last executing test programs:

15m0.323249706s ago: executing program 2 (id=3127):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa000000, 0x21, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3ca", 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

14m59.983969499s ago: executing program 0 (id=3130):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0)

14m59.827857955s ago: executing program 2 (id=3132):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, &(0x7f0000000040)=r1, 0x4)
close(0x3)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)

14m59.517960006s ago: executing program 2 (id=3134):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000480)={0x1, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14m59.516916776s ago: executing program 0 (id=3143):
socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

14m59.252736862s ago: executing program 0 (id=3137):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

14m57.373709278s ago: executing program 2 (id=3141):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@caif=@dbg, 0x80, 0x0, 0x0, &(0x7f0000000280)=""/38, 0x26}, 0x10000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

14m57.326035072s ago: executing program 0 (id=3142):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa000000, 0x21, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3ca", 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

14m57.234310321s ago: executing program 0 (id=3145):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xff, 0x13, 0x0, 0x0, 0x0, 0x1008, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x8000, 0xc8, 0x0, 0x3, 0x4000000000, 0x10000006, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000c80)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef)

14m57.065902968s ago: executing program 2 (id=3146):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0xb101, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)

14m56.648052389s ago: executing program 2 (id=3147):
socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

14m56.381548655s ago: executing program 32 (id=3147):
socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000021000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

14m56.363869647s ago: executing program 0 (id=3155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

14m56.363313937s ago: executing program 33 (id=3155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.516949342s ago: executing program 5 (id=7498):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x4008, 0x8001, 0x7fffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.200342282s ago: executing program 4 (id=7499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

1.556643306s ago: executing program 4 (id=7501):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002)
ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0)

1.556209976s ago: executing program 3 (id=7502):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001400), 0x0, 0x9, r0}, 0x38)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd04, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$sock(r1, &(0x7f00000008c0)={&(0x7f0000000100)=@nl=@unspec={0x0, 0x0, 0x0, 0xf5ff}, 0x80, 0x0}, 0x880)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})

1.401400501s ago: executing program 5 (id=7503):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1042, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.299487102s ago: executing program 1 (id=7505):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)=""/37, 0x25}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)

1.299102962s ago: executing program 4 (id=7506):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080004000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

1.193741242s ago: executing program 3 (id=7507):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0x6c0000000000)

1.117670789s ago: executing program 4 (id=7508):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

842.110936ms ago: executing program 1 (id=7509):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%ps    \x00'}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x6, 0x4, 0x21, 0xc1, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

736.772357ms ago: executing program 5 (id=7510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x13, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))

734.933497ms ago: executing program 3 (id=7518):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x20040000)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000080000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32], 0x50)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd5}], 0x1}, 0x0)

526.278498ms ago: executing program 5 (id=7511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

525.919678ms ago: executing program 1 (id=7512):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x90000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="9b174c71ddc0ff70da89cebb1985e5aa6e2218ad71a09310e007e786c1eb3485db015be60d4a00474a8973fc08d7a6274de654cbd1a787e0946198bd6eeb78c4f684b110d1dd5d2260844e6abdca4819b84c32fa99588cd0993a204b8ecde4ce3614cc78454beef9db6202c267272cdc91eed07bb8f27993f4af613c6ae67162bc9d0f537a0e0f60af0c4a21b01e4aa656fdc7260a86613c5d1ffce2f5319cb34054a895b9be7a4b812fbb7c83fb999fb4c8f41ac5e100519c4c125fd68949f7ef053401acd65051e963b108d9ac8d302aa3d27d2a39e9142584a1388c4c300a76bd28cecc47e95c65d5f0775a55c68d5c8640faded3723e32b1d01a26021567e853d1d85382b3700b3e9e6d26673ddc63f5f2464c1ca3ccf82eb8d21eb31572e286cff03c9e347df61270ca628e3c302a4bb4e8ca5d9da18227928eeaa0c3fe37cac8bb1a8b10b47427ec3f24a5f497ae1d5d5998fa0052040b8c3e32a5b89e266f0b53ba2689708e3ef62ea793382e2a3e0e027fe5d23003b874a00272c5f704f5694289f07360814f1eb16fd8a3b61c2f3c53c42a6eedb76977e35defa4f7a5d8af33e187ea35ac1e7300c4fed435385b8d98a4edb7b54545593dd1b260d70a9be726c3805715e73ebb6f3e480e97f8694efbf5e2b54e7fdbded3ab4cd7f84aab807264e275d4872a1382466765c91031ce05a9e5f529a7399f5f58c6e6d381864b0982f8df5a503fa5e064b0d70ec5de908e51d47a24ea0a8f4549f0bcdb37f7107033a38040248815a1afaeca241bcb6836dfd64ed07113bc6a484840430540a9cabcac3a18dbd49c11383b58106d583f451cbb6949d07f9f5503c6938faefb8f3b1a976adbdbd3c6a6c4184f26c03f1d7cf34e36697775c4b81adb19142f86241c4c802c1dba77b57d78a99913dd58c13aea10d107c1190d8c9ce89c993ace3f0d31214cce7206d435aea6085c44d7d2488c6d588370cd6a01cda8cd0b4905d3d3e392e793184708c164fd8ef1c5db16a0183c144bc4487a2555afabca3507bdc80a0442645bcafd8ff1f5f32ef512d18af9c51ed2f4830c08b3e21aa51db8c787c32430765963b5225af1659a9c76a111eb83497ca6639e7c69aea8c613f9df3d64a12563889b1268f2d721e67f09753aa91db8a6c4c5c0a1eddfb941e2439a357ec833b3a5618a17c00ed59dc9453a889e2eea6cc9aceec2144ea241643f3093c7d02b74886eecc5bd40a3f684a142db57bd64630a94a5e55ada8a31ad8f2f5a1b28cb2d7ce83f2746560c445fe46fef79ea21af454c059f1e3ca7d1dda514dcc5fbc4462fae593132907f4bb79828d807327450daff4506db66442ecc4f2a8d6f16dde6c166fb119506d6f749580753b8b6c3eb4c8de80b3329f592e72e1da0918b9d959be3faeafdf966c7fa715b82f278f2facdd2ad5a7e96ed9806a545b312e3fbcbf16883d10688185200ab506b757bda75bcb2a086d5bbc97035849c6492429831bb61d2dcc47746a03061f5d51f19efa53f676fbeb4c9cf6c92007cd91d1ef13fd0d748070952a9ca72b048441a74f1daec44c0e3dda6e25623154fbd807d883aab6f8c5373ec5c6720f5cd826742f5167e17b435b6791cdaee9511757fd8fd88eb2035559425ffa6fc16c60f3069f83d403853886f879a118409ae2b9bb402fd83e15e3eda764d152a1dea31972e4494c6cf045cf8c6202e4746d34270720e4f24a0a6091f2a8d046deacc1edba580555b861f16edaf1a067d6e7554d3e4d37d62010b60b4cd3dd2eba96908b063935eafa86f96d29a92a1953a7f8da43f476501a1085c0087f3316fd9eed2206b676b985b6a5179d3936157d47e34fe5d0ff3bdc573058463ad8e4b4c24b5a1a68d5c7a3587288c6f427ba8ed2affd9627e4a6f3cf660b3a8f8c57e638b759f3cf1e6c2dde0fbea23f8c7823a380c684beb4a3da2671bd443407eccc5273a40cafa2f9e4aebf6011bb27060ff3232238da67db2917fa60cd8609ce363d0ba92377ec24eacc222354d66e1ea964b44d7631d9e9ecb50139644246457bf914c5a8520cca972a3738c7cb7b1555bb0b201c3a3cc03b295c19d9bbda5cf8a222bffd5d518e4ca8600e3aa5b3a939d44e746a7d3fc3e9bad656df9f37aeaec5eef3ef49318ca68a1299d5c9f1a78ff852e0375a9c30d08daa22752e64a3abd1286c0188f216446a8e3c244b6bf809a665de9fe5229d2946dff5750cbdcba5f2836ebc1485b80a5d0a72e79f694bd69edb5413e3c293f74208421f3373ced03701d77cc5d4b1d1d9675f7a040fe6ac4169d599b07e34e46aee6840275f972d3a5ad8843c0a8fdde283cd69eb37602692ab97dd8fbb5907027af6e48bce2d255d5514b1332e5e521503470dc44f29c603dedd984764e9a96b4cb75de17d99133da66b9c83e0ae35fae2dba789a4879a77c12cae3c0cc3b36c5175fe9e3d7a622dd17f4f6da22e3b7e84b3aba75ab3be000a103fd5ec139191f1a25e25058505aac74513fe4143591231cec070a77839918f9a341f217f929a77ca0ea72c93763301d5d470a6f921165d26848802d910d0083f9ce68b4c20a50c70e504823a94cb842036954adaff1aa5aae7156484b2fb3fb1bbe3fab5d8b0685746c4ce13e26719e18d59debd1af0bf31fb494cd766c91145cbf315eed267996fcead1b0d859973709c0079f3fb89728ba1764cdcef008a30b97377d6d71e3ada0832cffc3271ecc5f0a3476eb1899b31fb0c465d0fc55aeb3ca5da121db8103dc68a2c35628d5dd29cb6a392b7a929eee6da59a13c94043b1a4137cac4a7b8371fbf7670da1e2bcddc5125e16262cc733125944d7d95500a49a748cb4635ef5249b57590f0c9b92d881c0ac6dfb3c54688cc33bef9c9e84d86edd83e085a5ba60106b623715e6737fc40d9b899d9d34f9589cc724e81531e101140d2227d2036d25ee50b8b3380058cee74c7e490b33716a8adcc1ee33ffe9d66592495c571854a2eb4135a91ff2f0afd70914feb4a3e21486c4e0c3557413c298aaf4ab51324505ffce8b88f3512cece196a5950a3cdab2aa524a3eb680365bead934acb7ef7885f41f2cf627f36553f2b7233e1812269618ea68b1dd600a9c3474ea0b9cbaa657ecb169401acd7b10157bbfb75179a41d660d876dc52f7831aeb880d96116a16466186eb877c887724c115ad58651212472fad0385a5f95d87aa3cf3ed69a0feff52b9aac2aa013d78059ad0498ced2688df4b94df974174fd05a4321c7b2338065556fca02584c1779c0e38fb35f33fb58e509b327b0573f9048d24fb5fd1ddd3043ea01000a28bb23f8c50b730dbde3d12930b8553bfeb68f20669d633016c2c2db366e62853ecdeb9b246d79441f5f1a6fda4ea3c233e2c6d033bb7b558d55ddbe2711e1b2bb1e322bbb597eba7bc63390dc8b0cec2094a1a3a1f55d188c23d6549e0380b9e98b0999cbdf076661cfce3f4fe0f242b2a4ff4f4329c48d7e72785610d94ff535a8870523f5febc6f3b25621efa54778cac6f03a1384e4d6376cd3f661ea5cff07fd1ed7118021b2d06313408765c8360bef0ba823e8226d54e243522ef04ba6aca4e66bb68f1f64bd354c628f05bde6b7179a1352f087536742be41c8f2a23408189fcd4d6c0b51fd91a781fb00eb3fc6093250a5e13255a2b636686eb700476699ea76fff16e80f7622071c3f02a4a59d47d85c230097a9153de035cc4b2ebdbe63fd1ca2f2ccbcdafeb277d5f23bf41b51cb21c928da558ac15184c0c22286417e506ed0ef74ad291d02a63d43c2b3d02c55528e5cebe06917eb44148c64bb07e01fecac29cf8217009742d2026a8f4f1e53f623f75b084c1004e96ed2e2f289ad134ef8cda7a10537581a654d63b8ce527bb1752844c26e0ab0eb124b81646d431498ab7528ff0ec9187d1c9edb2ada59059a28077aa121255e2b306ac1d6527613f89b50a9bded388ce7ff500f569e3e39715822984e3785be0642bdd7ef80ec385986a8ad929d81b351e2bfa255ee3a0ad635ec621a86f18931977995254871eefb91b0354acc25349fe14b05ddf10d6de5469a26d805a1bcb446e0157c25f6f4ddf4f1d2003609f72d2f41627e8e18a61ee354254c212f6e7c792d3f526ddb345bd5285bd5ae6fca04ab711962178a509f23cd0c51dd6c0803a6476b7dd7c8f260c69c1acfb29348a499508a1b4a2846bc50dc3f9145f23706a55740387bea42c06f6716ba22bceb538c3006c5b85ae0cfc94d5afc7fc35e6afb170981eaf90ed52f30a30bf5ffe63cf7fe6c150511e409f6c4014cd663671bfed58866347325e5a28f684a7061743e1d731c65d6a2b93dbc29ce1c3544496536f586b7dea4622e701592d47399a4b85bba4a835e848e71a7d40c2460dce7d1f6b1af2226dcab22d8511a684bbbfa008d1ad9541502f42c7db885836e024724a39bb5d02c57c9d5d73de5fa2dcbc9ad10254b87f5c72c23e66a28462b1b2586585381e4088aed7ddf9974ff679a4f1e8a2d2aa0e693e6936efa83863914f6b675b0e78300bef950b50bdd8373e58847064bed08c4b02415605d452f0c92c814efc80e487f4845e9af1d991a90f7690df9e14c5c89470c0ce949bca17c7340ab15aeb7474309c9b1bf3efa8419816a9badbecbd9ae3f4c9d321b100d22e143fbc85bb973f624fe9033c546194d6ea53a1e6865d884876948dcfe97b55a754ae3100065a513eaf1b10a63cbd3538e5eaeb399ad540a5a55d757b4d701de2384b604dc1fb7c7731c3ae6d0d41aed785a0470d2dc897c2c77d42a52f33c8ea9e62a6a4ef12bca29fb8f7d277672bcfae94674b2f2530e65c822f8708b1c7febd10c6ae714cc732d20b2cb93fcc5c8df6d0746fba8701f1260236942b3fbf0f1cce69720527312d58e7743a3444fac6db4d7027b8dd8906ea440eadce4e224309acf281cc712ffb88d1907325d7c3903c0f85552469c612666293ed569ba4afe74e33b3833b937bea2e134451f6a114778ec1d2f10ced194a8ec7fcc90d7f1218511e3193ba3a2a09f12394debc2a06a85dd4c5277049c3de14e6c73578c0b84744b925fa1e1c3c748d9b0f3b8ba7245c9d61416c51e00f4b9bafe65604a97b2f85ac6bd1b984e19308508fabfcc00c5607cb470f224c9ab7d13fee81daa7d559458d9f93910fda2111964939d649e03e7049d86b4c7ce8366b8b84b43abb70560203bfa6ad1f8719438378b44feb623a32dc6b46b7350019fc887d7b85ca1afb064b9f51ecf4dca35387584abffb6eaf159007074687606010c30c827b252f4915773b74bba305a437b7dcfd611aeedddabf474a3bdda2bdb73832f7989975e8a194bd7364e274ea346c3b2d4d155991cff1065d91a4c1e5110dbb8cb587f07fded9c05b2118dcbe55ef85d4f04bd7a698b5dd021ff53c6b5006f7f7cf755697e75a55b9bf64ce126916c058de88475926e2cdebb2a28cfd331226d94352eb2f1de85cb5d0927c9a579f9f9ea7acb014da6189296cad89ab662a11807e2ae44c029d76ee4e849c73bb0d945016a18238fb3c13fd1bd9766eaee17fb49f8d9e8e6f804032cc7b1bf34701c841f973a16b413bae94f742b4d49ebed0e8c23223bd9a80ae56c32e76d3c85985bf2a5d5fbb32136957e9afcc49f608b68c139a99d145ba8f19c3e9171967e33a63be4ac3c3b060a650b5a1ff87c3ceb08ec55fc80f94892094017eafbdea7077ff541680566d014f447556187710c8876adc4c2217fb41f63d8ebefda", 0xff7}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

525.605338ms ago: executing program 4 (id=7513):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x7f, 0x7, 0x4, 0xfd, 0x0, 0x6, 0x85, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff80, 0x0, @perf_bp={0x0, 0x8}, 0xc000, 0x1, 0x10001, 0x8, 0xb9a4, 0x6, 0xfff, 0x0, 0x80000001, 0x0, 0x5})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

525.268448ms ago: executing program 3 (id=7520):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

357.003035ms ago: executing program 1 (id=7514):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x9, 0x1, 0x8, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)

356.723044ms ago: executing program 3 (id=7515):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'})

312.946539ms ago: executing program 5 (id=7516):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a)

202.782519ms ago: executing program 4 (id=7517):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000))
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xed, 0xb, 0x40, 0xe5, 0x0, 0x0, 0xd040, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
close(r1)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

201.61635ms ago: executing program 1 (id=7527):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x35, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
gettid()
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

97.08961ms ago: executing program 3 (id=7519):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events.local\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x894c, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

96.20429ms ago: executing program 5 (id=7529):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
close(0xffffffffffffffff)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 1 (id=7521):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):


