute type 10 has an invalid length.
[   98.561277][ T8193] netlink: 'syz.1.1014': attribute type 19 has an invalid length.
[   98.563960][ T8193] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1014'.
[   98.591104][   T54] Bluetooth: hci1: command tx timeout
[  100.671780][   T54] Bluetooth: hci1: command tx timeout
[  101.133832][ T8241] veth1_macvtap: left promiscuous mode
[  101.158536][ T8240] veth1_macvtap: entered promiscuous mode
[  101.162014][ T8240] macsec0: entered promiscuous mode
[  101.164879][ T8240] macsec0: entered allmulticast mode
[  101.166991][ T8240] veth1_macvtap: entered allmulticast mode
[  101.433780][ T8272] netlink: 'syz.0.1048': attribute type 12 has an invalid length.
[  101.434129][ T8271] syz.2.1049 (8271) used obsolete PPPIOCDETACH ioctl
[  101.436798][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1048'.
[  101.458191][ T8274] netlink: 'syz.1.1050': attribute type 10 has an invalid length.
[  101.461045][ T8274] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1050'.
[  101.502414][ T8277] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1052'.
[  101.505936][ T8277] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  101.508905][ T8277] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  101.774490][ T8301] netlink: 'syz.2.1063': attribute type 29 has an invalid length.
[  101.778079][ T8299] netlink: 'syz.0.1062': attribute type 41 has an invalid length.
[  101.780897][ T8301] netlink: 'syz.2.1063': attribute type 29 has an invalid length.
[  101.784292][ T8301] netlink: 'syz.2.1063': attribute type 29 has an invalid length.
[  101.787723][ T8301] netlink: 'syz.2.1063': attribute type 29 has an invalid length.
[  101.849444][ T8308] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  101.852157][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1066'.
[  101.855163][ T8308] dummy0: entered promiscuous mode
[  101.919084][ T8314] IPv6: Can't replace route, no match found
[  102.064813][   T54] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11
[  102.117382][ T8333] syzkaller0: entered promiscuous mode
[  102.119186][ T8333] syzkaller0: entered allmulticast mode
[  102.996747][ T8354] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1087'.
[  103.000085][ T8354] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1087'.
[  103.226862][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'.
[  103.230580][ T8384] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1101'.
[  103.237853][ T8384] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1101'.
[  104.212167][ T8435] netlink: 'syz.1.1125': attribute type 10 has an invalid length.
[  104.534265][ T8435] team0: Device ipvlan1 failed to register rx_handler
[  104.758766][   T54] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  104.779141][ T8456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1135'.
[  104.844092][ T8462] netlink: 'syz.1.1138': attribute type 21 has an invalid length.
Connection to localhost closed by remote host.
[  105.397755][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.441519][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.488343][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.551678][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.636894][   T13] bridge_slave_1: left allmulticast mode
[  105.638861][   T13] bridge_slave_1: left promiscuous mode
[  105.641369][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.645597][   T13] bridge_slave_0: left allmulticast mode
[  105.647474][   T13] bridge_slave_0: left promiscuous mode
[  105.649392][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.825891][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.830044][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.834292][   T13] bond0 (unregistering): Released all slaves
[  106.071806][   T13] hsr_slave_0: left promiscuous mode
[  106.074029][   T13] hsr_slave_1: left promiscuous mode
[  106.076095][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.078504][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.081555][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.083997][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.093190][   T13] veth1_macvtap: left allmulticast mode
[  106.095292][   T13] veth1_macvtap: left promiscuous mode
[  106.097238][   T13] veth0_macvtap: left promiscuous mode
[  106.099139][   T13] veth1_vlan: left promiscuous mode
[  106.102749][   T13] veth0_vlan: left promiscuous mode
[  106.306380][   T13] team0 (unregistering): Port device team_slave_1 removed
[  106.324274][   T13] team0 (unregistering): Port device team_slave_0 removed
[  120.671012][ T5289] page_pool_release_retry() stalled pool shutdown: id 19, 1 inflight 60 sec

VM DIAGNOSIS:
22:39:01  Registers:
info registers vcpu 0

CPU#0
RAX=c3a4f66c0eb93f00 RBX=ffffffff81969b18 RCX=c3a4f66c0eb93f00 RDX=0000000000000001
RSI=ffffffff8d9792dd RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1599ff5dc0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=10cd22deb4609d00 RBX=ffffffff81969b18 RCX=10cd22deb4609d00 RDX=0000000000000001
RSI=ffffffff8d9792dd RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07bf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff76c7a0d0 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