[  990.896195][T18011]  ? ieee80211_register_hw+0xf61/0x3b10
[  990.901791][T18011]  ? ieee80211_tasklet_handler+0x20/0x20
[  990.907462][T18011]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  990.913528][T18011]  ? __debug_object_init+0xe8/0x430
[  990.918778][T18011]  ? __asan_memset+0x22/0x40
[  990.923415][T18011]  ? __hrtimer_init+0x186/0x270
[  990.928354][T18011]  mac80211_hwsim_new_radio+0x2a00/0x4cf0
[  990.934164][T18011]  ? mac80211_hwsim_free+0x220/0x220
[  990.939473][T18011]  ? rcu_is_watching+0x15/0xb0
[  990.944272][T18011]  ? kstrndup+0xbd/0x140
[  990.948569][T18011]  hwsim_new_radio_nl+0xd78/0x19d0
[  990.953722][T18011]  ? __nla_validate+0x50/0x50
[  990.958497][T18011]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  990.964880][T18011]  ? __nla_parse+0x40/0x50
[  990.969346][T18011]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  990.975728][T18011]  genl_family_rcv_msg_doit+0x209/0x2f0
[  990.981335][T18011]  ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0
[  990.987280][T18011]  ? bpf_lsm_capable+0x9/0x10
[  990.991990][T18011]  ? security_capable+0x89/0xb0
[  990.996894][T18011]  genl_rcv_msg+0x60b/0x790
[  991.001458][T18011]  ? genl_bind+0x360/0x360
[  991.005915][T18011]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  991.012275][T18011]  ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0
[  991.018901][T18011]  ? ref_tracker_free+0x634/0x7d0
[  991.023977][T18011]  netlink_rcv_skb+0x216/0x480
[  991.028790][T18011]  ? genl_bind+0x360/0x360
[  991.033273][T18011]  ? netlink_ack+0x1110/0x1110
[  991.038101][T18011]  ? __lock_acquire+0x7c80/0x7c80
[  991.043171][T18011]  ? down_read+0x1ac/0x2e0
[  991.047628][T18011]  genl_rcv+0x28/0x40
[  991.051654][T18011]  netlink_unicast+0x751/0x8d0
[  991.056467][T18011]  netlink_sendmsg+0x8c1/0xbe0
[  991.061285][T18011]  ? netlink_getsockopt+0x580/0x580
[  991.066528][T18011]  ? aa_sock_msg_perm+0x94/0x150
[  991.071508][T18011]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  991.076918][T18011]  ? security_socket_sendmsg+0x80/0xa0
[  991.082500][T18011]  ? netlink_getsockopt+0x580/0x580
[  991.087740][T18011]  ____sys_sendmsg+0x5bf/0x950
[  991.092560][T18011]  ? __asan_memset+0x22/0x40
[  991.097182][T18011]  ? __sys_sendmsg_sock+0x30/0x30
[  991.102238][T18011]  ? __import_iovec+0x5f2/0x860
[  991.107145][T18011]  ? import_iovec+0x73/0xa0
[  991.111695][T18011]  ___sys_sendmsg+0x220/0x290
[  991.116419][T18011]  ? __sys_sendmsg+0x270/0x270
[  991.121308][T18011]  __se_sys_sendmsg+0x1a5/0x270
[  991.126218][T18011]  ? __x64_sys_sendmsg+0x80/0x80
[  991.131223][T18011]  ? lockdep_hardirqs_on+0x98/0x150
[  991.136462][T18011]  do_syscall_64+0x55/0xb0
[  991.140910][T18011]  ? clear_bhb_loop+0x40/0x90
[  991.145613][T18011]  ? clear_bhb_loop+0x40/0x90
[  991.150321][T18011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  991.156250][T18011] RIP: 0033:0x7f1e3d18eec9
[  991.160693][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  991.180336][T18011] RSP: 002b:00007f1e3dfe1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  991.188781][T18011] RAX: ffffffffffffffda RBX: 00007f1e3d3e5fa0 RCX: 00007f1e3d18eec9
[  991.196797][T18011] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  991.204796][T18011] RBP: 00007f1e3d211f91 R08: 0000000000000000 R09: 0000000000000000
[  991.212795][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.220795][T18011] R13: 00007f1e3d3e6038 R14: 00007f1e3d3e5fa0 R15: 00007ffe76b6ac78
[  991.228841][T18011]  </TASK>
[  991.531337][T18022] sock: sock_set_timeout: `syz.5.4775' (pid 18022) tries to set negative timeout
[  992.360073][T18037] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4772'.
[  993.136279][T18055] sock: sock_set_timeout: `syz.1.4781' (pid 18055) tries to set negative timeout
[  993.419385][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  993.437746][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  994.626354][T18078] IPv6: pim6reg1: Disabled Multicast RS
[  994.969203][T18081] sock: sock_set_timeout: `syz.3.4791' (pid 18081) tries to set negative timeout
[  995.597370][T18100] IPv6: pim6reg1: Disabled Multicast RS
[  998.533935][    C1] bridge0: port 3(dummy0) entered forwarding state
[  998.540576][    C1] bridge0: topology change detected, propagating
[  999.158641][T18120] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4805'.
[  999.184610][T18125] netlink: 'syz.4.4806': attribute type 10 has an invalid length.
[  999.232275][T18125] team0: Port device geneve1 added
[  999.323933][T18135] netlink: 'syz.3.4811': attribute type 9 has an invalid length.
[  999.346457][T18135] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4811'.
[  999.403645][T18137] IPv6: pim6reg1: Disabled Multicast RS
[  999.436631][T18141] netlink: 'syz.3.4811': attribute type 9 has an invalid length.
[  999.479844][T18141] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4811'.
[  999.679664][T18149] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.4814'.
[  999.689935][T18149] netlink: zone id is out of range
[  999.695095][T18149] netlink: zone id is out of range
[  999.701354][T18149] netlink: zone id is out of range
[  999.706613][T18149] netlink: zone id is out of range
[  999.737713][T18149] netlink: zone id is out of range
[  999.742903][T18149] netlink: zone id is out of range
[  999.767740][T18149] netlink: zone id is out of range
[  999.772934][T18149] netlink: zone id is out of range
[  999.798768][T18149] netlink: get zone limit has 4 unknown bytes
[ 1000.197919][T18162] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4819'.
[ 1000.475146][T18168] netlink: 'syz.1.4821': attribute type 10 has an invalid length.
[ 1000.722024][T18170] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.4822'.
[ 1000.757165][T18170] netlink: zone id is out of range
[ 1001.110501][T18168] team0: Port device geneve1 added
[ 1001.325710][T18182] netlink: 'syz.5.4826': attribute type 29 has an invalid length.
[ 1001.354103][T18182] netlink: 'syz.5.4826': attribute type 29 has an invalid length.
[ 1001.377202][T18185] netlink: 'syz.5.4826': attribute type 29 has an invalid length.
[ 1001.399833][T18182] netlink: 'syz.5.4826': attribute type 29 has an invalid length.
[ 1002.218156][T18195] netlink: 'syz.4.4830': attribute type 9 has an invalid length.
[ 1002.232878][T18195] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4830'.
[ 1002.391973][T18196] netlink: 'syz.4.4830': attribute type 9 has an invalid length.
[ 1002.404857][T18196] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4830'.
[ 1003.314878][T18213] team0: Port device geneve1 added
[ 1003.909528][T18235] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.4841'.
[ 1004.058891][T18239] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4843'.
[ 1004.202400][T18239] validate_nla: 2 callbacks suppressed
[ 1004.202419][T18239] netlink: 'syz.5.4843': attribute type 9 has an invalid length.
[ 1004.221090][T18239] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4843'.
[ 1004.835354][T18252] netlink: 'syz.5.4850': attribute type 10 has an invalid length.
[ 1004.909075][T18262] netlink: 'syz.1.4861': attribute type 9 has an invalid length.
[ 1004.917034][T18262] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4861'.
[ 1005.012679][T18252] team0: Port device geneve1 added
[ 1005.108461][T18264] netlink: 'syz.1.4861': attribute type 9 has an invalid length.
[ 1005.130119][T18264] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4861'.
[ 1005.202286][T18268] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.4855'.
[ 1005.215294][T18268] net_ratelimit: 10 callbacks suppressed
[ 1005.215311][T18268] netlink: zone id is out of range
[ 1005.244235][T18268] netlink: zone id is out of range
[ 1005.250116][T18268] netlink: zone id is out of range
[ 1005.255606][T18268] netlink: zone id is out of range
[ 1005.269799][T18268] netlink: zone id is out of range
[ 1005.275683][T18268] netlink: zone id is out of range
[ 1005.281652][T18268] netlink: zone id is out of range
[ 1005.287009][T18268] netlink: zone id is out of range
[ 1005.293266][T18268] netlink: get zone limit has 4 unknown bytes
[ 1006.003214][T18288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.047429][T18290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.054789][T18290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1006.073435][T18292] netlink: 'syz.1.4864': attribute type 10 has an invalid length.
[ 1006.088262][T18292] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4864'.
[ 1006.418579][T18299] netlink: 'syz.3.4867': attribute type 9 has an invalid length.
[ 1006.438967][T18299] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4867'.
[ 1008.447504][T18303] netlink: 'syz.1.4866': attribute type 10 has an invalid length.
[ 1008.517056][T18301] netlink: 'syz.3.4867': attribute type 9 has an invalid length.
[ 1008.526616][T18301] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4867'.
[ 1008.660763][T18310] syzkaller0: entered promiscuous mode
[ 1008.666527][T18310] syzkaller0: entered allmulticast mode
[ 1009.318327][T13824] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[ 1009.923762][T13824] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11
[ 1010.727166][T18342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.772787][T18343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.780147][T18343] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1010.930019][T18347] syzkaller0: entered promiscuous mode
[ 1010.935561][T18347] syzkaller0: entered allmulticast mode
[ 1011.036998][T18351] netlink: 'syz.4.4887': attribute type 2 has an invalid length.
[ 1011.553123][T18365] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.4892'.
[ 1012.147896][T18377] syzkaller0: entered promiscuous mode
[ 1012.153708][T18377] syzkaller0: entered allmulticast mode
[ 1012.661184][T18386] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4901'.
[ 1012.696005][T18390] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.4903'.
[ 1012.743182][T18386] netlink: zone id is out of range
[ 1012.771172][T18386] netlink: del zone limit has 8 unknown bytes
[ 1014.305013][T18430] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4914'.
[ 1017.665936][T18493] netlink: 'syz.4.4946': attribute type 10 has an invalid length.
[ 1017.741990][T18493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1017.820559][T18493] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1018.992579][T18514] netlink: 'syz.1.4947': attribute type 10 has an invalid length.
[ 1019.023447][T18514] veth1_macvtap: left allmulticast mode
[ 1019.030328][T18514] veth1_macvtap: left promiscuous mode
[ 1020.736611][T18547] netlink: 'syz.5.4959': attribute type 10 has an invalid length.
[ 1025.088475][T18588] netlink: 'syz.5.4974': attribute type 10 has an invalid length.
[ 1025.096486][T18588] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4974'.
[ 1025.936223][T18588] team0: Port device vlan0 removed
[ 1026.082765][T18588] team0: Port device macvlan1 removed
[ 1032.624706][T13824] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[ 1034.243067][T13824] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[ 1034.893373][T18701] netlink: 'syz.5.5000': attribute type 10 has an invalid length.
[ 1034.920139][T18701] veth1_macvtap: left promiscuous mode
[ 1035.448112][T18712] netlink: 'syz.4.5009': attribute type 10 has an invalid length.
[ 1035.456644][T18712] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5009'.
[ 1035.511763][T18712] batman_adv: batadv0: Interface deactivated: vlan1
[ 1035.837238][T18712] team0: Port device vlan0 removed
[ 1035.890398][T18712] batman_adv: batadv0: Removing interface: vlan1
[ 1036.142111][T13824] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[ 1039.562016][T18745] syzkaller0: entered promiscuous mode
[ 1039.591019][T18745] syzkaller0: entered allmulticast mode
[ 1039.645407][T13824] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[ 1047.606926][T18830] netlink: 'syz.1.5059': attribute type 10 has an invalid length.
[ 1050.366377][T18878] syz.5.5066[18878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1050.366525][T18878] syz.5.5066[18878] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1050.461826][T13824] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[ 1052.529246][T13824] Bluetooth: hci1: command 0x0406 tx timeout
[ 1054.862126][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.868977][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.762875][T18919] syzkaller0: entered promiscuous mode
[ 1056.779504][T18919] syzkaller0: entered allmulticast mode
[ 1063.164470][T18983] syz.1.5105[18983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1063.164618][T18983] syz.1.5105[18983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1063.783313][T18988] syzkaller0: entered promiscuous mode
[ 1063.821672][T18988] syzkaller0: entered allmulticast mode
[ 1072.816236][T19084] pim6reg1: entered promiscuous mode
[ 1072.825313][T19084] pim6reg1: entered allmulticast mode
[ 1076.366816][T13824] Bluetooth: hci2: unknown advertising packet type: 0xff
[ 1077.433650][T13824] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[ 1077.458238][T13824] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1077.467728][T13824] CPU: 1 PID: 13824 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 1077.475508][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1077.485614][T13824] Workqueue: hci0 hci_rx_work
[ 1077.490366][T13824] Call Trace:
[ 1077.493694][T13824]  <TASK>
[ 1077.496678][T13824]  dump_stack_lvl+0x16c/0x230
[ 1077.501454][T13824]  ? show_regs_print_info+0x20/0x20
[ 1077.506702][T13824]  ? load_image+0x3b0/0x3b0
[ 1077.511266][T13824]  sysfs_create_dir_ns+0x256/0x280
[ 1077.516422][T13824]  ? hci_rx_work+0x43a/0xd80
[ 1077.521045][T13824]  ? sysfs_warn_dup+0xa0/0xa0
[ 1077.525758][T13824]  ? do_raw_spin_unlock+0x121/0x230
[ 1077.531009][T13824]  kobject_add_internal+0x6b8/0xc70
[ 1077.536253][T13824]  kobject_add+0x156/0x220
[ 1077.540714][T13824]  ? __rwlock_init+0x150/0x150
[ 1077.545508][T13824]  ? kobject_init+0x1e0/0x1e0
[ 1077.550225][T13824]  ? _raw_spin_unlock+0x28/0x40
[ 1077.555124][T13824]  ? get_device_parent+0x366/0x390
[ 1077.560273][T13824]  device_add+0x408/0xc20
[ 1077.564661][T13824]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1077.569650][T13824]  le_conn_complete_evt+0xf36/0x1500
[ 1077.574989][T13824]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1077.581266][T13824]  ? bt_info+0x160/0x160
[ 1077.585533][T13824]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1077.591199][T13824]  ? skb_pull_data+0xfb/0x200
[ 1077.595913][T13824]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1077.601837][T13824]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[ 1077.608285][T13824]  ? hci_remote_host_features_evt+0x160/0x160
[ 1077.614386][T13824]  hci_event_packet+0x795/0x1210
[ 1077.619513][T13824]  ? bis_list+0x290/0x290
[ 1077.623923][T13824]  ? lockdep_hardirqs_on+0x98/0x150
[ 1077.629210][T13824]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1077.634514][T13824]  hci_rx_work+0x43a/0xd80
[ 1077.639013][T13824]  ? process_scheduled_works+0x957/0x15b0
[ 1077.644804][T13824]  process_scheduled_works+0xa45/0x15b0
[ 1077.650463][T13824]  ? assign_work+0x400/0x400
[ 1077.655127][T13824]  ? assign_work+0x39e/0x400
[ 1077.659833][T13824]  worker_thread+0xa55/0xfc0
[ 1077.665080][T13824]  kthread+0x2fa/0x390
[ 1077.669236][T13824]  ? pr_cont_work+0x560/0x560
[ 1077.674000][T13824]  ? kthread_blkcg+0xd0/0xd0
[ 1077.678654][T13824]  ret_from_fork+0x48/0x80
[ 1077.683131][T13824]  ? kthread_blkcg+0xd0/0xd0
[ 1077.687875][T13824]  ret_from_fork_asm+0x11/0x20
[ 1077.692872][T13824]  </TASK>
[ 1077.700855][T13824] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1077.715686][T13824] Bluetooth: hci0: failed to register connection device
[ 1079.736016][T19161] Bluetooth: hci0: command 0x0406 tx timeout
[ 1080.866234][T19170] pim6reg1: entered promiscuous mode
[ 1080.871716][T19170] pim6reg1: entered allmulticast mode
[ 1081.464499][T19161] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[ 1081.473162][T19161] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1081.483999][T19161] CPU: 0 PID: 19161 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1081.491733][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1081.501936][T19161] Workqueue: hci3 hci_rx_work
[ 1081.506700][T19161] Call Trace:
[ 1081.510065][T19161]  <TASK>
[ 1081.513044][T19161]  dump_stack_lvl+0x16c/0x230
[ 1081.517781][T19161]  ? show_regs_print_info+0x20/0x20
[ 1081.523036][T19161]  ? load_image+0x3b0/0x3b0
[ 1081.527601][T19161]  sysfs_create_dir_ns+0x256/0x280
[ 1081.532786][T19161]  ? hci_rx_work+0x43a/0xd80
[ 1081.537435][T19161]  ? sysfs_warn_dup+0xa0/0xa0
[ 1081.542190][T19161]  ? do_raw_spin_unlock+0x121/0x230
[ 1081.547458][T19161]  kobject_add_internal+0x6b8/0xc70
[ 1081.552729][T19161]  kobject_add+0x156/0x220
[ 1081.557201][T19161]  ? __rwlock_init+0x150/0x150
[ 1081.562037][T19161]  ? kobject_init+0x1e0/0x1e0
[ 1081.566792][T19161]  ? _raw_spin_unlock+0x28/0x40
[ 1081.571719][T19161]  ? get_device_parent+0x366/0x390
[ 1081.576914][T19161]  device_add+0x408/0xc20
[ 1081.581313][T19161]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1081.586325][T19161]  le_conn_complete_evt+0xf36/0x1500
[ 1081.591705][T19161]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1081.598023][T19161]  ? bt_info+0x160/0x160
[ 1081.602328][T19161]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1081.608028][T19161]  ? skb_pull_data+0xfb/0x200
[ 1081.612764][T19161]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1081.618704][T19161]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[ 1081.625147][T19161]  ? hci_remote_host_features_evt+0x160/0x160
[ 1081.631251][T19161]  hci_event_packet+0x795/0x1210
[ 1081.636255][T19161]  ? bis_list+0x290/0x290
[ 1081.640624][T19161]  ? lockdep_hardirqs_on+0x98/0x150
[ 1081.646049][T19161]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1081.651279][T19161]  hci_rx_work+0x43a/0xd80
[ 1081.655736][T19161]  ? process_scheduled_works+0x957/0x15b0
[ 1081.661495][T19161]  process_scheduled_works+0xa45/0x15b0
[ 1081.667106][T19161]  ? assign_work+0x400/0x400
[ 1081.671750][T19161]  ? assign_work+0x39e/0x400
[ 1081.676396][T19161]  worker_thread+0xa55/0xfc0
[ 1081.681031][T19161]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1081.686969][T19161]  ? _raw_spin_unlock+0x40/0x40
[ 1081.691843][T19161]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1081.697864][T19161]  kthread+0x2fa/0x390
[ 1081.702052][T19161]  ? pr_cont_work+0x560/0x560
[ 1081.706803][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1081.711415][T19161]  ret_from_fork+0x48/0x80
[ 1081.715862][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1081.720483][T19161]  ret_from_fork_asm+0x11/0x20
[ 1081.725307][T19161]  </TASK>
[ 1081.730665][T19161] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1081.744776][T19161] Bluetooth: hci3: failed to register connection device
[ 1081.935845][T19200] pim6reg1: entered promiscuous mode
[ 1081.942533][T19200] pim6reg1: entered allmulticast mode
[ 1083.807787][ T5801] Bluetooth: hci3: command tx timeout
[ 1086.339172][T19229] bridge0: port 3(dummy0) entered disabled state
[ 1086.347152][T19229] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.356623][T19229] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.384261][T19229] bridge0: entered allmulticast mode
[ 1086.442802][T19232] bridge0: port 3(dummy0) entered disabled state
[ 1086.452810][T19232] bridge_slave_1: left allmulticast mode
[ 1086.459020][T19232] bridge_slave_1: left promiscuous mode
[ 1086.465283][T19232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1086.483298][T19232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1086.675083][T19234] pim6reg1: entered promiscuous mode
[ 1086.680580][T19234] pim6reg1: entered allmulticast mode
[ 1087.234796][ T5801] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[ 1089.818986][T19292] netlink: 'syz.4.5222': attribute type 15 has an invalid length.
[ 1089.865492][T19292] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.5222'.
[ 1092.612268][T19328] pim6reg1: left promiscuous mode
[ 1092.652376][T19328] pim6reg1: left allmulticast mode
[ 1092.865311][T19332] netlink: 'syz.3.5236': attribute type 15 has an invalid length.
[ 1092.903648][T19332] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.5236'.
[ 1093.329250][T19344] pim6reg1: left promiscuous mode
[ 1093.334389][T19344] pim6reg1: left allmulticast mode
[ 1095.086478][T19356] syzkaller0: entered promiscuous mode
[ 1095.107905][T19356] syzkaller0: entered allmulticast mode
[ 1098.916067][ T5801] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[ 1098.985608][T19365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1099.128146][T19371] netlink: 'syz.3.5248': attribute type 10 has an invalid length.
[ 1099.191954][T19371] bond0: (slave wlan1): Releasing backup interface
[ 1099.281796][T19371] team0: Port device wlan1 added
[ 1099.308428][T19373] netlink: 'syz.5.5250': attribute type 15 has an invalid length.
[ 1099.317305][T19373] netlink: 11254 bytes leftover after parsing attributes in process `syz.5.5250'.
[ 1099.330343][T19370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.401145][T19371] syz.3.5248 (19371) used greatest stack depth: 16808 bytes left
[ 1099.765060][T19383] netlink: 'syz.5.5255': attribute type 29 has an invalid length.
[ 1099.774297][T19383] netlink: 'syz.5.5255': attribute type 29 has an invalid length.
[ 1099.810297][T19383] netlink: 'syz.5.5255': attribute type 29 has an invalid length.
[ 1099.932567][T19386] bridge0: port 3(dummy0) entered disabled state
[ 1099.940160][T19386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.949111][T19386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.975948][T19386] bridge0: entered allmulticast mode
[ 1100.175913][T19386] bridge0: port 3(dummy0) entered disabled state
[ 1100.234815][T19386] bridge_slave_1: left allmulticast mode
[ 1100.241128][T19386] bridge_slave_1: left promiscuous mode
[ 1100.250386][T19386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1100.302162][T19386] bridge_slave_0: left allmulticast mode
[ 1100.314146][T19386] bridge_slave_0: left promiscuous mode
[ 1100.324077][T19386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1100.910625][T19405] netlink: 'syz.1.5261': attribute type 15 has an invalid length.
[ 1100.931528][T19405] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.5261'.
[ 1101.356304][T19418] netlink: 'syz.4.5267': attribute type 29 has an invalid length.
[ 1101.368850][T19418] netlink: 'syz.4.5267': attribute type 29 has an invalid length.
[ 1101.502712][T19418] netlink: 'syz.4.5267': attribute type 29 has an invalid length.
[ 1101.673319][T19425] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1101.682295][T19425] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1101.704205][T19425] bridge0: entered allmulticast mode
[ 1101.794232][T19431] bridge_slave_1: left allmulticast mode
[ 1101.800286][T19431] bridge_slave_1: left promiscuous mode
[ 1101.809853][T19431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1101.822326][T19431] bridge_slave_0: left allmulticast mode
[ 1101.831555][T19431] bridge_slave_0: left promiscuous mode
[ 1101.837486][T19431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.460689][T19442] netlink: 'syz.4.5278': attribute type 15 has an invalid length.
[ 1102.472975][T19442] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.5278'.
[ 1103.072116][T19458] bridge0: port 3(dummy0) entered disabled state
[ 1103.079833][T19458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.088039][T19458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.105438][T19458] bridge0: entered allmulticast mode
[ 1103.198752][T19463] bridge0: port 3(dummy0) entered disabled state
[ 1103.281614][T19463] bridge_slave_1: left allmulticast mode
[ 1103.310679][T19463] bridge_slave_1: left promiscuous mode
[ 1103.323952][T19463] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.357428][T19463] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.743622][T19470] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.5288'.
[ 1107.641485][T19500] validate_nla: 4 callbacks suppressed
[ 1107.641525][T19500] netlink: 'syz.4.5300': attribute type 15 has an invalid length.
[ 1107.676779][T19500] netlink: 11254 bytes leftover after parsing attributes in process `syz.4.5300'.
[ 1107.911588][T19509] netlink: 'syz.1.5304': attribute type 2 has an invalid length.
[ 1107.929175][T19509] netlink: 'syz.1.5304': attribute type 8 has an invalid length.
[ 1107.937162][T19509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5304'.
[ 1108.068083][T19511] netlink: 'syz.4.5305': attribute type 10 has an invalid length.
[ 1108.148610][T19511] bond0: (slave wlan1): Releasing backup interface
[ 1108.241758][T19511] team0: Port device wlan1 added
[ 1108.342877][T19510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1108.459465][T19511] syz.4.5305 (19511) used greatest stack depth: 16680 bytes left
[ 1109.520045][T19546] syzkaller0: entered promiscuous mode
[ 1109.525924][T19546] syzkaller0: entered allmulticast mode
[ 1109.572523][T19548] netlink: 'syz.5.5320': attribute type 10 has an invalid length.
[ 1109.686752][T19548] team0: Port device wlan1 added
[ 1109.773804][T19547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.049280][T19558] syzkaller0: entered promiscuous mode
[ 1110.055055][T19558] syzkaller0: entered allmulticast mode
[ 1114.127787][T19574] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5328'.
[ 1114.747497][T19587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5341'.
[ 1114.888046][T19592] netlink: 'syz.1.5333': attribute type 10 has an invalid length.
[ 1114.897482][T19592] team0: Device wlan1 is of different type
[ 1114.915595][T19591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1114.929165][T19590] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1114.987168][T19590] syzkaller0: entered promiscuous mode
[ 1115.012456][T19590] syzkaller0: entered allmulticast mode
[ 1115.210844][T19601] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.5338'.
[ 1116.291216][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.298257][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1119.227255][T19625] netlink: 'syz.1.5346': attribute type 10 has an invalid length.
[ 1119.245583][T19625] team0: Device wlan1 is of different type
[ 1119.253155][T19627] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5347'.
[ 1119.266790][T19624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1120.882968][T19645] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5353'.
[ 1121.896892][T19666] syzkaller0: entered promiscuous mode
[ 1121.911163][T19666] syzkaller0: entered allmulticast mode
[ 1121.927884][T19667] netlink: 'syz.1.5360': attribute type 10 has an invalid length.
[ 1121.988676][T19667] team0: Device hsr_slave_0 failed to register rx_handler
[ 1133.138827][T19756] sock: sock_set_timeout: `syz.1.5392' (pid 19756) tries to set negative timeout
[ 1133.860750][T19774] netlink: 'syz.1.5399': attribute type 1 has an invalid length.
[ 1133.898956][T19774] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5399'.
[ 1133.919718][T19774] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5399'.
[ 1134.162655][T19779] netlink: 'syz.5.5401': attribute type 10 has an invalid length.
[ 1134.212407][T19779] team0: Device hsr_slave_0 failed to register rx_handler
[ 1134.839051][T19788] sock: sock_set_timeout: `syz.5.5404' (pid 19788) tries to set negative timeout
[ 1136.079495][T19810] syzkaller0: entered promiscuous mode
[ 1136.085051][T19810] syzkaller0: entered allmulticast mode
[ 1139.082923][T19815] netlink: 'syz.4.5414': attribute type 10 has an invalid length.
[ 1139.101185][T19815] team0: Device hsr_slave_0 failed to register rx_handler
[ 1139.312537][T19829] sock: sock_set_timeout: `syz.4.5416' (pid 19829) tries to set negative timeout
[ 1139.882559][T19849] syzkaller0: entered promiscuous mode
[ 1139.888513][T19849] syzkaller0: entered allmulticast mode
[ 1141.203114][T19860] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.5430'.
[ 1142.708191][T19858] netlink: 'syz.1.5429': attribute type 10 has an invalid length.
[ 1142.732148][T19858] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1142.758212][T19858] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1145.372510][T19916] netlink: 'syz.5.5454': attribute type 10 has an invalid length.
[ 1145.391088][T19916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5454'.
[ 1145.403005][T19916] team0: entered promiscuous mode
[ 1145.412223][T19916] team_slave_0: entered promiscuous mode
[ 1145.418283][T19916] team_slave_1: entered promiscuous mode
[ 1145.424971][T19916] geneve1: entered promiscuous mode
[ 1145.444928][T19916] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[ 1145.453619][T19916] team0: entered allmulticast mode
[ 1145.467749][T19916] team_slave_0: entered allmulticast mode
[ 1145.478882][T19916] team_slave_1: entered allmulticast mode
[ 1145.492912][T19916] geneve1: entered allmulticast mode
[ 1145.503092][T19916] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[ 1145.539384][T19916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1146.511537][T19941] netlink: 'syz.4.5462': attribute type 12 has an invalid length.
[ 1146.559482][T19941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5462'.
[ 1147.610845][T19968] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5470'.
[ 1147.687386][ T5801] Bluetooth: hci0: unknown advertising packet type: 0x20
[ 1148.375151][T19979] syzkaller0: entered promiscuous mode
[ 1148.423699][T19979] syzkaller0: entered allmulticast mode
[ 1148.851013][T20009] netlink: 'syz.4.5485': attribute type 1 has an invalid length.
[ 1148.868043][T20009] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5485'.
[ 1148.887115][T20009] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5485'.
[ 1151.042971][T20022] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.5489'.
[ 1151.566991][T20044] syzkaller0: entered promiscuous mode
[ 1151.590415][T20044] syzkaller0: entered allmulticast mode
[ 1152.573236][T20053] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5499'.
[ 1152.585875][T20053] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.5499'.
[ 1152.600108][T20053] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5499'.
[ 1155.097684][T20070] netlink: 'syz.3.5507': attribute type 10 has an invalid length.
[ 1155.105853][T20070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5507'.
[ 1155.124733][T20070] team0: entered promiscuous mode
[ 1155.130236][T20070] team_slave_1: entered promiscuous mode
[ 1155.136135][T20070] vlan0: entered promiscuous mode
[ 1155.158267][T20070] geneve1: entered promiscuous mode
[ 1155.163766][T20070] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode
[ 1155.178230][T20070] team0: entered allmulticast mode
[ 1155.183509][T20070] team_slave_1: entered allmulticast mode
[ 1155.201001][T20070] geneve1: entered allmulticast mode
[ 1155.206678][T20070] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode
[ 1155.228938][T20070] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1156.557200][ T5801] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[ 1156.881752][T20107] netlink: 'syz.4.5520': attribute type 10 has an invalid length.
[ 1156.899032][T20107] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5520'.
[ 1156.910052][T20107] team0: entered promiscuous mode
[ 1156.915175][T20107] team_slave_0: entered promiscuous mode
[ 1156.922673][T20107] team_slave_1: entered promiscuous mode
[ 1156.929092][T20107] geneve1: entered promiscuous mode
[ 1156.934652][T20107] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[ 1156.943590][T20107] team0: entered allmulticast mode
[ 1156.949531][T20107] team_slave_0: entered allmulticast mode
[ 1156.955548][T20107] team_slave_1: entered allmulticast mode
[ 1156.963534][T20107] geneve1: entered allmulticast mode
[ 1156.969455][T20107] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[ 1156.977764][T20107] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1157.055239][T20103] syzkaller0: entered promiscuous mode
[ 1157.061103][T20103] syzkaller0: entered allmulticast mode
[ 1157.073320][T20108] syzkaller0: entered promiscuous mode
[ 1157.079143][T20108] syzkaller0: entered allmulticast mode
[ 1157.324282][ T5801] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7
[ 1160.073756][T20131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1160.088501][T20131] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1160.096611][T20131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1160.104187][T20131] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1160.134328][T20131] bond0: (slave batadv0): Releasing backup interface
[ 1160.143034][T20131] batadv0 (unregistering): left promiscuous mode
[ 1160.280233][ T5801] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[ 1160.343123][ T5801] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[ 1160.994911][T20174] syzkaller0: entered promiscuous mode
[ 1161.000822][T20174] syzkaller0: entered allmulticast mode
[ 1161.116868][T19161] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7
[ 1161.274412][T19161] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[ 1161.274633][T20186] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5552'.
[ 1161.281840][T19161] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[ 1161.281906][T19161] CPU: 0 PID: 19161 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1161.281930][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1161.281946][T19161] Workqueue: hci3 hci_rx_work
[ 1161.330782][T19161] Call Trace:
[ 1161.334084][T19161]  <TASK>
[ 1161.337042][T19161]  dump_stack_lvl+0x16c/0x230
[ 1161.341757][T19161]  ? show_regs_print_info+0x20/0x20
[ 1161.347002][T19161]  ? load_image+0x3b0/0x3b0
[ 1161.351556][T19161]  sysfs_create_dir_ns+0x256/0x280
[ 1161.356795][T19161]  ? hci_rx_work+0x43a/0xd80
[ 1161.361433][T19161]  ? sysfs_warn_dup+0xa0/0xa0
[ 1161.366156][T19161]  ? do_raw_spin_unlock+0x121/0x230
[ 1161.371397][T19161]  kobject_add_internal+0x6b8/0xc70
[ 1161.376625][T19161]  kobject_add+0x156/0x220
[ 1161.381079][T19161]  ? __rwlock_init+0x150/0x150
[ 1161.385876][T19161]  ? kobject_init+0x1e0/0x1e0
[ 1161.390594][T19161]  ? _raw_spin_unlock+0x28/0x40
[ 1161.395475][T19161]  ? get_device_parent+0x366/0x390
[ 1161.400629][T19161]  device_add+0x408/0xc20
[ 1161.404992][T19161]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1161.409966][T19161]  le_conn_complete_evt+0xf36/0x1500
[ 1161.415288][T19161]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1161.421583][T19161]  ? bt_info+0x160/0x160
[ 1161.425854][T19161]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1161.431544][T19161]  ? skb_pull_data+0xfb/0x200
[ 1161.436279][T19161]  hci_le_conn_complete_evt+0x187/0x440
[ 1161.441860][T19161]  ? hci_remote_host_features_evt+0x160/0x160
[ 1161.447978][T19161]  hci_event_packet+0x795/0x1210
[ 1161.453010][T19161]  ? bis_list+0x290/0x290
[ 1161.457471][T19161]  ? lockdep_hardirqs_on+0x98/0x150
[ 1161.462704][T19161]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1161.467955][T19161]  hci_rx_work+0x43a/0xd80
[ 1161.472418][T19161]  ? process_scheduled_works+0x957/0x15b0
[ 1161.478180][T19161]  process_scheduled_works+0xa45/0x15b0
[ 1161.483798][T19161]  ? assign_work+0x400/0x400
[ 1161.488471][T19161]  ? assign_work+0x39e/0x400
[ 1161.493130][T19161]  worker_thread+0xa55/0xfc0
[ 1161.497799][T19161]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1161.503749][T19161]  ? _raw_spin_unlock+0x40/0x40
[ 1161.508673][T19161]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1161.514677][T19161]  kthread+0x2fa/0x390
[ 1161.518807][T19161]  ? pr_cont_work+0x560/0x560
[ 1161.523573][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1161.528224][T19161]  ret_from_fork+0x48/0x80
[ 1161.532743][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1161.537405][T19161]  ret_from_fork_asm+0x11/0x20
[ 1161.542278][T19161]  </TASK>
[ 1161.546981][T19161] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1161.563814][T19161] Bluetooth: hci3: failed to register connection device
[ 1162.972306][ T5801] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7
[ 1162.983382][T20206] syzkaller0: entered promiscuous mode
[ 1162.999624][T20206] syzkaller0: entered allmulticast mode
[ 1163.144711][ T5801] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[ 1163.152815][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1163.162331][ T5801] CPU: 1 PID: 5801 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1163.169974][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1163.180084][ T5801] Workqueue: hci0 hci_rx_work
[ 1163.184793][ T5801] Call Trace:
[ 1163.188178][ T5801]  <TASK>
[ 1163.191126][ T5801]  dump_stack_lvl+0x16c/0x230
[ 1163.195838][ T5801]  ? show_regs_print_info+0x20/0x20
[ 1163.201088][ T5801]  ? load_image+0x3b0/0x3b0
[ 1163.205621][ T5801]  sysfs_create_dir_ns+0x256/0x280
[ 1163.210763][ T5801]  ? hci_rx_work+0x43a/0xd80
[ 1163.215376][ T5801]  ? sysfs_warn_dup+0xa0/0xa0
[ 1163.220081][ T5801]  ? do_raw_spin_unlock+0x121/0x230
[ 1163.225313][ T5801]  kobject_add_internal+0x6b8/0xc70
[ 1163.230550][ T5801]  kobject_add+0x156/0x220
[ 1163.235344][ T5801]  ? __rwlock_init+0x150/0x150
[ 1163.240222][ T5801]  ? kobject_init+0x1e0/0x1e0
[ 1163.244933][ T5801]  ? _raw_spin_unlock+0x28/0x40
[ 1163.249803][ T5801]  ? get_device_parent+0x366/0x390
[ 1163.254943][ T5801]  device_add+0x408/0xc20
[ 1163.259306][ T5801]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1163.264274][ T5801]  le_conn_complete_evt+0xf36/0x1500
[ 1163.269599][ T5801]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1163.275868][ T5801]  ? bt_info+0x160/0x160
[ 1163.280134][ T5801]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1163.285969][ T5801]  ? skb_pull_data+0xfb/0x200
[ 1163.291217][ T5801]  hci_le_conn_complete_evt+0x187/0x440
[ 1163.296805][ T5801]  ? hci_remote_host_features_evt+0x160/0x160
[ 1163.302902][ T5801]  hci_event_packet+0x795/0x1210
[ 1163.307878][ T5801]  ? bis_list+0x290/0x290
[ 1163.312254][ T5801]  ? lockdep_hardirqs_on+0x98/0x150
[ 1163.317484][ T5801]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1163.322712][ T5801]  hci_rx_work+0x43a/0xd80
[ 1163.327168][ T5801]  ? process_scheduled_works+0x957/0x15b0
[ 1163.332912][ T5801]  process_scheduled_works+0xa45/0x15b0
[ 1163.338511][ T5801]  ? assign_work+0x400/0x400
[ 1163.343163][ T5801]  ? assign_work+0x39e/0x400
[ 1163.347779][ T5801]  worker_thread+0xa55/0xfc0
[ 1163.352419][ T5801]  kthread+0x2fa/0x390
[ 1163.356501][ T5801]  ? pr_cont_work+0x560/0x560
[ 1163.361196][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1163.365801][ T5801]  ret_from_fork+0x48/0x80
[ 1163.370242][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1163.374847][ T5801]  ret_from_fork_asm+0x11/0x20
[ 1163.379657][ T5801]  </TASK>
[ 1163.383810][ T5801] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1163.398149][ T5801] Bluetooth: hci0: failed to register connection device
[ 1163.457345][T20218] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5564'.
[ 1164.636065][T19161] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7
[ 1166.618212][T20248] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1166.634589][T20248] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1166.644462][T20248] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1166.656623][T20267] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.5584'.
[ 1166.662628][T20248] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1166.731143][T20248] bond0: (slave batadv0): Releasing backup interface
[ 1167.375678][T19161] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[ 1167.586728][T20292] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5594'.
[ 1170.066575][T20308] syzkaller0: entered promiscuous mode
[ 1170.072362][T20308] syzkaller0: entered allmulticast mode
[ 1170.162083][T20314] syzkaller0: tun_chr_ioctl cmd 1074025677
[ 1170.179894][T20314] syzkaller0: Linktype set failed because interface is up
[ 1170.208580][T20318] netlink: 'syz.5.5610': attribute type 29 has an invalid length.
[ 1172.116192][T20318] netlink: 'syz.5.5610': attribute type 29 has an invalid length.
[ 1173.928909][T20353] netlink: 'syz.1.5616': attribute type 29 has an invalid length.
[ 1176.292162][T20366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1177.070645][T20353] netlink: 'syz.1.5616': attribute type 29 has an invalid length.
[ 1177.894323][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.901647][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.505351][T20401] netlink: 'syz.5.5632': attribute type 4 has an invalid length.
[ 1178.545274][T20401] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5632'.
[ 1178.629215][T20401] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1179.436974][T20417] netlink: 'syz.3.5636': attribute type 29 has an invalid length.
[ 1179.479921][T20417] netlink: 'syz.3.5636': attribute type 29 has an invalid length.
[ 1181.242505][T20433] netlink: 'syz.4.5644': attribute type 4 has an invalid length.
[ 1181.374597][T20433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5644'.
[ 1181.464492][T20433] : renamed from bond0 (while UP)
[ 1183.497450][T20462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1186.914708][T20481] netlink: 'syz.1.5655': attribute type 4 has an invalid length.
[ 1186.922780][T20481] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5655'.
[ 1186.933919][T20481] : renamed from .`
[ 1187.221307][T19161] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[ 1187.229489][T19161] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1187.239028][T19161] CPU: 0 PID: 19161 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1187.246745][T19161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1187.256883][T19161] Workqueue: hci2 hci_rx_work
[ 1187.261655][T19161] Call Trace:
[ 1187.264977][T19161]  <TASK>
[ 1187.268044][T19161]  dump_stack_lvl+0x16c/0x230
[ 1187.272885][T19161]  ? show_regs_print_info+0x20/0x20
[ 1187.278135][T19161]  ? load_image+0x3b0/0x3b0
[ 1187.282720][T19161]  sysfs_create_dir_ns+0x256/0x280
[ 1187.287903][T19161]  ? hci_rx_work+0x43a/0xd80
[ 1187.292542][T19161]  ? sysfs_warn_dup+0xa0/0xa0
[ 1187.297280][T19161]  ? do_raw_spin_unlock+0x121/0x230
[ 1187.302543][T19161]  kobject_add_internal+0x6b8/0xc70
[ 1187.307816][T19161]  kobject_add+0x156/0x220
[ 1187.312295][T19161]  ? __rwlock_init+0x150/0x150
[ 1187.317460][T19161]  ? kobject_init+0x1e0/0x1e0
[ 1187.322194][T19161]  ? _raw_spin_unlock+0x28/0x40
[ 1187.327095][T19161]  ? get_device_parent+0x366/0x390
[ 1187.332388][T19161]  device_add+0x408/0xc20
[ 1187.336995][T19161]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1187.342046][T19161]  le_conn_complete_evt+0xf36/0x1500
[ 1187.347442][T19161]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1187.353759][T19161]  ? bt_info+0x160/0x160
[ 1187.358151][T19161]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1187.363847][T19161]  ? skb_pull_data+0xfb/0x200
[ 1187.368596][T19161]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1187.374633][T19161]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[ 1187.381150][T19161]  ? hci_remote_host_features_evt+0x160/0x160
[ 1187.387268][T19161]  hci_event_packet+0x795/0x1210
[ 1187.392290][T19161]  ? bis_list+0x290/0x290
[ 1187.396687][T19161]  ? lockdep_hardirqs_on+0x98/0x150
[ 1187.401970][T19161]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1187.407327][T19161]  hci_rx_work+0x43a/0xd80
[ 1187.411830][T19161]  ? process_scheduled_works+0x957/0x15b0
[ 1187.417612][T19161]  process_scheduled_works+0xa45/0x15b0
[ 1187.423299][T19161]  ? assign_work+0x400/0x400
[ 1187.427964][T19161]  ? assign_work+0x39e/0x400
[ 1187.432617][T19161]  worker_thread+0xa55/0xfc0
[ 1187.437268][T19161]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1187.443205][T19161]  ? _raw_spin_unlock+0x40/0x40
[ 1187.448091][T19161]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1187.454099][T19161]  kthread+0x2fa/0x390
[ 1187.458208][T19161]  ? pr_cont_work+0x560/0x560
[ 1187.462942][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1187.467599][T19161]  ret_from_fork+0x48/0x80
[ 1187.472064][T19161]  ? kthread_blkcg+0xd0/0xd0
[ 1187.476697][T19161]  ret_from_fork_asm+0x11/0x20
[ 1187.481559][T19161]  </TASK>
[ 1187.486074][T19161] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1187.500198][T19161] Bluetooth: hci2: failed to register connection device
[ 1189.133835][ T5801] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[ 1189.144744][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1189.154494][ T5801] CPU: 0 PID: 5801 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1189.162097][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1189.172188][ T5801] Workqueue: hci0 hci_rx_work
[ 1189.176900][ T5801] Call Trace:
[ 1189.180194][ T5801]  <TASK>
[ 1189.183140][ T5801]  dump_stack_lvl+0x16c/0x230
[ 1189.187875][ T5801]  ? show_regs_print_info+0x20/0x20
[ 1189.193111][ T5801]  ? load_image+0x3b0/0x3b0
[ 1189.197661][ T5801]  sysfs_create_dir_ns+0x256/0x280
[ 1189.202900][ T5801]  ? hci_rx_work+0x43a/0xd80
[ 1189.207632][ T5801]  ? sysfs_warn_dup+0xa0/0xa0
[ 1189.212347][ T5801]  ? do_raw_spin_unlock+0x121/0x230
[ 1189.217582][ T5801]  kobject_add_internal+0x6b8/0xc70
[ 1189.222816][ T5801]  kobject_add+0x156/0x220
[ 1189.227265][ T5801]  ? __rwlock_init+0x150/0x150
[ 1189.232054][ T5801]  ? kobject_init+0x1e0/0x1e0
[ 1189.236762][ T5801]  ? _raw_spin_unlock+0x28/0x40
[ 1189.241666][ T5801]  ? get_device_parent+0x366/0x390
[ 1189.246859][ T5801]  device_add+0x408/0xc20
[ 1189.251232][ T5801]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1189.256208][ T5801]  le_conn_complete_evt+0xf36/0x1500
[ 1189.261539][ T5801]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1189.267812][ T5801]  ? bt_info+0x160/0x160
[ 1189.272074][ T5801]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1189.277836][ T5801]  ? skb_pull_data+0xfb/0x200
[ 1189.282545][ T5801]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1189.288468][ T5801]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[ 1189.294999][ T5801]  ? hci_remote_host_features_evt+0x160/0x160
[ 1189.301092][ T5801]  hci_event_packet+0x795/0x1210
[ 1189.306082][ T5801]  ? bis_list+0x290/0x290
[ 1189.310463][ T5801]  ? lockdep_hardirqs_on+0x98/0x150
[ 1189.315715][ T5801]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1189.320953][ T5801]  hci_rx_work+0x43a/0xd80
[ 1189.325407][ T5801]  ? process_scheduled_works+0x957/0x15b0
[ 1189.331154][ T5801]  process_scheduled_works+0xa45/0x15b0
[ 1189.336744][ T5801]  ? assign_work+0x400/0x400
[ 1189.341364][ T5801]  ? assign_work+0x39e/0x400
[ 1189.345979][ T5801]  worker_thread+0xa55/0xfc0
[ 1189.350616][ T5801]  kthread+0x2fa/0x390
[ 1189.354706][ T5801]  ? pr_cont_work+0x560/0x560
[ 1189.359404][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1189.364010][ T5801]  ret_from_fork+0x48/0x80
[ 1189.368446][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1189.373059][ T5801]  ret_from_fork_asm+0x11/0x20
[ 1189.377865][ T5801]  </TASK>
[ 1189.382835][ T5801] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1189.396919][ T5801] Bluetooth: hci0: failed to register connection device
[ 1191.894836][T20569] netlink: 'syz.1.5685': attribute type 4 has an invalid length.
[ 1191.907196][T20569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5685'.
[ 1192.831851][T20577] netlink: 'syz.4.5689': attribute type 3 has an invalid length.
[ 1192.840011][T20577] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5689'.
[ 1194.010490][T20603] netlink: 'syz.5.5698': attribute type 4 has an invalid length.
[ 1194.019011][T20603] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5698'.
[ 1196.041300][T20628] netlink: 'syz.3.5710': attribute type 4 has an invalid length.
[ 1196.055610][T20628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5710'.
[ 1197.684515][T20652] netlink: 'syz.1.5716': attribute type 3 has an invalid length.
[ 1197.722753][T20652] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5716'.
[ 1199.374453][T19161] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9
[ 1200.645215][T20696] netlink: 'syz.3.5731': attribute type 3 has an invalid length.
[ 1200.731245][T20696] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5731'.
[ 1201.275838][T20708] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5734'.
[ 1201.394327][T19161] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[ 1204.329061][T20736] netlink: 'syz.3.5746': attribute type 21 has an invalid length.
[ 1204.336984][T20736] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1204.354174][T20736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1204.362020][T20736] IPv6: NLM_F_CREATE should be set when creating new route
[ 1204.369472][T20736] IPv6: NLM_F_CREATE should be set when creating new route
[ 1204.376756][T20736] IPv6: NLM_F_CREATE should be set when creating new route
[ 1205.090485][T19161] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9
[ 1205.316005][T20756] netlink: 'syz.1.5753': attribute type 21 has an invalid length.
[ 1205.351109][T20756] netlink: 'syz.1.5753': attribute type 6 has an invalid length.
[ 1205.367027][T20756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5753'.
[ 1205.666710][T19161] Bluetooth: hci0: Malformed LE Event: 0x0b
[ 1205.674783][T20766] netlink: 'syz.4.5758': attribute type 21 has an invalid length.
[ 1205.686247][T20766] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1205.694836][T20766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1205.702227][T20766] IPv6: NLM_F_CREATE should be set when creating new route
[ 1205.709626][T20766] IPv6: NLM_F_CREATE should be set when creating new route
[ 1205.716907][T20766] IPv6: NLM_F_CREATE should be set when creating new route
[ 1205.928973][T20775] netlink: 'syz.5.5768': attribute type 21 has an invalid length.
[ 1205.983225][T20775] netlink: 'syz.5.5768': attribute type 6 has an invalid length.
[ 1205.996000][T20775] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5768'.
[ 1206.010050][T20773] netlink: 'syz.1.5769': attribute type 21 has an invalid length.
[ 1206.038630][T20773] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1206.061010][T20773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1206.068442][T20773] IPv6: NLM_F_CREATE should be set when creating new route
[ 1206.075785][T20773] IPv6: NLM_F_CREATE should be set when creating new route
[ 1206.083138][T20773] IPv6: NLM_F_CREATE should be set when creating new route
[ 1206.764800][T20780] netlink: 'syz.5.5773': attribute type 10 has an invalid length.
[ 1206.845590][T20780] team0: left promiscuous mode
[ 1206.858119][T20780] team_slave_0: left promiscuous mode
[ 1206.865582][T20780] team_slave_1: left promiscuous mode
[ 1206.877383][T20780] geneve1: left promiscuous mode
[ 1206.883634][T20780] mac80211_hwsim hwsim41 wlan1: left promiscuous mode
[ 1206.896219][T20780] team0: left allmulticast mode
[ 1206.902166][T20780] team_slave_0: left allmulticast mode
[ 1206.911520][T20780] team_slave_1: left allmulticast mode
[ 1206.918708][T20780] geneve1: left allmulticast mode
[ 1206.924717][T20780] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[ 1207.075573][T20780] wlan1: mtu less than device minimum
[ 1207.083109][T20780] team0: Device wlan1 failed to change mtu
[ 1207.110641][T20780] bond0: (slave team0): Error -22 calling dev_set_mtu
[ 1207.996116][T19161] Bluetooth: hci1: Malformed LE Event: 0x0b
[ 1208.644775][T20805] netlink: 'syz.3.5772': attribute type 21 has an invalid length.
[ 1208.667406][T20805] netlink: 'syz.3.5772': attribute type 6 has an invalid length.
[ 1208.686840][T20805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5772'.
[ 1208.769265][T20808] netlink: 'syz.1.5774': attribute type 9 has an invalid length.
[ 1208.777104][T20808] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.5774'.
[ 1209.119032][T20815] Q�6��\b��Y�4��: renamed from lo
[ 1209.878272][T19161] Bluetooth: hci3: Malformed LE Event: 0x0b
[ 1212.894465][T20870] netlink: 'syz.4.5800': attribute type 10 has an invalid length.
[ 1212.929045][T20870] team0: left promiscuous mode
[ 1212.953723][T20870] team_slave_0: left promiscuous mode
[ 1212.984112][T20870] team_slave_1: left promiscuous mode
[ 1213.004477][T20870] geneve1: left promiscuous mode
[ 1213.026435][T20870] mac80211_hwsim hwsim43 wlan1: left promiscuous mode
[ 1213.050108][T20870] team0: left allmulticast mode
[ 1213.069462][T20870] team_slave_0: left allmulticast mode
[ 1213.094511][T20870] team_slave_1: left allmulticast mode
[ 1213.114473][T20870] geneve1: left allmulticast mode
[ 1213.145020][T20870] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[ 1213.262744][T20870] wlan1: mtu less than device minimum
[ 1213.280802][T20870] team0: Device wlan1 failed to change mtu
[ 1213.312340][T20870] : (slave team0): Error -22 calling dev_set_mtu
[ 1213.326931][T20872] netlink: 'syz.3.5801': attribute type 9 has an invalid length.
[ 1213.351908][T20872] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.5801'.
[ 1214.714807][T20889] netlink: 'syz.4.5808': attribute type 39 has an invalid length.
[ 1214.843797][T20891] netlink: 'syz.5.5809': attribute type 3 has an invalid length.
[ 1214.852176][T20891] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.5809'.
[ 1215.223289][T20903] netlink: 'syz.4.5812': attribute type 9 has an invalid length.
[ 1215.231446][T20903] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.5812'.
[ 1216.211423][T20924] netlink: 'syz.3.5821': attribute type 3 has an invalid length.
[ 1216.237745][T20924] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5821'.
[ 1216.545708][T19161] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[ 1216.553710][T19161] Bluetooth: hci3: Invalid handle: 0x7830 > 0x0eff
[ 1216.761124][T20934] pim6reg1: entered promiscuous mode
[ 1216.766503][T20934] pim6reg1: entered allmulticast mode
[ 1217.579022][T20944] netlink: 'syz.3.5831': attribute type 6 has an invalid length.
[ 1217.590071][ T5801] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[ 1217.598226][T20944] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5831'.
[ 1218.168733][T20953] netlink: 'syz.3.5835': attribute type 3 has an invalid length.
[ 1218.204679][T20953] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5835'.
[ 1219.802867][ T5801] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[ 1220.347227][T20989] netlink: 'syz.4.5849': attribute type 21 has an invalid length.
[ 1220.357484][T20989] netlink: 'syz.4.5849': attribute type 6 has an invalid length.
[ 1220.534469][T20994] netlink: 'syz.3.5850': attribute type 3 has an invalid length.
[ 1220.536693][T20989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5849'.
[ 1220.579009][T20994] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5850'.
[ 1220.837746][T20997] pim6reg1: entered promiscuous mode
[ 1220.862314][T20997] pim6reg1: entered allmulticast mode
[ 1221.672391][T21020] netlink: 'syz.3.5863': attribute type 3 has an invalid length.
[ 1221.701169][T21018] netlink: 'syz.1.5862': attribute type 21 has an invalid length.
[ 1221.709755][T21020] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5863'.
[ 1221.723519][T21018] netlink: 'syz.1.5862': attribute type 6 has an invalid length.
[ 1221.739480][T21018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5862'.
[ 1221.962710][ T5801] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[ 1221.973032][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[ 1221.982536][ T5801] CPU: 0 PID: 5801 Comm: kworker/u5:7 Not tainted syzkaller #0
[ 1221.990144][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1222.000222][ T5801] Workqueue: hci1 hci_rx_work
[ 1222.005018][ T5801] Call Trace:
[ 1222.008311][ T5801]  <TASK>
[ 1222.011290][ T5801]  dump_stack_lvl+0x16c/0x230
[ 1222.015998][ T5801]  ? show_regs_print_info+0x20/0x20
[ 1222.021220][ T5801]  ? load_image+0x3b0/0x3b0
[ 1222.025773][ T5801]  sysfs_create_dir_ns+0x256/0x280
[ 1222.030947][ T5801]  ? hci_rx_work+0x43a/0xd80
[ 1222.035603][ T5801]  ? sysfs_warn_dup+0xa0/0xa0
[ 1222.040346][ T5801]  ? do_raw_spin_unlock+0x121/0x230
[ 1222.045610][ T5801]  kobject_add_internal+0x6b8/0xc70
[ 1222.050865][ T5801]  kobject_add+0x156/0x220
[ 1222.055340][ T5801]  ? __rwlock_init+0x150/0x150
[ 1222.060159][ T5801]  ? kobject_init+0x1e0/0x1e0
[ 1222.064897][ T5801]  ? _raw_spin_unlock+0x28/0x40
[ 1222.069797][ T5801]  ? get_device_parent+0x366/0x390
[ 1222.074979][ T5801]  device_add+0x408/0xc20
[ 1222.079382][ T5801]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1222.084391][ T5801]  le_conn_complete_evt+0xf36/0x1500
[ 1222.089751][ T5801]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1222.096062][ T5801]  ? bt_info+0x160/0x160
[ 1222.100368][ T5801]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1222.106075][ T5801]  ? skb_pull_data+0xfb/0x200
[ 1222.110815][ T5801]  hci_le_conn_complete_evt+0x187/0x440
[ 1222.116518][ T5801]  ? hci_remote_host_features_evt+0x160/0x160
[ 1222.124064][ T5801]  hci_event_packet+0x795/0x1210
[ 1222.129090][ T5801]  ? bis_list+0x290/0x290
[ 1222.133501][ T5801]  ? lockdep_hardirqs_on+0x98/0x150
[ 1222.138891][ T5801]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1222.144166][ T5801]  hci_rx_work+0x43a/0xd80
[ 1222.148948][ T5801]  ? process_scheduled_works+0x957/0x15b0
[ 1222.154765][ T5801]  process_scheduled_works+0xa45/0x15b0
[ 1222.160418][ T5801]  ? assign_work+0x400/0x400
[ 1222.165078][ T5801]  ? assign_work+0x39e/0x400
[ 1222.169739][ T5801]  worker_thread+0xa55/0xfc0
[ 1222.174428][ T5801]  kthread+0x2fa/0x390
[ 1222.178552][ T5801]  ? pr_cont_work+0x560/0x560
[ 1222.183297][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1222.187941][ T5801]  ret_from_fork+0x48/0x80
[ 1222.192421][ T5801]  ? kthread_blkcg+0xd0/0xd0
[ 1222.197066][ T5801]  ret_from_fork_asm+0x11/0x20
[ 1222.201923][ T5801]  </TASK>
[ 1222.208509][ T5801] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1222.222628][ T5801] Bluetooth: hci1: failed to register connection device
[ 1222.941629][T21043] netlink: 'syz.4.5873': attribute type 21 has an invalid length.
[ 1223.103346][T21043] netlink: 'syz.4.5873': attribute type 6 has an invalid length.
[ 1223.152257][ T5801] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[ 1223.160050][ T5801] Bluetooth: hci0: Invalid handle: 0x7830 > 0x0eff
[ 1223.170801][T21043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5873'.
[ 1223.683957][T21048] netlink: 'syz.1.5874': attribute type 3 has an invalid length.
[ 1223.718103][T21048] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5874'.
[ 1226.762843][T21055] syzkaller0: entered promiscuous mode
[ 1226.769743][T21055] syzkaller0: entered allmulticast mode
[ 1226.794388][T21056] netlink: 'syz.4.5878': attribute type 6 has an invalid length.
[ 1226.811370][T21056] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5878'.
[ 1228.948336][T19161] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[ 1229.080199][T21073] netlink: 'syz.3.5884': attribute type 10 has an invalid length.
[ 1229.544644][T21073] team0: left promiscuous mode
[ 1229.557804][T21073] team_slave_1: left promiscuous mode
[ 1229.593177][T21073] vlan0: left promiscuous mode
[ 1229.610780][T21073] geneve1: left promiscuous mode
[ 1229.631091][T21073] mac80211_hwsim hwsim39 wlan1: left promiscuous mode
[ 1229.652544][T21073] team0: left allmulticast mode
[ 1229.738488][T21073] team_slave_1: left allmulticast mode
[ 1229.744064][T21073] geneve1: left allmulticast mode
[ 1229.807913][T21073] mac80211_hwsim hwsim39 wlan1: left allmulticast mode
[ 1229.912515][T21073] 8021q: adding VLAN 0 to HW filter on device team0
[ 1230.002411][T21073] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1230.660963][T19161] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[ 1230.905427][T21102] syzkaller0: entered promiscuous mode
[ 1230.929314][T21102] syzkaller0: entered allmulticast mode
[ 1237.503357][T21119] netlink: 'syz.1.5902': attribute type 10 has an invalid length.
[ 1237.563210][T21119] 8021q: adding VLAN 0 to HW filter on device team0
[ 1237.580482][T21119] team0: entered promiscuous mode
[ 1237.585639][T21119] team_slave_1: entered promiscuous mode
[ 1237.600944][T21119] macvlan1: entered promiscuous mode
[ 1237.606637][T21119] vlan0: entered promiscuous mode
[ 1237.612148][T21119] geneve1: entered promiscuous mode
[ 1237.618911][T21119] : (slave team0): Enslaving as an active interface with an up link
[ 1237.904624][T21135] netlink: 'syz.1.5910': attribute type 39 has an invalid length.
[ 1238.574385][T19161] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[ 1238.833684][T21150] �: renamed from bond_slave_0 (while UP)
[ 1239.192802][T21159] syzkaller0: entered promiscuous mode
[ 1239.196503][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.205582][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.213069][T21159] syzkaller0: entered allmulticast mode
[ 1243.125872][T21181] syzkaller0: create flow: hash 4096369227 index 1
[ 1243.126541][ T5982] syzkaller0: tun_net_xmit 76
[ 1243.165929][ T5854] syzkaller0: tun_net_xmit 76
[ 1243.171198][ T5854] syzkaller0: tun_net_xmit 48
[ 1243.273694][T21181] syzkaller0: delete flow: hash 4096369227 index 1
[ 1244.272098][T19161] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[ 1245.896477][T21184] netlink: 'syz.3.5928': attribute type 39 has an invalid length.
[ 1246.135166][T19161] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[ 1246.417841][T19161] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[ 1246.574349][T19161] Bluetooth: hci1: unexpected event 0x3d length: 15 > 14
[ 1247.420262][T21219] �: renamed from bond_slave_0 (while UP)
[ 1247.761860][T21226] syzkaller0: create flow: hash 4096369227 index 1
[ 1247.781794][ T5976] syzkaller0: tun_net_xmit 76
[ 1247.786800][ T5976] syzkaller0: tun_net_xmit 48
[ 1247.808129][ T5854] syzkaller0: tun_net_xmit 76
[ 1247.887178][T21225] netlink: 'syz.4.5944': attribute type 39 has an invalid length.
[ 1247.908997][ T5854] syzkaller0: tun_net_xmit 76
[ 1248.038300][ T5854] syzkaller0: tun_net_xmit 76
[ 1248.095204][T21223] syzkaller0: delete flow: hash 4096369227 index 1
[ 1250.526546][T21236] syzkaller0: entered promiscuous mode
[ 1250.532108][T21236] syzkaller0: entered allmulticast mode
[ 1254.242732][T21260] syzkaller0: entered promiscuous mode
[ 1254.248449][T21260] syzkaller0: entered allmulticast mode
[ 1254.415067][T19161] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14
[ 1254.889909][T19161] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[ 1254.926813][T19161] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3
[ 1257.615167][T19161] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[ 1259.567412][T19161] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[ 1259.884078][T19161] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[ 1260.058575][T21346] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1265.064387][T21375] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[ 1265.221694][T21376] syzkaller0: entered promiscuous mode
[ 1265.227258][T21376] syzkaller0: entered allmulticast mode
[ 1270.572759][T21403] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode
[ 1271.207315][T21426] netlink: 'syz.5.6020': attribute type 21 has an invalid length.
[ 1271.484010][T21429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1271.545648][T21434] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[ 1272.392424][T21441] netlink: 'syz.4.6027': attribute type 39 has an invalid length.
[ 1272.968503][T21461] netlink: 'syz.3.6032': attribute type 21 has an invalid length.
[ 1274.075480][T21474] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[ 1275.487227][T21496] netlink: 'syz.5.6045': attribute type 39 has an invalid length.
[ 1275.782755][T21502] netlink: 'syz.1.6057': attribute type 39 has an invalid length.
[ 1277.867226][T21539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6063'.
[ 1277.890404][T19161] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[ 1277.972067][T21539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'.
[ 1278.964154][T21558] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1278.974033][T21558] syzkaller0: entered promiscuous mode
[ 1278.979901][T21558] syzkaller0: entered allmulticast mode
[ 1279.437075][T21561] syzkaller0: entered promiscuous mode
[ 1279.450269][T21561] syzkaller0: entered allmulticast mode
[ 1284.311462][T21620] syzkaller0: entered promiscuous mode
[ 1284.317148][T21620] syzkaller0: entered allmulticast mode
[ 1287.416821][T21658] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1287.426997][T21658] syzkaller0: entered promiscuous mode
[ 1287.433308][T21658] syzkaller0: entered allmulticast mode
[ 1288.093927][T21670] syzkaller0: entered promiscuous mode
[ 1288.238675][T21670] syzkaller0: entered allmulticast mode
[ 1291.140223][T21689] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1291.372213][T21696] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1291.381926][T21696] syzkaller0: entered promiscuous mode
[ 1291.387450][T21696] syzkaller0: entered allmulticast mode
[ 1291.594031][T21702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1291.676941][T19161] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[ 1291.753517][T21703] netlink: 'syz.1.6117': attribute type 10 has an invalid length.
[ 1291.822215][T21709] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.6120'.
[ 1292.789217][T21741] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.6134'.
[ 1292.800376][T21738] netlink: 'syz.4.6133': attribute type 10 has an invalid length.
[ 1292.829594][T19161] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[ 1294.005680][T21766] syzkaller0: entered allmulticast mode
[ 1294.803944][T21775] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.6149'.
[ 1295.009589][T19161] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[ 1295.524163][T19161] Bluetooth: hci0: unexpected event for opcode 0x0000
[ 1295.937842][T21800] syzkaller0: entered allmulticast mode
[ 1296.677967][T19161] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[ 1297.508508][T19161] Bluetooth: hci1: unexpected event for opcode 0x0000
[ 1297.895506][T19161] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1297.904362][T19161] Bluetooth: hci3: Injecting HCI hardware error event
[ 1297.913318][T19161] Bluetooth: hci3: hardware error 0x00
[ 1298.097845][T21845] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6175'.
[ 1298.156840][T21842] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6175'.
[ 1298.847233][ T5801] Bluetooth: hci2: unexpected event for opcode 0x0000
[ 1298.881961][T21856] syzkaller0: entered allmulticast mode
[ 1299.568191][ T5801] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1299.577061][ T5801] Bluetooth: hci0: Injecting HCI hardware error event
[ 1299.585676][ T5801] Bluetooth: hci0: hardware error 0x00
[ 1299.800298][T21869] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[ 1300.058060][T19161] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1300.073061][T21879] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6191'.
[ 1300.126200][T21878] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6191'.
[ 1300.641121][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.647691][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.447836][T21892] syzkaller0: entered allmulticast mode
[ 1301.582819][T21869] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1301.598449][T21869] Bluetooth: hci1: Injecting HCI hardware error event
[ 1301.607284][T21869] Bluetooth: hci1: hardware error 0x00
[ 1301.737933][ T5801] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1302.127814][T19161] Bluetooth: hci3: Opcode 0x206c failed: -110
[ 1302.587882][T21919] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6203'.
[ 1302.619580][T21916] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6203'.
[ 1302.677132][T21921] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1302.857154][T21901] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1302.866186][T21901] Bluetooth: hci2: Injecting HCI hardware error event
[ 1302.876119][T21901] Bluetooth: hci2: hardware error 0x00
[ 1303.648334][T21869] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1303.807938][ T5801] Bluetooth: hci0: Opcode 0x206c failed: -110
[ 1304.242196][T19161] Bluetooth: hci3: Opcode 0x2046 failed: -110
[ 1304.927627][T21901] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1305.026718][T21951] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1305.729974][T21869] Bluetooth: hci1: Opcode 0x2046 failed: -110
[ 1305.887657][ T5801] Bluetooth: hci0: Opcode 0x2046 failed: -110
[ 1306.290033][T19161] Bluetooth: hci3: Opcode 0x2046 failed: -110
[ 1306.579193][T21982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6229'.
[ 1307.015933][T21901] Bluetooth: hci2: Opcode 0x2046 failed: -110
[ 1307.632132][T21990] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1307.958520][T22000] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6242'.
[ 1307.968216][ T5801] Bluetooth: hci0: Opcode 0x2046 failed: -110
[ 1308.018540][T21995] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6242'.
[ 1308.750723][T22013] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6240'.
[ 1308.760704][T22019] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6249'.
[ 1308.780960][T22016] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6249'.
[ 1309.089294][T22022] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1309.509465][T22032] netlink: 'syz.3.6247': attribute type 10 has an invalid length.
[ 1309.762681][T22032] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1309.833202][T22032] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1310.339676][T22047] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1310.373674][T22045] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.6255'.
[ 1310.614284][T22049] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6254'.
[ 1310.651116][T22048] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6254'.
[ 1311.223715][T22060] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1311.609649][T22072] netlink: 'syz.5.6263': attribute type 10 has an invalid length.
[ 1312.216719][T22078] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6268'.
[ 1312.626108][T22085] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6269'.
[ 1312.639277][T22083] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6269'.
[ 1312.659784][T22082] syzkaller0: entered allmulticast mode
[ 1313.334425][T22097] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6274'.
[ 1313.665460][T22099] syzkaller0: entered allmulticast mode
[ 1314.684219][T22115] syzkaller0: entered allmulticast mode
[ 1314.704838][T22119] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6281'.
[ 1317.486300][T22147] syzkaller0: entered allmulticast mode
[ 1318.280496][T22161] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6299'.
[ 1318.308488][T22164] netlink: 'syz.5.6301': attribute type 30 has an invalid length.
[ 1321.540285][T22180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6308'.
[ 1322.570719][T22193] netlink: 'syz.3.6313': attribute type 30 has an invalid length.
[ 1322.894412][T22198] netlink: 'syz.5.6314': attribute type 10 has an invalid length.
[ 1323.312190][T22201] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6316'.
[ 1327.846262][T22240] netlink: 'syz.1.6325': attribute type 30 has an invalid length.
[ 1328.511714][T22244] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6330'.
[ 1332.946509][T22273] syzkaller0: entered promiscuous mode
[ 1333.178769][T22273] syzkaller0: entered allmulticast mode
[ 1339.169398][T22327] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.6362'.
[ 1343.797377][T22383] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.6385'.
[ 1346.823888][T22410] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6396'.
[ 1347.241005][T22421] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[ 1355.513326][T22455] : (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1355.677012][T22469] netlink: 'syz.3.6420': attribute type 10 has an invalid length.
[ 1355.954884][T22469] hsr_slave_0 (unregistering): left promiscuous mode
[ 1356.404811][T22484] netlink: 'syz.3.6425': attribute type 10 has an invalid length.
[ 1362.061463][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.076299][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.367900][T22514] netlink: 'syz.5.6437': attribute type 10 has an invalid length.
[ 1362.470871][T22516] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1362.933678][T22532] netlink: 'syz.4.6447': attribute type 10 has an invalid length.
[ 1365.757159][T22546] : (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1366.236931][T22560] netlink: 'syz.1.6458': attribute type 10 has an invalid length.
[ 1366.641487][T22568] syzkaller0: entered promiscuous mode
[ 1366.647036][T22568] syzkaller0: entered allmulticast mode
[ 1367.547833][T22576] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1369.727067][T22587] netlink: 'syz.3.6470': attribute type 10 has an invalid length.
[ 1370.713506][T22619] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6482'.
[ 1370.963129][T22624] pim6reg1: entered promiscuous mode
[ 1370.977733][T22624] pim6reg1: entered allmulticast mode
[ 1375.506265][T22662] syzkaller0: entered promiscuous mode
[ 1375.514028][T22662] syzkaller0: entered allmulticast mode
[ 1375.845510][T22676] netlink: 'syz.5.6503': attribute type 28 has an invalid length.
[ 1376.301099][T22694] netlink: 'syz.1.6511': attribute type 21 has an invalid length.
[ 1376.933296][T22702] netlink: 'syz.3.6514': attribute type 29 has an invalid length.
[ 1377.132083][T22702] netlink: 'syz.3.6514': attribute type 29 has an invalid length.
[ 1382.163541][T22760] delete_channel: no stack
[ 1382.188585][T22760] delete_channel: no stack
[ 1383.885368][T22761] A link change request failed with some changes committed already. Interface Q�6��\b��Y�4�� may have been left with an inconsistent configuration, please check.
[ 1383.901961][T22760] netlink: 'syz.4.6538': attribute type 10 has an invalid length.
[ 1386.749169][T22791] netlink: 'syz.3.6549': attribute type 21 has an invalid length.
[ 1386.973335][T22800] delete_channel: no stack
[ 1390.801977][T22833] netlink: 'syz.3.6568': attribute type 3 has an invalid length.
[ 1390.820356][T22833] netlink: 'syz.3.6568': attribute type 16 has an invalid length.
[ 1390.833185][T22833] netlink: 'syz.3.6568': attribute type 18 has an invalid length.
[ 1390.844603][T22833] netlink: 'syz.3.6568': attribute type 20 has an invalid length.
[ 1390.852751][T22833] netlink: 'syz.3.6568': attribute type 25 has an invalid length.
[ 1391.032305][T22837] netlink: 'syz.1.6566': attribute type 10 has an invalid length.
[ 1391.123143][T22837] syz_tun: entered promiscuous mode
[ 1391.228102][T22837] : (slave syz_tun): Enslaving as an active interface with an up link
[ 1391.588991][T22842] syzkaller0: entered promiscuous mode
[ 1391.594957][T22842] syzkaller0: entered allmulticast mode
[ 1394.598432][T22864] netlink: 'syz.1.6578': attribute type 29 has an invalid length.
[ 1394.606687][T22864] netlink: 'syz.1.6578': attribute type 29 has an invalid length.
[ 1395.196558][T22871] syzkaller0: entered promiscuous mode
[ 1395.210125][T22871] syzkaller0: entered allmulticast mode
[ 1397.920357][T22886] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6587'.
[ 1398.300817][T22901] syzkaller0: entered promiscuous mode
[ 1398.310991][T22901] syzkaller0: entered allmulticast mode
[ 1402.261283][T22935] netlink: 'syz.5.6609': attribute type 1 has an invalid length.
[ 1403.234986][T22970] sctp: [Deprecated]: syz.5.6623 (pid 22970) Use of int in maxseg socket option.
[ 1403.234986][T22970] Use struct sctp_assoc_value instead
[ 1403.930659][T22997] syzkaller0: entered promiscuous mode
[ 1403.936379][T22997] syzkaller0: entered allmulticast mode
[ 1403.995516][T22999] syzkaller0: entered promiscuous mode
[ 1404.001256][T22999] syzkaller0: entered allmulticast mode
[ 1404.009187][T22991] syzkaller0: left promiscuous mode
[ 1408.931073][T23019] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6642'.
[ 1410.389282][T23064] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6659'.
[ 1410.485572][T23066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1410.711940][T23068] delete_channel: no stack
[ 1412.549671][T23108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6675'.
[ 1412.646403][T23108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6675'.
[ 1412.672370][T23108] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6675'.
[ 1412.681745][T23097] tipc: can't start tipc receive workqueue
[ 1412.715300][T23109] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6675'.
[ 1413.453271][T23125] syzkaller0: entered promiscuous mode
[ 1413.461681][T23125] syzkaller0: entered allmulticast mode
[ 1413.499382][T23127] netlink: 'syz.4.6682': attribute type 15 has an invalid length.
[ 1413.760619][T23135] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6684'.
[ 1413.785132][T23135] bridge_slave_0: entered allmulticast mode
[ 1414.182772][T23142] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.6687'.
[ 1416.493086][T23149] syzkaller0: entered promiscuous mode
[ 1416.507541][T23149] syzkaller0: entered allmulticast mode
[ 1416.954827][T23171] syzkaller0: entered promiscuous mode
[ 1416.987270][T23171] syzkaller0: entered allmulticast mode
[ 1419.175367][T23176] netlink: 'syz.5.6697': attribute type 2 has an invalid length.
[ 1419.183493][T23176] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6697'.
[ 1419.196109][T23180] netlink: 'syz.5.6697': attribute type 2 has an invalid length.
[ 1419.204149][T23180] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6697'.
[ 1419.406164][T23196] netlink: 'syz.1.6704': attribute type 39 has an invalid length.
[ 1419.434875][T23199] syzkaller0: entered promiscuous mode
[ 1419.444797][T23199] syzkaller0: entered allmulticast mode
[ 1420.652964][T23215] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1420.824408][T23221] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.6715'.
[ 1420.921242][T23219] syzkaller0: entered allmulticast mode
[ 1423.200195][T23238] netlink: 21 bytes leftover after parsing attributes in process `syz.5.6719'.
[ 1423.233156][T23238] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1423.272100][T23242] netlink: 'syz.3.6721': attribute type 10 has an invalid length.
[ 1423.427008][T23249] netlink: 'syz.1.6724': attribute type 21 has an invalid length.
[ 1423.443266][T23249] netlink: 'syz.1.6724': attribute type 6 has an invalid length.
[ 1423.469163][T23249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6724'.
[ 1423.490926][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.497747][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.584949][T23253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6726'.
[ 1423.620863][T23255] syz.1.6727[23255] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1423.621115][T23255] syz.1.6727[23255] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1424.217068][T23270] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode
[ 1424.237417][T23270] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode
[ 1424.602715][T23282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6740'.
[ 1426.301041][T23324] netlink: 'syz.1.6755': attribute type 10 has an invalid length.
[ 1426.313188][T23324] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[ 1427.067929][T23342] netlink: 'syz.5.6760': attribute type 21 has an invalid length.
[ 1428.761123][T23383] syzkaller0: entered promiscuous mode
[ 1428.773490][T23383] syzkaller0: entered allmulticast mode
[ 1429.050151][T23389] IPv6: pim6reg1: Disabled Multicast RS
[ 1429.356347][T23406] netlink: 'syz.1.6785': attribute type 10 has an invalid length.
[ 1429.366154][T23406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6785'.
[ 1429.386022][T23403] netlink: set zone limit has 8 unknown bytes
[ 1429.388645][T23406] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1429.625581][T23412] syzkaller0: entered promiscuous mode
[ 1429.632352][T23412] syzkaller0: entered allmulticast mode
[ 1432.171429][T23444] syzkaller0: entered promiscuous mode
[ 1432.181830][T23444] syzkaller0: entered allmulticast mode
[ 1432.195296][T23449] IPv6: Can't replace route, no match found
[ 1432.212914][T23446] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1435.660935][T23492] netlink: 'syz.4.6815': attribute type 33 has an invalid length.
[ 1435.671353][T23492] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6815'.
[ 1436.728359][T23507] sctp: [Deprecated]: syz.1.6822 (pid 23507) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1436.728359][T23507] Use struct sctp_sack_info instead
[ 1438.068397][T23520] syzkaller0: entered promiscuous mode
[ 1438.074411][T23520] syzkaller0: entered allmulticast mode
[ 1438.294932][T23535] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6832'.
[ 1441.388626][T23543] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6835'.
[ 1442.229822][T23570] netlink: 'syz.4.6847': attribute type 3 has an invalid length.
[ 1442.247588][T23570] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.6847'.
[ 1443.320973][T23591] netlink: 'syz.5.6853': attribute type 1 has an invalid length.
[ 1443.329625][T23591] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.6853'.
[ 1445.588482][T23600] netlink: 'syz.5.6857': attribute type 10 has an invalid length.
[ 1445.675079][T23600] netlink: 'syz.5.6857': attribute type 29 has an invalid length.
[ 1445.700355][T23600] netlink: 'syz.5.6857': attribute type 29 has an invalid length.
[ 1446.351250][T23620] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1446.770568][T23618] netlink: 'syz.5.6865': attribute type 10 has an invalid length.
[ 1446.897854][T23618] bond0: (slave bond_slave_0): Releasing backup interface
[ 1446.922138][T23618] bond_slave_0: left promiscuous mode
[ 1447.096356][T23635] netlink: 'syz.3.6870': attribute type 10 has an invalid length.
[ 1447.108601][T23635] dummy0: left promiscuous mode
[ 1447.121009][T23635] dummy0: left allmulticast mode
[ 1447.168975][T23635] team0: Port device dummy0 added
[ 1448.424985][T23651] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1449.340871][T23664] �
: port 1(ip6gretap0) entered blocking state
[ 1449.347732][T23664] �
: port 1(ip6gretap0) entered disabled state
[ 1449.354533][T23664] ip6gretap0: entered allmulticast mode
[ 1449.364642][T23664] ip6gretap0: entered promiscuous mode
[ 1449.699865][T23682] netlink: 'syz.5.6888': attribute type 1 has an invalid length.
[ 1449.707957][T23682] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.6888'.
[ 1450.386791][T23687] syzkaller0: entered promiscuous mode
[ 1450.397952][T23687] syzkaller0: entered allmulticast mode
[ 1453.247307][T23711] syzkaller0: entered promiscuous mode
[ 1453.263022][T23711] syzkaller0: entered allmulticast mode
[ 1453.539498][T23718] veth1_to_bond: entered allmulticast mode
[ 1453.712910][T23720] netlink: 'syz.1.6904': attribute type 10 has an invalid length.
[ 1453.800988][T23726] netlink: 'syz.1.6904': attribute type 10 has an invalid length.
[ 1454.080216][T23734] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1455.729099][T23753] netlink: 'syz.1.6915': attribute type 10 has an invalid length.
[ 1455.788934][T23753] : (slave netdevsim0): Releasing backup interface
[ 1455.822639][T23753] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1455.916543][T23753] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1455.930027][T23753] team0: Port device netdevsim0 added
[ 1456.884796][T23783] pim6reg1: left promiscuous mode
[ 1456.890285][T23783] pim6reg1: left allmulticast mode
[ 1459.217061][T23787] netlink: 'syz.5.6928': attribute type 21 has an invalid length.
[ 1459.231091][T23787] netlink: 'syz.5.6928': attribute type 6 has an invalid length.
[ 1459.247975][T23787] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6928'.
[ 1459.257874][T23786] netlink: 'syz.1.6927': attribute type 29 has an invalid length.
[ 1459.319023][T23786] netlink: 'syz.1.6927': attribute type 29 has an invalid length.
[ 1459.351351][T23792] netlink: 'syz.1.6927': attribute type 29 has an invalid length.
[ 1459.368599][T23793] netlink: 'syz.1.6927': attribute type 29 has an invalid length.
[ 1460.458462][T23828] netlink: 'syz.3.6946': attribute type 2 has an invalid length.
[ 1460.473008][T23828] netlink: 'syz.3.6946': attribute type 8 has an invalid length.
[ 1460.491882][T23828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6946'.
[ 1460.598225][T23833] netlink: 'syz.5.6948': attribute type 4 has an invalid length.
[ 1460.629848][T23833] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6948'.
[ 1460.760382][T23835] netlink: 'syz.1.6949': attribute type 12 has an invalid length.
[ 1460.772605][T23835] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6949'.
[ 1461.131300][T23850] netlink: 'syz.3.6952': attribute type 10 has an invalid length.
[ 1461.148762][T23850] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6952'.
[ 1461.419002][T23847] netlink: 'syz.4.6954': attribute type 10 has an invalid length.
[ 1461.458428][T23847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6954'.
[ 1461.488405][T23847] team0: entered promiscuous mode
[ 1461.517666][T23847] team_slave_0: entered promiscuous mode
[ 1461.524025][T23847] team_slave_1: entered promiscuous mode
[ 1461.548682][T23847] geneve1: entered promiscuous mode
[ 1461.558411][T23847] team0: entered allmulticast mode
[ 1461.577787][T23847] team_slave_0: entered allmulticast mode
[ 1461.588468][T23847] team_slave_1: entered allmulticast mode
[ 1461.608356][T23847] geneve1: entered allmulticast mode
[ 1461.631993][T23847] 8021q: adding VLAN 0 to HW filter on device team0
[ 1461.651220][T23847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1462.548139][T23862] netlink: 'syz.1.6959': attribute type 20 has an invalid length.
[ 1464.464957][T23912] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6981'.
[ 1466.468371][T23939] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1466.584158][T23943] syz.1.6990: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[ 1466.618235][T23943] CPU: 1 PID: 23943 Comm: syz.1.6990 Not tainted syzkaller #0
[ 1466.625811][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1466.636025][T23943] Call Trace:
[ 1466.639377][T23943]  <TASK>
[ 1466.642378][T23943]  dump_stack_lvl+0x16c/0x230
[ 1466.647156][T23943]  ? show_regs_print_info+0x20/0x20
[ 1466.652447][T23943]  ? load_image+0x3b0/0x3b0
[ 1466.657048][T23943]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1466.663819][T23943]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[ 1466.670432][T23943]  warn_alloc+0x210/0x300
[ 1466.674844][T23943]  ? stack_trace_save+0x9c/0xe0
[ 1466.679762][T23943]  ? zone_watermark_ok_safe+0x230/0x230
[ 1466.685385][T23943]  ? kasan_set_track+0x5f/0x70
[ 1466.690180][T23943]  ? kasan_set_track+0x4e/0x70
[ 1466.694999][T23943]  ? __kasan_kmalloc+0x8f/0xa0
[ 1466.699804][T23943]  ? xsk_init_queue+0xb0/0x110
[ 1466.704614][T23943]  ? xsk_setsockopt+0x4db/0x6f0
[ 1466.709501][T23943]  ? do_sock_setsockopt+0x175/0x1a0
[ 1466.714756][T23943]  ? __x64_sys_setsockopt+0x184/0x200
[ 1466.720621][T23943]  __vmalloc_node_range+0x126/0x1320
[ 1466.726027][T23943]  ? free_vm_area+0x50/0x50
[ 1466.730604][T23943]  vmalloc_user+0x74/0x80
[ 1466.734977][T23943]  ? xskq_create+0xbf/0x170
[ 1466.739524][T23943]  xskq_create+0xbf/0x170
[ 1466.743907][T23943]  xsk_init_queue+0xb0/0x110
[ 1466.748548][T23943]  xsk_setsockopt+0x4db/0x6f0
[ 1466.753360][T23943]  ? xsk_poll+0x670/0x670
[ 1466.757736][T23943]  ? __fget_files+0x28/0x4d0
[ 1466.762372][T23943]  ? aa_sock_opt_perm+0x74/0x100
[ 1466.767353][T23943]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1466.772948][T23943]  ? security_socket_setsockopt+0x7e/0xa0
[ 1466.778702][T23943]  ? xsk_poll+0x670/0x670
[ 1466.783081][T23943]  do_sock_setsockopt+0x175/0x1a0
[ 1466.788154][T23943]  ? __fdget+0x180/0x210
[ 1466.792448][T23943]  __x64_sys_setsockopt+0x184/0x200
[ 1466.797707][T23943]  do_syscall_64+0x55/0xb0
[ 1466.802257][T23943]  ? clear_bhb_loop+0x40/0x90
[ 1466.806963][T23943]  ? clear_bhb_loop+0x40/0x90
[ 1466.811692][T23943]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1466.817630][T23943] RIP: 0033:0x7efcc2f8eec9
[ 1466.822080][T23943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1466.841717][T23943] RSP: 002b:00007efcc3f15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1466.850176][T23943] RAX: ffffffffffffffda RBX: 00007efcc31e5fa0 RCX: 00007efcc2f8eec9
[ 1466.858182][T23943] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[ 1466.866185][T23943] RBP: 00007efcc3011f91 R08: 0000000000000004 R09: 0000000000000000
[ 1466.874188][T23943] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1466.882187][T23943] R13: 00007efcc31e6038 R14: 00007efcc31e5fa0 R15: 00007fffb47a9c98
[ 1466.890248][T23943]  </TASK>
[ 1466.928804][T23943] Mem-Info:
[ 1466.932080][T23943] active_anon:16784 inactive_anon:0 isolated_anon:0
[ 1466.932080][T23943]  active_file:18560 inactive_file:40424 isolated_file:0
[ 1466.932080][T23943]  unevictable:768 dirty:131 writeback:0
[ 1466.932080][T23943]  slab_reclaimable:10947 slab_unreclaimable:97815
[ 1466.932080][T23943]  mapped:23697 shmem:1358 pagetables:457
[ 1466.932080][T23943]  sec_pagetables:0 bounce:0
[ 1466.932080][T23943]  kernel_misc_reclaimable:0
[ 1466.932080][T23943]  free:1327525 free_pcp:11698 free_cma:0
[ 1466.987560][T23943] Node 0 active_anon:67036kB inactive_anon:0kB active_file:74240kB inactive_file:161488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94788kB dirty:524kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10216kB pagetables:1728kB sec_pagetables:0kB all_unreclaimable? no
[ 1467.057318][T23943] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1467.097666][T23943] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1467.126093][T23943] lowmem_reserve[]: 0 2525 2526 2526 2526
[ 1467.134005][T23943] Node 0 DMA32 free:1426280kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:67088kB inactive_anon:0kB active_file:74240kB inactive_file:160168kB unevictable:1536kB writepending:524kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:2476kB local_pcp:1048kB free_cma:0kB
[ 1467.165875][T23943] lowmem_reserve[]: 0 0 1 1 1
[ 1467.172610][T23943] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1467.200621][T23943] lowmem_reserve[]: 0 0 0 0 0
[ 1467.205561][T23943] Node 1 Normal free:3888548kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23540kB local_pcp:11504kB free_cma:0kB
[ 1467.236295][T23943] lowmem_reserve[]: 0 0 0 0 0
[ 1467.241717][T23943] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1467.255349][T23943] Node 0 DMA32: 700*4kB (UME) 790*8kB (UME) 1083*16kB (UME) 1381*32kB (UME) 564*64kB (UME) 179*128kB (UME) 72*256kB (UME) 60*512kB (UM) 42*1024kB (UM) 14*2048kB (UM) 287*4096kB (UM) = 1426032kB
[ 1467.275732][T23943] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[ 1467.288840][T23943] Node 1 Normal: 291*4kB (UME) 51*8kB (UE) 46*16kB (UME) 51*32kB (UME) 15*64kB (UE) 7*128kB (UME) 1*256kB (U) 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888548kB
[ 1467.307043][T23943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1467.317391][T23943] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1467.339353][T23943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1467.356800][T23943] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1467.376992][T23943] 60342 total pagecache pages
[ 1467.383286][T23943] 0 pages in swap cache
[ 1467.388344][T23943] Free swap  = 124996kB
[ 1467.392733][T23943] Total swap = 124996kB
[ 1467.396917][T23943] 2097051 pages RAM
[ 1467.401748][T23943] 0 pages HighMem/MovableOnly
[ 1467.427747][T23943] 416136 pages reserved
[ 1467.443428][T23943] 0 pages cma reserved
[ 1467.776873][T23962] syzkaller0: entered promiscuous mode
[ 1467.783053][T23962] syzkaller0: entered allmulticast mode
[ 1469.250592][T23977] delete_channel: no stack
[ 1470.732404][T23976] netdevsim netdevsim5: Direct firmware load for � failed with error -2
[ 1470.747923][T23976] netdevsim netdevsim5: Falling back to sysfs fallback for: �
[ 1470.881044][T23991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7010'.
[ 1474.201874][T24041] netlink: 'syz.1.7030': attribute type 10 has an invalid length.
[ 1474.725857][T24054] netdevsim netdevsim1: Direct firmware load for � failed with error -2
[ 1474.818804][T24054] netdevsim netdevsim1: Falling back to sysfs fallback for: �
[ 1475.372878][T24067] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1476.321436][T24091] netlink: 'syz.5.7045': attribute type 10 has an invalid length.
[ 1476.981155][T24101] syzkaller0: entered promiscuous mode
[ 1476.986683][T24101] syzkaller0: entered allmulticast mode
[ 1479.226186][T24106] macsec0: entered promiscuous mode
[ 1479.242434][T24106] macsec0: entered allmulticast mode
[ 1479.291357][T24106] veth1_macvtap: entered allmulticast mode
[ 1479.321799][T24103] netlink: 'syz.5.7048': attribute type 2 has an invalid length.
[ 1479.378592][T24103] netlink: 'syz.5.7048': attribute type 8 has an invalid length.
[ 1479.386591][T24103] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7048'.
[ 1479.508925][T24121] mac80211_hwsim hwsim43 .3�c��aaaaaaaaa: renamed from wlan1 (while UP)
[ 1480.014088][T24131] netlink: 'syz.5.7057': attribute type 29 has an invalid length.
[ 1480.101895][T24131] netlink: 'syz.5.7057': attribute type 29 has an invalid length.
[ 1480.153607][T24135] netlink: 'syz.5.7057': attribute type 29 has an invalid length.
[ 1480.212877][T24140] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.7061'.
[ 1480.266806][T24138] netlink: 'syz.5.7057': attribute type 29 has an invalid length.
[ 1480.301421][T24131] netlink: 'syz.5.7057': attribute type 29 has an invalid length.
[ 1480.346092][T24142] netdevsim netdevsim4: Direct firmware load for � failed with error -2
[ 1480.362228][T24142] netdevsim netdevsim4: Falling back to sysfs fallback for: �
[ 1481.820375][T24159] team0: Port device team_slave_0 removed
[ 1481.838895][T24159] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1481.961393][T24165] netlink: 'syz.4.7070': attribute type 10 has an invalid length.
[ 1482.011039][T24165] : (slave 
1
7�): Releasing backup interface
[ 1482.619541][T24182] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7076'.
[ 1484.663949][T24219] netlink: 'syz.4.7089': attribute type 10 has an invalid length.
[ 1484.680576][T24219] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1484.931198][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.938139][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.981136][T24221] netlink: 'syz.3.7090': attribute type 10 has an invalid length.
[ 1485.014257][T24221] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1485.969378][T24249] netlink: 'syz.3.7102': attribute type 10 has an invalid length.
[ 1485.981958][T24249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7102'.
[ 1485.994793][T24249] team0: entered promiscuous mode
[ 1486.003353][T24249] team_slave_1: entered promiscuous mode
[ 1486.010172][T24249] vlan0: entered promiscuous mode
[ 1486.018172][T24249] geneve1: entered promiscuous mode
[ 1486.024318][T24249] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode
[ 1486.033120][T24249] dummy0: entered promiscuous mode
[ 1486.042415][T24249] team0: entered allmulticast mode
[ 1486.057728][T24249] team_slave_1: entered allmulticast mode
[ 1486.065036][T24249] geneve1: entered allmulticast mode
[ 1486.080809][T24249] dummy0: entered allmulticast mode
[ 1486.093278][T24249] 8021q: adding VLAN 0 to HW filter on device team0
[ 1486.121379][T24249] bond0: (slave team0): Releasing backup interface
[ 1486.155628][T24249] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1488.817163][T24295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1489.216162][T24307] netlink: 'syz.5.7123': attribute type 9 has an invalid length.
[ 1489.227956][T24307] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.7123'.
[ 1489.355894][T24314] netlink: 'syz.5.7126': attribute type 10 has an invalid length.
[ 1489.418655][T24316] netlink: 'syz.4.7127': attribute type 3 has an invalid length.
[ 1489.426492][T24316] netlink: 'syz.4.7127': attribute type 1 has an invalid length.
[ 1489.454933][T24316] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7127'.
[ 1489.960735][T24328] IPv6: Can't replace route, no match found
[ 1490.736617][T24350] netlink: 'syz.3.7135': attribute type 3 has an invalid length.
[ 1490.776504][T24350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7135'.
[ 1491.618857][T24366] netlink: 'syz.4.7140': attribute type 10 has an invalid length.
[ 1491.884015][T24361] : entered promiscuous mode
[ 1491.898026][T24361] bond_slave_1: entered promiscuous mode
[ 1492.224951][T24385] veth1_macvtap: left allmulticast mode
[ 1492.249364][T24385] veth1_macvtap: left promiscuous mode
[ 1492.638596][T24386] netlink: 'syz.3.7146': attribute type 39 has an invalid length.
[ 1492.655399][T24386] veth0_macvtap: left promiscuous mode
[ 1492.725183][T24385] netlink: 'syz.4.7147': attribute type 10 has an invalid length.
[ 1493.240673][T24396] syzkaller0: entered promiscuous mode
[ 1493.246643][T24396] syzkaller0: entered allmulticast mode
[ 1496.269673][T24427] tap0: tun_chr_ioctl cmd 1074812118
[ 1497.141456][T24444] netlink: 'syz.1.7165': attribute type 10 has an invalid length.
[ 1497.187329][T24444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7165'.
[ 1497.226757][T24444] team0: entered allmulticast mode
[ 1497.232894][T24444] team_slave_1: entered allmulticast mode
[ 1497.246995][T24444] macvlan1: entered allmulticast mode
[ 1497.297668][T24444] veth1_vlan: entered allmulticast mode
[ 1497.308516][T24444] geneve1: entered allmulticast mode
[ 1497.314272][T24444] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1497.356075][T24444] : (slave team0): Releasing backup interface
[ 1497.523946][T24444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1497.573883][T24456] netlink: 'syz.5.7169': attribute type 21 has an invalid length.
[ 1497.597545][T24456] netlink: 'syz.5.7169': attribute type 11 has an invalid length.
[ 1497.825116][T24461] netlink: 'syz.1.7172': attribute type 10 has an invalid length.
[ 1501.102362][T24507] delete_channel: no stack
[ 1502.575089][T24554] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7204'.
[ 1502.611853][T24552] netlink: 'syz.4.7203': attribute type 9 has an invalid length.
[ 1502.649358][T24552] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7203'.
[ 1502.891423][T24554] netlink: 'syz.3.7204': attribute type 29 has an invalid length.
[ 1503.029606][T24554] netlink: 'syz.3.7204': attribute type 29 has an invalid length.
[ 1503.042364][T24558] netlink: 'syz.3.7204': attribute type 29 has an invalid length.
[ 1503.068223][T24561] netlink: 'syz.3.7204': attribute type 29 has an invalid length.
[ 1503.107951][T24564] netlink: 'syz.3.7204': attribute type 29 has an invalid length.
[ 1503.260947][T24573] syz.1.7207[24573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1503.261118][T24573] syz.1.7207[24573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1503.486074][T24576] netlink: 'syz.3.7209': attribute type 4 has an invalid length.
[ 1503.527817][T24576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7209'.
[ 1504.071156][T24583] netlink: 'syz.1.7212': attribute type 9 has an invalid length.
[ 1504.103282][T24583] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.7212'.
[ 1505.748005][T24607] netlink: 'syz.5.7218': attribute type 29 has an invalid length.
[ 1505.798324][T24607] netlink: 'syz.5.7218': attribute type 29 has an invalid length.
[ 1508.701006][T24654] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.7235'.
[ 1508.826809][T24666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7238'.
[ 1509.374920][T24682] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.7244'.
[ 1509.580585][T24687] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7247'.
[ 1509.591980][T24687] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7247'.
[ 1509.603809][T24687] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7247'.
[ 1509.614680][T24687] validate_nla: 4 callbacks suppressed
[ 1509.614692][T24687] netlink: 'syz.3.7247': attribute type 13 has an invalid length.
[ 1509.633036][T24687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7247'.
[ 1510.231613][T24705] sit0: left promiscuous mode
[ 1510.521335][T24710] sit0: entered promiscuous mode
[ 1511.679779][T24734] netlink: 'syz.1.7263': attribute type 10 has an invalid length.
[ 1511.933045][T24736] wg2: entered promiscuous mode
[ 1511.948914][T24736] wg2: entered allmulticast mode
[ 1512.292691][T24753] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7270'.
[ 1512.688830][T24767] netlink: 'syz.4.7275': attribute type 10 has an invalid length.
[ 1513.169726][T24775] ��
: port 2(veth0_to_team) entered blocking state
[ 1513.176531][T24775] ��
: port 2(veth0_to_team) entered disabled state
[ 1513.208288][T24775] veth0_to_team: entered allmulticast mode
[ 1513.216180][T24775] veth0_to_team: entered promiscuous mode
[ 1513.845381][T24791] netlink: 'syz.1.7284': attribute type 10 has an invalid length.
[ 1513.887342][T24791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7284'.
[ 1513.903810][T24793] syz.5.7285[24793] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1513.903952][T24793] syz.5.7285[24793] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1514.077150][T24791] 8021q: adding VLAN 0 to HW filter on device team0
[ 1514.158251][T24791] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1514.189878][T24795] netlink: 'syz.3.7286': attribute type 153 has an invalid length.
[ 1514.203334][T24795] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.7286'.
[ 1514.378455][T24799] sctp: [Deprecated]: syz.3.7286 (pid 24799) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1514.378455][T24799] Use struct sctp_sack_info instead
[ 1514.628100][T24803] mac80211_hwsim hwsim41 .3�c��: renamed from wlan1
[ 1514.830941][T24806] netlink: 'syz.1.7290': attribute type 39 has an invalid length.
[ 1514.946275][T24806] : (slave syz_tun): Releasing backup interface
[ 1515.904262][T24828] netlink: 'syz.5.7295': attribute type 39 has an invalid length.
[ 1515.998768][T24828] veth0_macvtap: left promiscuous mode
[ 1516.159370][T24838] netlink: 196 bytes leftover after parsing attributes in process `syz.1.7300'.
[ 1516.194607][T24838] netlink: 'syz.1.7300': attribute type 29 has an invalid length.
[ 1516.290687][T24842] Dead loop on virtual device ip6_vti0, fix it urgently!
[ 1516.376358][T24838] netlink: 'syz.1.7300': attribute type 29 has an invalid length.
[ 1516.388956][T24843] netlink: 'syz.1.7300': attribute type 29 has an invalid length.
[ 1516.407630][T24844] netlink: 'syz.1.7300': attribute type 29 has an invalid length.
[ 1516.417206][T24838] netlink: 'syz.1.7300': attribute type 29 has an invalid length.
[ 1518.590680][T24887] netlink: 'syz.1.7313': attribute type 10 has an invalid length.
[ 1519.162422][T24901] netlink: 'syz.5.7317': attribute type 10 has an invalid length.
[ 1519.486961][T24906] netlink: 'syz.3.7319': attribute type 10 has an invalid length.
[ 1520.027559][T24920] netlink: 'syz.3.7322': attribute type 10 has an invalid length.
[ 1520.324685][T24922] bridge0: port 1(team0) entered blocking state
[ 1520.332914][T24922] bridge0: port 1(team0) entered disabled state
[ 1520.341713][T24922] team0: entered allmulticast mode
[ 1520.347384][T24922] team_slave_1: entered allmulticast mode
[ 1520.367892][T24922] geneve1: entered allmulticast mode
[ 1520.401278][T24922] team0: entered promiscuous mode
[ 1520.406532][T24922] team_slave_1: entered promiscuous mode
[ 1520.419553][T24922] geneve1: entered promiscuous mode
[ 1520.428377][T24922] mac80211_hwsim hwsim41 .3�c��: entered promiscuous mode
[ 1520.766395][T24939] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7326'.
[ 1520.796546][T24938] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7327'.
[ 1520.809014][T24938] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1521.386380][T24949] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7331'.
[ 1522.069826][T24956] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7334'.
[ 1522.097287][T24956] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7334'.
[ 1522.590358][T24966] netlink: 'syz.3.7336': attribute type 23 has an invalid length.
[ 1522.618420][T24963] netlink: 'syz.3.7336': attribute type 10 has an invalid length.
[ 1522.672717][T24963] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1522.814274][T24972] : (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1522.834437][T24975] netlink: 'syz.1.7339': attribute type 9 has an invalid length.
[ 1522.848155][T24973] netlink: 'syz.4.7338': attribute type 10 has an invalid length.
[ 1522.870860][T24975] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7339'.
[ 1522.916188][T24973] dummy0: entered promiscuous mode
[ 1522.942894][T24973] : (slave dummy0): Enslaving as an active interface with an up link
[ 1524.621788][T25000] netlink: 'syz.3.7347': attribute type 10 has an invalid length.
[ 1524.782701][T25002] netdevsim netdevsim4 ������: renamed from netdevsim0 (while UP)
[ 1525.174135][T25010] netlink: 'syz.1.7350': attribute type 10 has an invalid length.
[ 1525.229300][T25010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7350'.
[ 1525.262061][T25010] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1525.667334][T25026] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7356'.
[ 1527.158715][T25052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1527.166101][T25052] IPv6: NLM_F_CREATE should be set when creating new route
[ 1527.173756][T25052] IPv6: NLM_F_CREATE should be set when creating new route
[ 1527.181214][T25052] IPv6: NLM_F_CREATE should be set when creating new route
[ 1527.212619][T25056] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7365'.
[ 1528.653831][T25083] netlink: 'syz.1.7372': attribute type 10 has an invalid length.
[ 1528.694702][T25083] team0: Device wlan1 is of different type
[ 1528.710208][T25087] syz.5.7373[25087] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1528.710458][T25087] syz.5.7373[25087] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1528.724020][T25085] netlink: 'syz.3.7371': attribute type 10 has an invalid length.
[ 1529.382214][T25103] netlink: 'syz.1.7379': attribute type 9 has an invalid length.
[ 1529.432186][T25103] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7379'.
[ 1529.547306][T25103] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7379'.
[ 1530.580662][T25125] netlink: 'syz.5.7388': attribute type 10 has an invalid length.
[ 1530.833398][T25132] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[ 1531.066437][T25130] netlink: 'syz.4.7390': attribute type 10 has an invalid length.
[ 1531.295203][T25130] netdevsim netdevsim4 ������: entered promiscuous mode
[ 1531.341419][T25130] : (slave ������): Enslaving as an active interface with an up link
[ 1531.548875][T25141] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7393'.
[ 1531.647919][T25141] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7393'.
[ 1531.665914][T25140] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7393'.
[ 1532.529304][T25157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7395'.
[ 1532.551320][T25157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7395'.
[ 1532.616374][T25156] netlink: 'syz.1.7397': attribute type 3 has an invalid length.
[ 1532.630906][T25156] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.7397'.
[ 1532.654697][T25153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7395'.
[ 1532.694103][T25161] netlink: 'syz.5.7399': attribute type 3 has an invalid length.
[ 1532.702602][T25161] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.7399'.
[ 1533.403800][T25177] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.7406'.
[ 1533.431899][T25177] netlink: zone id is out of range
[ 1533.449505][T25177] netlink: zone id is out of range
[ 1533.462908][T25177] netlink: zone id is out of range
[ 1533.483142][T25177] netlink: zone id is out of range
[ 1533.507998][T25177] netlink: zone id is out of range
[ 1533.528538][T25177] netlink: zone id is out of range
[ 1533.538636][T25180] netlink: 'syz.4.7406': attribute type 10 has an invalid length.
[ 1533.554634][T25180] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7406'.
[ 1533.584385][T25177] netlink: zone id is out of range
[ 1533.602866][T25177] netlink: zone id is out of range
[ 1533.644016][T25177] netlink: zone id is out of range
[ 1533.657620][T25177] netlink: zone id is out of range
[ 1533.927071][T25191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7412'.
[ 1534.168904][T25194] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7413'.
[ 1534.196167][T25194] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[ 1534.224436][T25194] CPU: 1 PID: 25194 Comm: syz.1.7413 Not tainted syzkaller #0
[ 1534.231969][T25194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1534.242048][T25194] Call Trace:
[ 1534.245344][T25194]  <TASK>
[ 1534.248289][T25194]  dump_stack_lvl+0x16c/0x230
[ 1534.253002][T25194]  ? show_regs_print_info+0x20/0x20
[ 1534.258219][T25194]  ? load_image+0x3b0/0x3b0
[ 1534.262749][T25194]  sysfs_warn_dup+0x8e/0xa0
[ 1534.267285][T25194]  sysfs_do_create_link_sd+0xc0/0x110
[ 1534.272681][T25194]  device_add_class_symlinks+0x1cf/0x240
[ 1534.278344][T25194]  device_add+0x507/0xc20
[ 1534.282699][T25194]  wiphy_register+0x1e74/0x2c00
[ 1534.287594][T25194]  ? cfg80211_event_work+0x40/0x40
[ 1534.292909][T25194]  ? minstrel_ht_alloc+0x88a/0x990
[ 1534.298044][T25194]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1534.304157][T25194]  ieee80211_register_hw+0x2de8/0x3b10
[ 1534.309740][T25194]  ? ieee80211_register_hw+0xf61/0x3b10
[ 1534.315316][T25194]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1534.320986][T25194]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1534.326921][T25194]  ? __debug_object_init+0xe8/0x430
[ 1534.332180][T25194]  ? __asan_memset+0x22/0x40
[ 1534.336803][T25194]  ? __hrtimer_init+0x186/0x270
[ 1534.341682][T25194]  mac80211_hwsim_new_radio+0x2a00/0x4cf0
[ 1534.347452][T25194]  ? mac80211_hwsim_free+0x220/0x220
[ 1534.352843][T25194]  ? rcu_is_watching+0x15/0xb0
[ 1534.357631][T25194]  ? kstrndup+0xbd/0x140
[ 1534.361900][T25194]  hwsim_new_radio_nl+0xd78/0x19d0
[ 1534.367037][T25194]  ? __nla_validate+0x50/0x50
[ 1534.371757][T25194]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1534.378137][T25194]  ? __nla_parse+0x40/0x50
[ 1534.382588][T25194]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1534.388955][T25194]  genl_family_rcv_msg_doit+0x209/0x2f0
[ 1534.394542][T25194]  ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0
[ 1534.400733][T25194]  ? bpf_lsm_capable+0x9/0x10
[ 1534.405435][T25194]  ? security_capable+0x89/0xb0
[ 1534.410320][T25194]  genl_rcv_msg+0x60b/0x790
[ 1534.414951][T25194]  ? genl_bind+0x360/0x360
[ 1534.419407][T25194]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1534.425753][T25194]  ? ref_tracker_free+0x634/0x7d0
[ 1534.430806][T25194]  netlink_rcv_skb+0x216/0x480
[ 1534.435591][T25194]  ? genl_bind+0x360/0x360
[ 1534.440071][T25194]  ? netlink_ack+0x1110/0x1110
[ 1534.444915][T25194]  ? __lock_acquire+0x7c80/0x7c80
[ 1534.449992][T25194]  ? down_read+0x1ac/0x2e0
[ 1534.454438][T25194]  genl_rcv+0x28/0x40
[ 1534.458445][T25194]  netlink_unicast+0x751/0x8d0
[ 1534.463241][T25194]  netlink_sendmsg+0x8c1/0xbe0
[ 1534.468044][T25194]  ? netlink_getsockopt+0x580/0x580
[ 1534.473465][T25194]  ? aa_sock_msg_perm+0x94/0x150
[ 1534.478428][T25194]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1534.483744][T25194]  ? security_socket_sendmsg+0x80/0xa0
[ 1534.489220][T25194]  ? netlink_getsockopt+0x580/0x580
[ 1534.494442][T25194]  ____sys_sendmsg+0x5bf/0x950
[ 1534.499236][T25194]  ? __asan_memset+0x22/0x40
[ 1534.503873][T25194]  ? __sys_sendmsg_sock+0x30/0x30
[ 1534.508917][T25194]  ? __import_iovec+0x5f2/0x860
[ 1534.513822][T25194]  ? import_iovec+0x73/0xa0
[ 1534.518369][T25194]  ___sys_sendmsg+0x220/0x290
[ 1534.523093][T25194]  ? __sys_sendmsg+0x270/0x270
[ 1534.527938][T25194]  __se_sys_sendmsg+0x1a5/0x270
[ 1534.532816][T25194]  ? perf_trace_preemptirq_template+0x281/0x340
[ 1534.539106][T25194]  ? __x64_sys_sendmsg+0x80/0x80
[ 1534.544084][T25194]  ? lockdep_hardirqs_on+0x98/0x150
[ 1534.549310][T25194]  do_syscall_64+0x55/0xb0
[ 1534.553750][T25194]  ? clear_bhb_loop+0x40/0x90
[ 1534.558443][T25194]  ? clear_bhb_loop+0x40/0x90
[ 1534.563136][T25194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1534.569048][T25194] RIP: 0033:0x7efcc2f8eec9
[ 1534.573489][T25194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1534.593111][T25194] RSP: 002b:00007efcc3ef4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1534.601562][T25194] RAX: ffffffffffffffda RBX: 00007efcc31e6090 RCX: 00007efcc2f8eec9
[ 1534.609551][T25194] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1534.617541][T25194] RBP: 00007efcc3011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1534.625528][T25194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1534.633511][T25194] R13: 00007efcc31e6128 R14: 00007efcc31e6090 R15: 00007fffb47a9c98
[ 1534.641518][T25194]  </TASK>
[ 1534.816109][T25200] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7415'.
[ 1539.385780][T25265] __nla_validate_parse: 4 callbacks suppressed
[ 1539.385802][T25265] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7439'.
[ 1539.566578][T25269] netlink: 'syz.5.7443': attribute type 10 has an invalid length.
[ 1539.668782][T25264] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7441'.
[ 1539.695340][T25269] hsr_slave_0 (unregistering): left promiscuous mode
[ 1541.106465][T25290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7450'.
[ 1541.485886][T25298] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7455'.
[ 1541.800246][T25309] netlink: 'syz.1.7460': attribute type 10 has an invalid length.
[ 1541.986097][T25309] hsr_slave_0 (unregistering): left promiscuous mode
[ 1543.911124][T25338] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7470'.
[ 1544.081232][T25345] syzkaller0: entered promiscuous mode
[ 1544.092616][T25345] syzkaller0: entered allmulticast mode
[ 1544.117278][T25349] netlink: 'syz.4.7474': attribute type 10 has an invalid length.
[ 1544.265969][T25349] hsr_slave_0 (unregistering): left promiscuous mode
[ 1545.717652][T25385] netlink: 'syz.1.7493': attribute type 10 has an invalid length.
[ 1546.408792][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.415228][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1547.640642][T25421] syzkaller0: entered promiscuous mode
[ 1547.667618][T25421] syzkaller0: entered allmulticast mode
[ 1548.103747][T25435] syzkaller0: entered promiscuous mode
[ 1548.117606][T25435] syzkaller0: entered allmulticast mode
[ 1548.417168][T25448] netlink: 'syz.1.7527': attribute type 29 has an invalid length.
[ 1548.431535][T25448] netlink: 'syz.1.7527': attribute type 29 has an invalid length.
[ 1548.655174][T25454] netlink: 'syz.3.7519': attribute type 28 has an invalid length.
Connection to 10.128.1.249 closed by remote host.
[ 1549.317116][ T5995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.551710][ T5995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.685582][T13817] bond0: (slave syz_tun): Releasing backup interface
[ 1549.808548][ T5995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.945816][ T5995] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode
[ 1549.955585][ T5995] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[ 1549.969184][ T5995] team0: Port device netdevsim0 removed
[ 1549.976366][ T5995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1551.717304][ T5995] veth0_to_team: left allmulticast mode
[ 1551.723018][ T5995] veth0_to_team: left promiscuous mode
[ 1551.729133][ T5995] ��
: port 2(veth0_to_team) entered disabled state
[ 1551.739541][ T5995] veth0_to_bridge: left allmulticast mode
[ 1551.745341][ T5995] veth0_to_bridge: left promiscuous mode
[ 1551.754414][ T5995] ��
: port 1(veth0_to_bridge) entered disabled state
[ 1551.767292][ T5995] hsr_slave_1: left promiscuous mode
[ 1551.773263][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1551.780769][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1551.788604][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1551.796005][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1551.803910][ T5995] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[ 1551.813259][ T5995] batman_adv: batadv0: Removing interface: hsr_slave_1
[ 1551.827665][ T5995] veth1_vlan: left allmulticast mode
[ 1551.833184][ T5995] veth1_vlan: left promiscuous mode
[ 1552.071939][ T5995] geneve1 (unregistering): left promiscuous mode
[ 1552.078736][ T5995] geneve1 (unregistering): left allmulticast mode
[ 1552.089937][ T5995] team0 (unregistering): Port device geneve1 removed
[ 1552.136988][ T5995] macvlan1 (unregistering): left promiscuous mode
[ 1552.145276][ T5995] macvlan1 (unregistering): left allmulticast mode
[ 1552.154604][ T5995] team0 (unregistering): Port device macvlan1 removed
[ 1552.202730][ T5995] vlan0 (unregistering): left promiscuous mode
[ 1552.209017][ T5995] veth0_vlan (unregistering): left promiscuous mode
[ 1552.216831][ T5995] team0 (unregistering): Port device vlan0 removed
[ 1552.433331][ T5995] team_slave_1 (unregistering): left promiscuous mode
[ 1552.442032][ T5995] team_slave_1 (unregistering): left allmulticast mode
[ 1552.450321][ T5995] team0 (unregistering): Port device team_slave_1 removed
[ 1552.543332][ T5995]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1552.553619][ T5995] bond_slave_1 (unregistering): left promiscuous mode
[ 1552.599129][ T5995]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1552.609118][ T5995] bond_slave_0 (unregistering): left promiscuous mode
[ 1552.815104][ T5995]  (unregistering): (slave batadv0): Releasing backup interface
[ 1552.823713][ T5995] batadv0 (unregistering): left promiscuous mode
[ 1553.107081][ T5995]  (unregistering): Released all slaves
[ 1553.420373][ T5995] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.517727][ T5995] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.574331][ T5995] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.742002][ T5995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.835045][ T5995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.894990][ T5995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.972579][ T5995] bond0: (slave netdevsim0): Releasing backup interface
[ 1553.982292][ T5995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.110705][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.188128][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.245183][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.323503][ T5995] : (slave ������): Releasing backup interface
[ 1554.330472][ T5995] netdevsim netdevsim4 ������ (unregistering): left promiscuous mode
[ 1554.340859][ T5995] netdevsim netdevsim4 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.712467][ T5995] ip6gretap0 (unregistering): left allmulticast mode
[ 1554.719339][ T5995] ip6gretap0 (unregistering): left promiscuous mode
[ 1554.726012][ T5995] �
: port 1(ip6gretap0) entered disabled state
[ 1556.050074][ T5995] 
[ 1556.052437][ T5995] ======================================================
[ 1556.059454][ T5995] WARNING: possible circular locking dependency detected
[ 1556.066566][ T5995] syzkaller #0 Not tainted
[ 1556.070985][ T5995] ------------------------------------------------------
[ 1556.078031][ T5995] kworker/u4:17/5995 is trying to acquire lock:
[ 1556.084276][ T5995] ffff88806500cd00 (team->team_lock_key#10){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[ 1556.094037][ T5995] 
[ 1556.094037][ T5995] but task is already holding lock:
[ 1556.101402][ T5995] ffff88802e238768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[ 1556.111776][ T5995] 
[ 1556.111776][ T5995] which lock already depends on the new lock.
[ 1556.111776][ T5995] 
[ 1556.122190][ T5995] 
[ 1556.122190][ T5995] the existing dependency chain (in reverse order) is:
[ 1556.131208][ T5995] 
[ 1556.131208][ T5995] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[ 1556.138953][ T5995]        __mutex_lock+0x129/0xcc0
[ 1556.144099][ T5995]        ieee80211_open+0x144/0x200
[ 1556.149330][ T5995]        __dev_open+0x2bc/0x430
[ 1556.154264][ T5995]        dev_open+0xab/0x170
[ 1556.158874][ T5995]        team_add_slave+0xae7/0x2660
[ 1556.164171][ T5995]        do_setlink+0xe14/0x3fb0
[ 1556.169132][ T5995]        rtnl_newlink+0x175b/0x2020
[ 1556.174352][ T5995]        rtnetlink_rcv_msg+0x7c7/0xf10
[ 1556.179835][ T5995]        netlink_rcv_skb+0x216/0x480
[ 1556.185140][ T5995]        netlink_unicast+0x751/0x8d0
[ 1556.190439][ T5995]        netlink_sendmsg+0x8c1/0xbe0
[ 1556.195735][ T5995]        ____sys_sendmsg+0x5bf/0x950
[ 1556.201041][ T5995]        ___sys_sendmsg+0x220/0x290
[ 1556.206263][ T5995]        __se_sys_sendmsg+0x1a5/0x270
[ 1556.211651][ T5995]        do_syscall_64+0x55/0xb0
[ 1556.216605][ T5995]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1556.223118][ T5995] 
[ 1556.223118][ T5995] -> #0 (team->team_lock_key#10){+.+.}-{3:3}:
[ 1556.231387][ T5995]        __lock_acquire+0x2ddb/0x7c80
[ 1556.236775][ T5995]        lock_acquire+0x197/0x410
[ 1556.241804][ T5995]        __mutex_lock+0x129/0xcc0
[ 1556.246843][ T5995]        team_del_slave+0x32/0x1c0
[ 1556.251964][ T5995]        team_device_event+0x28d/0xa20
[ 1556.257440][ T5995]        notifier_call_chain+0x197/0x390
[ 1556.263118][ T5995]        unregister_netdevice_many_notify+0xf36/0x1810
[ 1556.269997][ T5995]        unregister_netdevice_queue+0x324/0x360
[ 1556.276274][ T5995]        _cfg80211_unregister_wdev+0x16b/0x580
[ 1556.282458][ T5995]        ieee80211_remove_interfaces+0x496/0x680
[ 1556.288820][ T5995]        ieee80211_unregister_hw+0x5d/0x2a0
[ 1556.294748][ T5995]        mac80211_hwsim_del_radio+0x274/0x450
[ 1556.300826][ T5995]        hwsim_exit_net+0x585/0x640
[ 1556.306046][ T5995]        cleanup_net+0x6f4/0xb90
[ 1556.311007][ T5995]        process_scheduled_works+0xa45/0x15b0
[ 1556.317086][ T5995]        worker_thread+0xa55/0xfc0
[ 1556.322213][ T5995]        kthread+0x2fa/0x390
[ 1556.326815][ T5995]        ret_from_fork+0x48/0x80
[ 1556.331800][ T5995]        ret_from_fork_asm+0x11/0x20
[ 1556.337134][ T5995] 
[ 1556.337134][ T5995] other info that might help us debug this:
[ 1556.337134][ T5995] 
[ 1556.347397][ T5995]  Possible unsafe locking scenario:
[ 1556.347397][ T5995] 
[ 1556.354865][ T5995]        CPU0                    CPU1
[ 1556.360252][ T5995]        ----                    ----
[ 1556.365796][ T5995]   lock(&rdev->wiphy.mtx);
[ 1556.370323][ T5995]                                lock(team->team_lock_key#10);
[ 1556.377908][ T5995]                                lock(&rdev->wiphy.mtx);
[ 1556.384963][ T5995]   lock(team->team_lock_key#10);
[ 1556.390020][ T5995] 
[ 1556.390020][ T5995]  *** DEADLOCK ***
[ 1556.390020][ T5995] 
[ 1556.398182][ T5995] 5 locks held by kworker/u4:17/5995:
[ 1556.403583][ T5995]  #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1556.414534][ T5995]  #1: ffffc90004e17d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0
[ 1556.425255][ T5995]  #2: ffffffff8dfae850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90
[ 1556.434690][ T5995]  #3: ffffffff8dfbb688 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[ 1556.444543][ T5995]  #4: ffff88802e238768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680
[ 1556.455354][ T5995] 
[ 1556.455354][ T5995] stack backtrace:
[ 1556.461246][ T5995] CPU: 0 PID: 5995 Comm: kworker/u4:17 Not tainted syzkaller #0
[ 1556.468899][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1556.478973][ T5995] Workqueue: netns cleanup_net
[ 1556.483768][ T5995] Call Trace:
[ 1556.487149][ T5995]  <TASK>
[ 1556.490092][ T5995]  dump_stack_lvl+0x16c/0x230
[ 1556.494787][ T5995]  ? load_image+0x3b0/0x3b0
[ 1556.499305][ T5995]  ? show_regs_print_info+0x20/0x20
[ 1556.504523][ T5995]  ? print_circular_bug+0x12b/0x1a0
[ 1556.509762][ T5995]  check_noncircular+0x2bd/0x3c0
[ 1556.514735][ T5995]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1556.519946][ T5995]  ? lockdep_lock+0xe0/0x220
[ 1556.524556][ T5995]  ? __lock_acquire+0x1334/0x7c80
[ 1556.529610][ T5995]  ? _find_first_zero_bit+0xd3/0x100
[ 1556.534925][ T5995]  __lock_acquire+0x2ddb/0x7c80
[ 1556.539808][ T5995]  ? verify_lock_unused+0x140/0x140
[ 1556.545026][ T5995]  ? verify_lock_unused+0x140/0x140
[ 1556.550255][ T5995]  lock_acquire+0x197/0x410
[ 1556.554780][ T5995]  ? team_del_slave+0x32/0x1c0
[ 1556.559558][ T5995]  ? __might_sleep+0xe0/0xe0
[ 1556.564169][ T5995]  ? read_lock_is_recursive+0x20/0x20
[ 1556.569558][ T5995]  __mutex_lock+0x129/0xcc0
[ 1556.574081][ T5995]  ? team_del_slave+0x32/0x1c0
[ 1556.578855][ T5995]  ? __lock_acquire+0x7c80/0x7c80
[ 1556.583892][ T5995]  ? rcu_is_watching+0x15/0xb0
[ 1556.588675][ T5995]  ? trace_contention_end+0x39/0xe0
[ 1556.593906][ T5995]  ? __mutex_lock+0x304/0xcc0
[ 1556.598599][ T5995]  ? team_del_slave+0x32/0x1c0
[ 1556.603369][ T5995]  ? mutex_lock_nested+0x20/0x20
[ 1556.608328][ T5995]  ? bond_netdev_event+0xe1/0xef0
[ 1556.613386][ T5995]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1556.619035][ T5995]  ? bond_ipsec_offload_ok+0x410/0x410
[ 1556.624514][ T5995]  team_del_slave+0x32/0x1c0
[ 1556.629115][ T5995]  team_device_event+0x28d/0xa20
[ 1556.634065][ T5995]  notifier_call_chain+0x197/0x390
[ 1556.639191][ T5995]  unregister_netdevice_many_notify+0xf36/0x1810
[ 1556.645535][ T5995]  ? lock_chain_count+0x20/0x20
[ 1556.650408][ T5995]  ? unregister_netdevice_many+0x20/0x20
[ 1556.656057][ T5995]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1556.661879][ T5995]  ? __lock_acquire+0x7c80/0x7c80
[ 1556.666916][ T5995]  unregister_netdevice_queue+0x324/0x360
[ 1556.672654][ T5995]  ? list_netdevice+0x730/0x730
[ 1556.677521][ T5995]  ? kernfs_remove_by_name_ns+0x117/0x150
[ 1556.683255][ T5995]  _cfg80211_unregister_wdev+0x16b/0x580
[ 1556.688907][ T5995]  ieee80211_remove_interfaces+0x496/0x680
[ 1556.694821][ T5995]  ? ieee80211_do_stop+0x1db0/0x1db0
[ 1556.700125][ T5995]  ? rcu_is_watching+0x15/0xb0
[ 1556.704906][ T5995]  ieee80211_unregister_hw+0x5d/0x2a0
[ 1556.710294][ T5995]  mac80211_hwsim_del_radio+0x274/0x450
[ 1556.715853][ T5995]  ? rhashtable_remove_fast+0xbf0/0xbf0
[ 1556.721414][ T5995]  hwsim_exit_net+0x585/0x640
[ 1556.726105][ T5995]  ? hwsim_init_net+0x90/0x90
[ 1556.730799][ T5995]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[ 1556.736618][ T5995]  cleanup_net+0x6f4/0xb90
[ 1556.741048][ T5995]  ? ops_free_list+0x3b0/0x3b0
[ 1556.745828][ T5995]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1556.751040][ T5995]  ? process_scheduled_works+0x957/0x15b0
[ 1556.756772][ T5995]  ? process_scheduled_works+0x957/0x15b0
[ 1556.762507][ T5995]  process_scheduled_works+0xa45/0x15b0
[ 1556.768166][ T5995]  ? assign_work+0x400/0x400
[ 1556.772804][ T5995]  ? assign_work+0x39e/0x400
[ 1556.777426][ T5995]  worker_thread+0xa55/0xfc0
[ 1556.782055][ T5995]  kthread+0x2fa/0x390
[ 1556.786145][ T5995]  ? pr_cont_work+0x560/0x560
[ 1556.790842][ T5995]  ? kthread_blkcg+0xd0/0xd0
[ 1556.795445][ T5995]  ret_from_fork+0x48/0x80
[ 1556.799874][ T5995]  ? kthread_blkcg+0xd0/0xd0
[ 1556.804474][ T5995]  ret_from_fork_asm+0x11/0x20
[ 1556.809268][ T5995]  </TASK>
[ 1556.817764][ T5995] mac80211_hwsim hwsim41 .3�c�� (unregistering): left promiscuous mode
[ 1556.827227][ T5995] team0: Port device .3�c�� removed
[ 1557.101216][ T5995] mac80211_hwsim hwsim39 wlan1 (unregistering): left promiscuous mode
[ 1557.109456][ T5995] mac80211_hwsim hwsim39 wlan1 (unregistering): left allmulticast mode
[ 1557.119348][ T5995] team0: Port device wlan1 removed
[ 1558.965365][ T5995] team0: Port device .3�c��aaaaaaaaa removed